Re: ssh won't work through router/firewall

From: pt (mnemotronic_at_yahoo.com)
Date: 04/27/04

  • Next message: someone: "Re: FTP/SSH question" 
    Date: 26 Apr 2004 20:33:11 -0700

    per@hedeland.org (Per Hedeland) wrote in message news:<c6iav9$42s$1@hedeland.org>...
    > In article <da662010.0404252124.89b996c@posting.google.com>
    > mnemotronic@yahoo.com (pt) writes:
    > >
    > >/var/log/secure says:
    > >Apr 25 23:12:29 turkey sshd[23676]: refused connect from
    > >c-24-8-x-y.client.comcast.net (24.8.x.y)
    > >
    > >hosts.allow says:
    > >ssh : ALL
    >
    > Try
    >
    > sshd : ALL
    >
    > instead. Generally the name in the hosts.* files should be that of the
    > process checking them for access rights - i.e. sshd in this case, not
    > ssh.

    Bingo! That's it! Thanks very much! Now, I would feel better if I
    could trim the "ALL" client spec down to a few, selected locations:

    sshd : 192.168.1. , LOCAL , .comcast.net , .where_I_work.com ,
    .some.other.fqdn

    Is that correct???
      
    >
    > --Per Hedeland
    > per@hedeland.org

  • Next message: someone: "Re: FTP/SSH question"

    Relevant Pages

    • Re: ssh wont work through router/firewall
      ... >ssh: ALL ... Generally the name in the hosts.* files should be that of the ... process checking them for access rights - i.e. sshd in this case, ... --Per Hedeland ...
      (comp.security.ssh)
    • Re: ssh with tcp_wrappers!! contd/-
      ... Thanks a lot for such a huge response, of course typing mistake, i was using DenyHost not DenyGhost; as suggested by david and others i did this, ... Login, as root, to my Linux system containing the sshd server. ... i am not willing to compile openssh package is there any way out via rpm installation. ... Then try to ssh to localhost. ...
      (RedHat)
    • Re: use ipchains to block all ports > 60,000
      ... else going on here except sshd which allows me to log in and monitor the ... Telnet not running but here's the ouput of ssh -V and sshd -V ... OK, ran that from an external box and it showed open ports 22, 80, plus ... My ISP looked for evidence of massive scans emanating from my ip address ...
      (comp.os.linux.security)
    • remote administration of upgrades
      ... server that I administer runs FreeBSD 4.8, ... have ssh access to ... don't want to fubar sshd and then not be able to ... kill only the ...
      (freebsd-questions)
    • Re: Is OpenSSH 3.5p1 secure?
      ... Do not allow root access over ssh. ... Do allow access over ssh for one and only one user. ... Here are a couple specific recommendations for you that you may wish ... Make sure your Protocol 2 RSA or DSA sshd keys are at the very ...
      (comp.security.ssh)