From owner-freebsd-questions Thu Feb 28 8:45:51 2002 Delivered-To: freebsd-questions@freebsd.org Received: from odin.ac.hmc.edu (Odin.AC.HMC.Edu [134.173.32.75]) by hub.freebsd.org (Postfix) with ESMTP id DB5D537B400 for ; Thu, 28 Feb 2002 08:45:44 -0800 (PST) Received: from boredom (dickie.ST.HMC.Edu [134.173.59.94]) by odin.ac.hmc.edu (8.11.0/8.11.0) with SMTP id g1SGji827962 for ; Thu, 28 Feb 2002 08:45:44 -0800 Message-ID: <000e01c1c077$38dad030$5e3bad86@boredom> From: "Jeff Jirsa" To: References: <003401c1c06e$7c21ccd0$6400a8c0@windows> Subject: Re: sshd bind to port 22 fails Date: Thu, 28 Feb 2002 08:44:42 -0800 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > You should also disable sshd in inetd.conf as there's no need to have 2 > of them running. You mean /etc/rc.conf or /etc/defaults/rc.conf, right? The FreeBSD default is to install the standard sshd and activate it in /etc/defaults/rc.conf . Any installed sshd ports will install their scripts into /usr/local/etc/rc.d/sshd.sh . The init scripts start the one in /etc/defaults/rc.conf first, and then run the local init scripts in /usr/local/etc/rc.d, which fail, because the port is already in use by the first process. Incidently, rather than disabling sshd in /etc/defaults/rc.conf, you could point it to the OpenSSH 3.02 binary (typically installed as /usr/local/sbin/sshd) , rather than the default binary (typically /usr/sbin/sshd), by setting the sshd_program parameter. - Jeff > Generally speaking if you don't need to have a listen > IP designated. That's really only if you want people to be able to ssh > in only on a specific IP. If, in my setup, I'd specify an IP like you > have, I would no longer be able to ssh from one machine to the other > through the internal LAN. I'd have to specifically SSH to the one in > the sshd conf. As far as security goes, If you only accept ssh > connections on the sshd u installed from the ports on the Local IP, > there's no real problem there, as no one should be able to get into your > internal LAN. However, as I previously said, the sshd that is included > in inetd is still running... > > Sandro > > > -----Original Message----- > > From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd- > > questions@FreeBSD.ORG] On Behalf Of Denny White > > Sent: February 28, 2002 5:41 AM > > To: igorr@speechpro.com > > Cc: freebsd-questions@FreeBSD.ORG > > Subject: Re: sshd bind to port 22 fails > > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > I have OpenSSH 3.0.2 installed on here. > > I'm still sort of new to this. Use it > > mostly since I have a constant connection > > here & 3 machines. I looked in sshd_config > > & saw where ports to listen to were both > > commented out (:: & 0.0.0.0) & I remembered > > seeing that in the error messages, so I > > thought that it must default to that unless > > otherwise entered. So, I bound it to this > > IP on the local area network & it works > > fine now with no error messages. Also, I > > forgot to mention before that I could ssh > > out but no one else could ssh in. Now > > that works too. Are there any security > > issues as far as binding sshd to this > > local IP? I never had to do that on the > > other 2 machines, but this is a newer > > version too, on this machine. Thanks. > > > > > > On Thu, 28 Feb 2002, Igor Roboul wrote: > > > > > Date: Thu, 28 Feb 2002 13:00:19 +0300 > > > From: Igor Roboul > > > Reply-To: igorr@speechpro.com > > > To: freebsd-questions@FreeBSD.ORG > > > Subject: Re: sshd bind to port 22 fails > > > > > > On Thu, Feb 28, 2002 at 03:39:06AM -0600, Denny White wrote: > > > > -----BEGIN PGP SIGNED MESSAGE----- > > > > Hash: SHA1 > > > > > > > > Just reinstalled 4.5 on old machine to > > > > use for webserver. When boot finishes, > > > > get following message: > > > > sshd[136]: error: Bind to port 22 on :: > > > > failed: Address already in use. > > > > Same message for localhost. > > > > Checked /etc/services & port 22 is > > > > reserved for ssh. OpenSSL version is 0.9.6a > > > > OpenSSH version is 3.0.2 with patch > > > > openbsd28_3.0.2 > > > > If I kill the process & then restart it, > > > > no error messages come up. Thanks > > > > for any help I can get on this. > > > Do you have some ssh port intsalled? > > > pkg_info | grep ssh > > > > > > -- > > > Igor Roboul, System administrator at Speech Technology Center > > > http://www.speechpro.com http://www.speechpro.ru > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > > with "unsubscribe freebsd-questions" in the body of the message > > > > > -----BEGIN PGP SIGNATURE----- > > Version: GnuPG v1.0.6 (FreeBSD) > > Comment: For info see http://www.gnupg.org > > > > iD8DBQE8fglBy0Ty5RZE55oRAipXAKC1t1o3SYlM6fguqfBhcq4kMaMGPQCgk3ql > > HBE9vmqKx1OkROPfcRKuqvQ= > > =jwVO > > -----END PGP SIGNATURE----- > > > > > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-questions" in the body of the message > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message