Hi,
On Thu, 10 Aug 2006, Stephen Bosch wrote:
>
> > The log messages may be the result of a trojan that tries to infect other
> > hosts in the network.
>
> Right -- but it still doesn't explain why I would be getting "Connection
> closed by {host}" messages when the host is not even connected.
>
> Thanks,
>
> -Stephen-
>
>
I have one host running in my local network which a smiliar OpenSSH
version. It does not log connection attempts only the result after the
protocol handshake. Thus you can only see similiar messages as you sent
in your original message.
So it could be interesting to use tcpdump on "fw1" to see what's going
on. Or increase LogLevel in sshd_config to DEBUG, see man sshd_config.
Regards
Stefan Kell
