Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Vista
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Focus On: Vista
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Secure Shell
Back to list
|
Post reply
Connection closed by remote host
May 06 2008 11:27AM
boris brinza (boris brinza htsolution sk)
(2 replies)
Re: Connection closed by remote host
May 07 2008 02:53AM
Ross Del Duca (delducra mac com)
Re: Connection closed by remote host
May 06 2008 07:56PM
Aslan Carlos (aslan digirati com br)
Are you use Tcpd (Tcpwrapper) restrictions? I got some cases with this
problem.
On Tue, 2008-05-06 at 13:27 +0200, boris brinza wrote:
> Hello,
>
> I have strange problems with connecting to remote machine running suse
> enterprise 9.0 sp3 using ssh
>
> After server is restarted, everything works fine.
> Then, after 5-6 days, sshd starts to drop incoming connections.
> Server has IP from private network range, i connect to router with
> public IP, port 222, which is then forwarded to my server (port 22)
> Sometimes, ssh starts to work, but 10 minutes later, again, connections
> are refused.
>
> Here is log i've got at client side:
>
> hts-fw:~# ssh xxx.xxx.xxx.xxx -p 222 -vvv
> OpenSSH_4.3p2 Debian-9, OpenSSL 0.9.8c 05 Sep 2006
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> debug2: ssh_connect: needpriv 0
> Connecting to xxx.xxx.xxx.xxx [xxx.xxx.xxx.xxx] port 222.
> debug1: Connection established.
> debug1: permanently_set_uid: 0/0
> debug1: identity file /root/.ssh/identity type -1
> debug1: identity file /root/.ssh/id_rsa type -1
> debug1: identity file /root/.ssh/id_dsa type -1
> ssh_exchange_identification: Connection closed by remote host
>
> Have anyone anything, that can help?
> Tahnks in advance
>
> Boris
>
--
Aslan Carlos <aslan (at) digirati.com (dot) br [email concealed]>
0? *?H?÷
?0?10 +0? *?H?÷
?+0?ä0?M Þ¦Ó)ïS?Q.?Lúhh¨0
*?H?÷
0b10 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA0
071113134228Z
081112134228Z0G10UThawte Freemail Member1$0" *?H?÷
aslan (at) digirati.com (dot) br0 [email concealed]?"0
*?H?÷
?0?
?ÉêWÛoÊ©&3AúûÆdq½i?{N©8B³·åá#S?;a1uQº»m?nQ?®EOu;õ£?¾ìJ:)r
Ã߸,V?lauÄ9?í`")b÷?bXN[?Á+Q·
xIÀ3¡¸?P°HQèa?ÀÞ
Cg³
`Kë/?YPØ-AÁ?¯?¤ÉÀî¤e9úîÛàÙôÏæ=?è? ?R¦Î0?? /5pë·uàé%8?å?c0º'??N?inD?[ ì¬Ô??O^læ?Yô?ôÿÓw?&÷sìYÒÄ?®Hãýû'QqgRÈQ?ÊgAÞMo·Ü?Oû`ãè,ï£2000 U0aslan (at) digirati.com (dot) br0 [email concealed]Uÿ00
*?H?÷
??
×ìÒ© Øûí°*dkàon?ëºå{?LR??I??¾Y?¾îQGGôL§P?û?_¿?°µâE???
s?Idñ?Ç?^??ì¡nÑqí?Oyö°ö²aÔ??¶t1èIPÏ%Ø?Ùà?¶+<þIJ¬L?ç"ZØù?K0??0?¨
0
*?H?÷
0Ñ10 UZA10UWestern Cape10U Cape Town10U
Thawte Consulting1(0&UCertification Services Division1$0"UThawte Personal Freemail CA1+0) *?H?÷
personal-freemail (at) thawte (dot) com0 [email concealed]
030717000000Z
130716235959Z0b10 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA0?0
*?H?÷
0?Ħ<UsUûN¹Ê?ZhÀupßéÿ£ì½Íõ[òv½:aò¿QÎÔåP
0×cZ,?p?ÝÉð+?Zª?qV˯<çñ?6$*Ï+Õó?w=¾+þ»>¿@?d×§¦»?eÑÅ*T?H§¶Ñ<
a@dr`·û£?0?0Uÿ0ÿ0CU<0:08 6 4?2http://crl.tha
wte.com/ThawtePersonalFreemailCA.crl0U0)U"0 ¤010UPrivateLabel2-1380
*?H?÷
H?ÑP?ê.Ì
£f¬g¯¬¾Â¡C??L!¸ø6ª-?6/ÀôP ?p<ýáabÃÙ:~?±?Å?t?%P?bÇÛ'qW%Ý©?9?? Oe_?Ú÷÷?ÖÆN®öê4å[5MwãV!x?Ü!5Þ$±ÓFÿ]_eO1?ü0?ø0v0b10 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CAÞ¦Ó)ïS?Q.?Lúhh¨0 + ]0 *?H?÷
1 *?H?÷
0 *?H?÷
1
080506195604Z0# *?H?÷
1zÔ¿p§?ï??±Ô9=Îú~¨¶0
*?H?÷
??®ùw¶Ü)BZmW¤{ þQhr&
KÁ«×4|Ð ?L·0Õ?¹6Xô?Î4mâ{W?W¾8??¿Òèøq;`sí=Dبîp êQ{L+D?`?è«?ð@þ=^£dH}z
?ÌÓ2ÀKd[w?ÅT??8=??T0¸ÖQ?òìA?å/? ¼
??ݼð$Q±õðÈ`qϦ¾sÎW?Óïø¾ùäêr_'!ãù.7l?#/jác&?q²ðBº<Tý'ý
ÒaøÀ
8ZW¶l¯sn§Ï8O`âOÆF?§?~YºÌ£?>Þr_ò±Ü
[ reply ]
Privacy Statement
Copyright 2007, SecurityFocus
problem.
