Skip to main content

Security Features

Abdal 4iProto Server includes built-in defenses for authentication abuse and role separation.

Built-in Brute Force Protection​

  • Tracks failed authentication attempts
  • Automatically blocks source IPs after the configured threshold
  • Threshold is controlled by max_auth_attempts in server_config.json

Attack Monitoring​

  • Logs failed login attempts with IP tracking
  • Helps identify attack patterns and noisy sources
  • Works together with persistent blocked IP storage

Customizable Authentication Limits​

Set how many failed attempts are allowed before blocking:

{
  "max_auth_attempts": 3
}

IP Blocking System​

Blocked source IPs are stored in blocked_ips.json so protections survive restarts. See Blocked IPs.

Server Banner Customization​

Use server_version to customize or obscure the SSH banner presented to clients.

Access Levels​

RoleCapabilities
adminTunneling + operating system shell command execution
userTunneling only

Destination Controls​

Per-user policies can also block:

  • Unauthorized websites / domains
  • Unauthorized destination IPs

Configure these in Users Configuration.

  • invalid_logins.log
  • blocked_ips.json
  • Console security and connection output

Continue with Logs.