Re: openssh 3.6.1p2 and ssh support for v1 ?

From: Richard E. Silverman (res_at_qoxp.net)
Date: 10/19/05


Date: 19 Oct 2005 15:23:48 -0400


>>>>> "TV" == Tom V <tvanover@localhost.com> writes:

    TV> Hi, I've got a bunch of linux servers running openssh daemon
    TV> 3.6.1p2 In the sshd_config, we've got this line 'Protocol 2'

    TV> Our nessus scans show that this sshd is supporting versions 1.99
    TV> and 2.00

    TV> I understood that 1.99 means that drop back support to ssh v1 is
    TV> enabled, is this correct ?

I'm not sure what this means -- the daemon advertises a single version
number, not two. If it says 2.00, then it supports only protocol 2. If
it says 1.99 then it supports 2 and 1.5. It can't support "1.99 and 2.00".

    TV> If it is, then why doesn't the line "protocol 2" disable this
    TV> support for v1 ? Or do i need another parameter to disable support
    TV> for v1 ?

That would do it. If you changed that setting, have you restarted sshd
since changing it?

-- 
  Richard Silverman
  res@qoxp.net