From owner-freebsd-questions@FreeBSD.ORG  Sat Feb  5 17:49:40 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 4986E16A4CE
	for <freebsd-questions@freebsd.org>;
	Sat,  5 Feb 2005 17:49:40 +0000 (GMT)
Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.206])
	by mx1.FreeBSD.org (Postfix) with ESMTP id EEE7C43D49
	for <freebsd-questions@freebsd.org>;
	Sat,  5 Feb 2005 17:49:32 +0000 (GMT)
	(envelope-from dvanallen@gmail.com)
Received: by wproxy.gmail.com with SMTP id 69so541360wra
	for <freebsd-questions@freebsd.org>;
	Sat, 05 Feb 2005 09:49:29 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	s=beta; d=gmail.com;
	h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding;
	b=V/Zj2vC4tRtls5bwpKnsJ8RXqPOOXF3/HUIzJMrCMM07PHr6UXPEptkHq+MzOvvqDK40knB7xC+pUZJq9N+nnVwzFZvlANXHttUJgc6FcYlZpyNLNSBjdP/Dyi1QNTmLvrapKeGLIZ9pV2O2ACBIuJa1qJJgmRv/qTCE34g7uPA=
Received: by 10.54.13.14 with SMTP id 14mr60334wrm;
        Sat, 05 Feb 2005 09:49:29 -0800 (PST)
Received: by 10.54.22.48 with HTTP; Sat, 5 Feb 2005 09:49:29 -0800 (PST)
Message-ID: <2063a95c05020509493b35ee0d@mail.gmail.com>
Date: Sat, 5 Feb 2005 12:49:29 -0500
From: Doug Van Allen <dvanallen@gmail.com>
To: freebsd-questions@freebsd.org
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Subject: Can't ssh to server
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Doug Van Allen <dvanallen@gmail.com>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 05 Feb 2005 17:49:40 -0000

I'm running FreeBSD 5.3 and I'm trying to connect to it from school
using ssh.  At school, I get connection refused.  I checked the
auth.log and found:

Feb 3 21:23:05 FreeBSD sshd[44237]: twist xxxxx.xxxx.edu to /bin/echo
"You are not welcome to use sshd from xxxxx.xxxx.edu."

I ran tcpdmatch and got:

$ tcpdmatch sshd bt20510.hvcc.edu
warning: sshd: no such process name in /etc/inetd.conf
client:   hostname bt20510.hvcc.edu
client:   address  151.103.21.131
server:   process  sshd
matched:  /etc/hosts.allow line 91
option:   severity auth.info
option:   twist /bin/echo "You are not welcome to use sshd from
bt20510.hvcc.edu."

I have made changes to hosts.allow to only allow my local network and
the ip's of the workstations from school.  I am running PF and only
allowed the same rules.  So what gives?