From owner-freebsd-questions  Fri Aug  3 19:14: 9 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from citusc17 (citusc17.usc.edu [128.125.38.177])
	by hub.freebsd.org (Postfix) with ESMTP id 0BCD937B401
	for <freebsd-questions@FreeBSD.ORG>; Fri,  3 Aug 2001 19:14:07 -0700 (PDT)
	(envelope-from kris@citusc17)
Received: (from kris@localhost)
	by citusc17 (8.11.4/8.11.4) id f742E6j12575;
	Fri, 3 Aug 2001 19:14:06 -0700 (PDT)
	(envelope-from kris)
Date: Fri, 3 Aug 2001 19:14:06 -0700
From: Kris Kennaway <kris@FreeBSD.ORG>
To: Nathaniel Schein - Hostmaster <nathaniel@lawinfo.com>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: SSH version identification Problem
Message-ID: <20010803191406.B12509@citusc17.usc.edu>
References: <DCELKDGENGJBOILCLOAIKEGLFFAA.nathaniel@lawinfo.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-md5;
	protocol="application/pgp-signature"; boundary="6sX45UoQRIJXqkqR"
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <DCELKDGENGJBOILCLOAIKEGLFFAA.nathaniel@lawinfo.com>; from nathaniel@lawinfo.com on Fri, Aug 03, 2001 at 11:56:08AM -0700
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


--6sX45UoQRIJXqkqR
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Aug 03, 2001 at 11:56:08AM -0700, Nathaniel Schein - Hostmaster wro=
te:
>=20
> Has anyone seen this message when trying to login via ssh. This appeared
> overnight and I have HUPed sshd and even rebooted. I have checked the
> hosts.allow, /usr/local/etc/sshd.config. Did I get hacked? Did something =
get
> corrupted?
>=20
> "Bad remote protocol version identification: 'You are not welcome to use
> sshd from"

Check hosts.allow again..this looks like a tcp_wrappers banner.

Kris

--6sX45UoQRIJXqkqR
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7a1puWry0BWjoQKURAh/kAJoD9mlOl/0r5+XlMWnxhCHkJrUyAgCg/lS8
C6GtCF1esBVli8VdW1cVM48=
=ixEH
-----END PGP SIGNATURE-----

--6sX45UoQRIJXqkqR--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message