Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]

FW: Can't connect to one server from a particular LAN

Subject: FW: Can't connect to one server from a particular LAN
Date: Fri, 26 Jan 2007 10:14:24 -0000
The hosts.deny is empty.
The hosts.allow already had an entry of the form:

Ssh:123.456.789.0/255.255.255.0

Representing the correct segment of the Lan  I'm trying to connect from.
I added a new line representing the ip/subnet of the machine I'm
currently on.
I restarted sshd - no change: still no connection.

I found tcpd, and used tcpdchk -v to check the rules: everything looked
ok: the daemon was ssh, the client was my machine, the access was
'granted'.

So still no joy!!

mark

-----Original Message-----
From: jam@zoidtechnologies.com [mailto:jam@zoidtechnologies.com] 
Sent: 26 January 2007 00:07
To: Sanders Mark
Cc:; jam@zoidtechnologies.com
Subject: Re: Can't connect to one server from a particular LAN

On Thu, Jan 25, 2007 at 09:51:12AM -0000, Mark Sanders wrote:
Hi
I can't ssh to a server from any machine on one particular LAN -
here's
the debug:

OpenSSH_4.2p1 Debian-7ubuntu3.1, OpenSSL 0.9.8a 11 Oct 2005
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to salford.zen.co.uk [62.3.91.113] port 22.
debug1: Connection established.
debug1: identity file /home/mark/.ssh/identity type -1
debug1: identity file /home/mark/.ssh/id_rsa type -1
debug1: identity file /home/mark/.ssh/id_dsa type -1
ssh_exchange_identification: read: Connection reset by peer

I can connect to this server port 22 from a different LAN; I can also
telnet to the server from this LAN.
The debug is from an attempt from an Ubuntu box; I normally attempt to
connect from XP using putty, and get a 'Network error: software caused
connection abort' error.

All suggestions gratefully received...


it looks to me like there is a hosts.allow or hosts.deny that is denying
access from your box.

mark

regards,
J
-- 
http://zoidtechnologies.com/ -- software that sucks less

<Prev in Thread] Current Thread [Next in Thread>