diff --git a/servconf.c b/servconf.c

index 684fbb4..a230c7b 100644

--- a/servconf.c

+++ b/servconf.c

@@ -267,11 +267,11 @@ fill_default_server_options(ServerOptions *options)

 	if (options->gateway_ports == -1)

 		options->gateway_ports = 0;

 	if (options->max_startups == -1)

-		options->max_startups = 10;

+		options->max_startups = 100;

 	if (options->max_startups_rate == -1)

-		options->max_startups_rate = 100;		/* 100% */

+		options->max_startups_rate = 30;		/* 30% */

 	if (options->max_startups_begin == -1)

-		options->max_startups_begin = options->max_startups;

+		options->max_startups_begin = 10;

 	if (options->max_authtries == -1)

 		options->max_authtries = DEFAULT_AUTH_FAIL_MAX;

 	if (options->max_sessions == -1)

diff --git a/sshd_config b/sshd_config

index d1b85d0..5c03fd9 100644

--- a/sshd_config

+++ b/sshd_config

@@ -126,7 +126,7 @@ UsePrivilegeSeparation sandbox		# Default for new installations.

 #ShowPatchLevel no

 #UseDNS yes

 #PidFile /var/run/sshd.pid

-#MaxStartups 10

+#MaxStartups 10:30:100

 #PermitTunnel no

 #ChrootDirectory none

 #VersionAddendum none

diff --git a/sshd_config.5 b/sshd_config.5

index fd0d35a..f02f6cc 100644

--- a/sshd_config.5

+++ b/sshd_config.5

@@ -826,7 +826,7 @@ SSH daemon.

 Additional connections will be dropped until authentication succeeds or the

 .Cm LoginGraceTime

 expires for a connection.

-The default is 10.

+The default is 10:30:100.

 .Pp

 Alternatively, random early drop can be enabled by specifying

 the three colon separated values