Using putty to debug ssh through a firewall



I currently use ssh to access things outside of a firewall. The
firewall allows outbound traffic on port 23, so I run an ssh server on
that port (sshd for cygwin). I then connect with an ssh client on
that port, and can set up any port forwarding that I desire. It
worked beautifully until just the other day. Now, when I connect, I
the message exchange hangs. Putty doesn't give enough detail on what
the message exchange actually is, so here is some output from the
cygwin ssh implementation using maximum verbosity:


$ ssh -vvv -p 23 aaa.bbb.ccc.ddd
OpenSSH_4.6p1, OpenSSL 0.9.8e 23 Feb 2007
debug2: ssh_connect: needpriv 0
debug1: Connecting to aaa.bbb.ccc.ddd [aaa.bbb.ccc.ddd] port 23.
debug1: Connection established.
debug1: identity file /cygdrive/c/Documents and Settings/user/.ssh/
identity type -1
debug1: identity file /cygdrive/c/Documents and Settings/user/.ssh/
id_rsa type -1
debug1: identity file /cygdrive/c/Documents and Settings/user/.ssh/
id_dsa type -1
debug1: Remote protocol version 1.99, remote software version
OpenSSH_4.6
debug1: match: OpenSSH_4.6 pat OpenSSH*
debug1: Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_4.6
debug2: fd 3 setting O_NONBLOCK
debug1: SSH2_MSG_KEXINIT sent



And it just hangs there until the connection times out. Any ideas on
what might be causing a hang at that stage?

.



Relevant Pages

  • Re: Problems with ipfw and ssh
    ... I get this error when updating my firewall rules via ssh. ... ${addcmd} 50 allow all from any to any via lo0 ... debug1: PAM: cleanup ...
    (freebsd-questions)
  • Re: Mac `owned in hacking competition
    ... the router's port forwarding rules. ... The firewall or a NAT router only stops connections initiated from ... ssh will let you set up forwarded ports in both ... You start an ssh session from the target machine (this is ...
    (uk.comp.sys.mac)
  • Re: SSH through wireless router
    ... When you say that I should try ssh ... Connection closed by remote host ... When I went to sshd to port 2222: ... debug1: read PEM private key done: type RSA ...
    (Debian-User)
  • RE: ssh attempts
    ... Change the port to something different than port 22. ... Subject: Re: ssh attempts ... > forget the excellent iptables firewall you probably already have on ... >>> Computer Emergency Response Teams, ...
    (Security-Basics)
  • Re: Reverse Shell?
    ... >> behind a firewall so I can't ssh into their computer. ... > follow the tunnel back to their machine and then help them. ... Connections to that port will be forwarded through the ...
    (Debian-User)