On Tue, 2008-05-06 at 13:27 +0200, boris brinza wrote:
> Hello,
>
> I have strange problems with connecting to remote machine running suse
> enterprise 9.0 sp3 using ssh
>
> After server is restarted, everything works fine.
> Then, after 5-6 days, sshd starts to drop incoming connections.
> Server has IP from private network range, i connect to router with
> public IP, port 222, which is then forwarded to my server (port 22)
> Sometimes, ssh starts to work, but 10 minutes later, again, connections
> are refused.
>
> Here is log i've got at client side:
>
> hts-fw:~# ssh xxx.xxx.xxx.xxx -p 222 -vvv
> OpenSSH_4.3p2 Debian-9, OpenSSL 0.9.8c 05 Sep 2006
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> debug2: ssh_connect: needpriv 0
> Connecting to xxx.xxx.xxx.xxx [xxx.xxx.xxx.xxx] port 222.
> debug1: Connection established.
> debug1: permanently_set_uid: 0/0
> debug1: identity file /root/.ssh/identity type -1
> debug1: identity file /root/.ssh/id_rsa type -1
> debug1: identity file /root/.ssh/id_dsa type -1
> ssh_exchange_identification: Connection closed by remote host
>
> Have anyone anything, that can help?
> Tahnks in advance
>
> Boris
>
--
Aslan Carlos <aslan (at) digirati.com (dot) br [email concealed]>
0? *?H?÷
?0?10 +0? *?H?÷
?+0?ä0?M Þ¦Ó)ïS?Q.?Lúhh¨0
*?H?÷
0b10 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA0
071113134228Z
081112134228Z0G10UThawte Freemail Member1$0" *?H?÷
aslan (at) digirati.com (dot) br0 [email concealed]?"0
*?H?÷
?0?
?ÉêWÛoÊ©&3AúûÆdq½i?{N©8B³·åá#S?;a1uQº»m?nQ?®EOu;õ£?¾ìJ:)r
Ã߸,V?lauÄ9?í`")b÷?bXN[?Á+Q·
xIÀ3¡¸?P°HQèa?ÀÞ
Cg³
`Kë/?YPØ-AÁ?¯?¤ÉÀî¤e9úîÛàÙôÏæ=?è? ?R¦Î0?? /5pë·uàé%8?å?c0º'??N?inD?[ ì¬Ô??O^læ?Yô?ôÿÓw?&÷sìYÒÄ?®Hãýû'QqgRÈQ?ÊgAÞMo·Ü?Oû`ãè,ï£2000 U0aslan (at) digirati.com (dot) br0 [email concealed]Uÿ00
*?H?÷
??
×ìÒ© Øûí°*dkàon?ëºå{?LR??I??¾Y?¾îQGGôL§P?û?_¿?°µâE???
s?Idñ?Ç?^??ì¡nÑqí?Oyö°ö²aÔ??¶t1èIPÏ%Ø?Ùà?¶+<þIJ¬L?ç"ZØù?K0??0?¨
0
*?H?÷
0Ñ10 UZA10UWestern Cape10U Cape Town10U
Thawte Consulting1(0&UCertification Services Division1$0"UThawte Personal Freemail CA1+0) *?H?÷
personal-freemail (at) thawte (dot) com0 [email concealed]
030717000000Z
130716235959Z0b10 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CA0?0
*?H?÷
0?Ħ<UsUûN¹Ê?ZhÀupßéÿ£ì½Íõ[òv½:aò¿QÎÔåP
0×cZ,?p?ÝÉð+?Zª?qV˯<çñ?6$*Ï+Õó?w=¾+þ»>¿@?d×§¦»?eÑÅ*T?H§¶Ñ<
a@dr`·û£?0?0Uÿ0ÿ0CU<0:08 6 4?2http://crl.tha
wte.com/ThawtePersonalFreemailCA.crl0U0)U"0 ¤010UPrivateLabel2-1380
*?H?÷
H?ÑP?ê.Ì
£f¬g¯¬¾Â¡C??L!¸ø6ª-?6/ÀôP ?p<ýáabÃÙ:~?±?Å?t?%P?bÇÛ'qW%Ý©?9?? Oe_?Ú÷÷?ÖÆN®öê4å[5MwãV!x?Ü!5Þ$±ÓFÿ]_eO1?ü0?ø0v0b10 UZA1%0#U
Thawte Consulting (Pty) Ltd.1,0*U#Thawte Personal Freemail Issuing CAÞ¦Ó)ïS?Q.?Lúhh¨0 + ]0 *?H?÷
1 *?H?÷
0 *?H?÷
1
080506195604Z0# *?H?÷
1zÔ¿p§?ï??±Ô9=Îú~¨¶0
*?H?÷
??®ùw¶Ü)BZmW¤{ þQhr&
KÁ«×4|Ð ?L·0Õ?¹6Xô?Î4mâ{W?W¾8??¿Òèøq;`sí=Dبîp êQ{L+D?`?è«?ð@þ=^£dH}z
?ÌÓ2ÀKd[w?ÅT??8=??T0¸ÖQ?òìA?å/? ¼
??ݼð$Q±õðÈ`qϦ¾sÎW?Óïø¾ùäêr_'!ãù.7l?#/jác&?q²ðBº<Tý'ý
ÒaøÀ
8ZW¶l¯sn§Ï8O`âOÆF?§?~YºÌ£?>Þr_ò±Ü
[ reply ]