From owner-freebsd-questions@FreeBSD.ORG Fri Apr 8 19:53:34 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2EEF5106566C for ; Fri, 8 Apr 2011 19:53:34 +0000 (UTC) (envelope-from Dave.Robison@fisglobal.com) Received: from mx1.fisglobal.com (mx1.fisglobal.com [199.200.24.190]) by mx1.freebsd.org (Postfix) with ESMTP id EB7998FC0C for ; Fri, 8 Apr 2011 19:53:33 +0000 (UTC) Received: from SBHFISLREXT03 ([10.132.254.62]) by SCSFISLTC02 (8.14.3/8.14.3) with ESMTP id p38Jr7i7005886 for ; Fri, 8 Apr 2011 14:53:07 -0500 Received: from sbhfisltcgw02.FNFIS.COM (Not Verified[10.132.248.122]) by SBHFISLREXT03 with MailMarshal (v6, 5, 4, 7535) id ; Fri, 08 Apr 2011 14:53:14 -0500 Received: from sbhfisltcgw02.FNFIS.COM ([10.132.248.122]) by sbhfisltcgw02.FNFIS.COM with Microsoft SMTPSVC(6.0.3790.4675); Fri, 8 Apr 2011 14:53:06 -0500 Received: from lefty.vicor.com ([10.132.254.135]) by sbhfisltcgw02.FNFIS.COM over TLS secured channel with Microsoft SMTPSVC(6.0.3790.4675); Fri, 8 Apr 2011 14:53:06 -0500 Message-ID: <4D9F67A1.50100@fisglobal.com> Date: Fri, 08 Apr 2011 12:53:05 -0700 From: "Robison, Dave" User-Agent: Mozilla/5.0 (X11; U; FreeBSD amd64; en-US; rv:1.9.2.13) Gecko/20110120 Lightning/1.0b2 Thunderbird/3.1.7 MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <20110408192217.88744.qmail@irelay.ssr.com> In-Reply-To: <20110408192217.88744.qmail@irelay.ssr.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 08 Apr 2011 19:53:06.0497 (UTC) FILETIME=[94271310:01CBF626] X-Mailman-Approved-At: Fri, 08 Apr 2011 20:00:34 +0000 Subject: Re: SSHD Strangeness X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: david.robison@fisglobal.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Apr 2011 19:53:34 -0000 is your host ip denied by /etc/hosts.allow? On 04/08/2011 12:22, Scott Ballantyne wrote: > I've never seen this before, but when ssh'ing to my server today, I > got: > > ssh_exchange_identification: Connection closed > > I was able to log in using my vendors KVM access, and didn't see > anything particularly odd. I hadn't changed anything. I restarted > sshd, but that didn't help. > > The log files show hundreds of 'login failures' from the script > kiddies, but that is typical. > > Trying again a couple of hours later, and I can ssh just fine. No > changes, nothing. > > Has anyone seen this, or knows what is going on? > > Thanks > Scott -- Dave Robison Sales Solution Architect II FIS Banking Solutions 510/621-2089 (w) 530/518-5194 (c) 510/621-2020 (f) daver@vicor.com david.robison@fisglobal.com _____________ The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you. _____________