From owner-freebsd-questions@FreeBSD.ORG Thu May 6 21:41:29 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 4966810656DD for ; Thu, 6 May 2010 21:41:28 +0000 (UTC) (envelope-from tundra@tundraware.com) Received: from ozzie.tundraware.com (ozzie.tundraware.com [75.145.138.73]) by mx1.freebsd.org (Postfix) with ESMTP id D66808FC0C for ; Thu, 6 May 2010 21:41:27 +0000 (UTC) Received: from [192.168.0.2] (viper.tundraware.com [192.168.0.2]) (authenticated bits=0) by ozzie.tundraware.com (8.14.4/8.14.4) with ESMTP id o46LfI55065661 (version=TLSv1/SSLv3 cipher=DHE-DSS-CAMELLIA256-SHA bits=256 verify=NO) for ; Thu, 6 May 2010 16:41:18 -0500 (CDT) (envelope-from tundra@tundraware.com) Message-ID: <4BE33781.90108@tundraware.com> Date: Thu, 06 May 2010 16:41:21 -0500 From: Tim Daneliuk User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.9) Gecko/20100317 Thunderbird/3.0.4 MIME-Version: 1.0 To: FreeBSD Mailing List References: <20100506172149.GA42430@thought.org> <4BE2FD22.3060302@tundraware.com> <20100506213556.GB42975@thought.org> In-Reply-To: <20100506213556.GB42975@thought.org> X-Enigmail-Version: 1.0.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.5 (ozzie.tundraware.com [75.145.138.73]); Thu, 06 May 2010 16:41:18 -0500 (CDT) X-TundraWare-MailScanner-Information: Please contact the ISP for more information X-TundraWare-MailScanner-ID: o46LfI55065661 X-TundraWare-MailScanner: Found to be clean X-TundraWare-MailScanner-From: tundra@tundraware.com X-Spam-Status: No Subject: Re: ssh: port 22: connection refuused X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 May 2010 21:41:29 -0000 On 5/6/2010 4:35 PM, Gary Kline wrote: > On Thu, May 06, 2010 at 12:32:18PM -0500, Tim Daneliuk wrote: >> On 5/6/2010 12:21 PM, Gary Kline wrote: >>> >>> can anybody help me with ne of my last problems: getting ssh Into >>> my new comuter? i am able to ssh outside. need to scp my config >>> files over. >>> >>> sshd is running on "zen" >>> >>> >> >> This generally involves two or three steps: >> >> 1) Make sure /etc/rc.conf has this in it: >> >> sshd_enable="YES" > > Yes; this was my first try. no diff. >> >> 2) Make sure /etc/hosts.allow permits access >> to your machine via ssh. Something like this: >> >> sshd: 192.168. a_host-name.com an.ip.add.ress :ALLOW >> >> Some people do this: >> >> sshd: ALL :ALLOW >> >> That's fine if the machine sits on a trusted LAN, but I don't >> much like this for machines that are internet-facing ... it >> just provides another vector for attack. So, for such machines, >> I explicitly name the address and names that are permitted ssh access. > > ok. itried this; have not rebooted yet. no difference right > now. > >> >> 3) If you're running a firewall, make sure that the sshd ports >> (22/tcp and 22/udp) are open for those machines/addresses >> you want to connect into your FreeBSD box. >> > > > i'm runnning a pfSense computer; pretty sure that things are > sett correctly there. > >> >> If you are still having trouble, go to the client machine >> and invoke your session like this: >> >> ssh -vvvvv your_freebsd_machine >> > > the files in /etc/ssh were the first thing i thought of > editing. didn't see many differences between rel 8.0 and my > current 7.3. still, here is the verbose output. > > > pl 14:20 [5036] ssh zen > ssh: connect to host zen port 22: Connection refused > pl 14:20 [5037] ssh -vvvv zen > OpenSSH_5.1p1 FreeBSD-20080901, OpenSSL 0.9.8e 23 Feb 2007 > debug1: Reading configuration data /etc/ssh/ssh_config > debug2: ssh_connect: needpriv 0 > debug1: Connecting to zen [10.47.0.190] port 22. > debug1: connect to address 10.47.0.190 port 22: Connection > refused > ssh: connect to host zen port 22: Connection refused > pl 14:22 [5038] > > any idea what the ``needpriv 0'' means? > > > What's in your /etc/hosts.allow file? >> It will barf out a bunch of interesting information about why the connection >> isn't working that may help you figure out what's going on. >> >> Happy Trails, >> >> ---------------------------------------------------------------------------- >> Tim Daneliuk tundra@tundraware.com >> PGP Key: http://www.tundraware.com/PGP/ >> >> _______________________________________________ >> freebsd-questions@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-questions >> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > -- ---------------------------------------------------------------------------- Tim Daneliuk tundra@tundraware.com PGP Key: http://www.tundraware.com/PGP/