Re: cannot ssh into a box with DHCP assigned IP address

2013-03-19 Thread Drew Tomlinson
On 2/20/2013 5:55 AM, Anton Shterenlikht wrote: From feenb...@nber.org Wed Feb 20 13:39:28 2013 >From: Fleuriot Damien >To: me...@bristol.ac.uk >Subject: Re: cannot ssh into a box with DHCP assigned IP address >Date: Wed, 20

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Matthias Apitz
hided by the AP (or by some other router more > far away) behind a real IP addr. You can check what this addr is by > going to the page http://myip.nl/ > > And you can not SSH to the addr shown there, at least normally it would > not > be NAT'ed to yo

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Matthias Apitz
El día Wednesday, February 20, 2013 a las 03:43:43PM +0100, Matthias Apitz escribió: > El día Wednesday, February 20, 2013 a las 03:18:47PM +0100, Fleuriot Damien > escribió: > > > > Well.. what should it be? > > > I have on the problem box (ssh server): > >

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Matthias Apitz
El día Wednesday, February 20, 2013 a las 03:18:47PM +0100, Fleuriot Damien escribió: > > Well.. what should it be? > > I have on the problem box (ssh server): > > > > wlan0: flags=8943 metric 0 > > mtu 1 > > 500 > >ether 00:21:5c:50:6

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Anton Shterenlikht
e...@bristol.ac.uk > > Subject: Re: cannot ssh into a box with DHCP assigned IP address > > Date: Wed, 20 Feb 2013 10:31:22 +0100 > > Cc: freebsd-questions@freebsd.org > > > > On Feb 2

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Fleuriot Damien
On Feb 20, 2013, at 2:55 PM, Anton Shterenlikht wrote: > From feenb...@nber.org Wed Feb 20 13:39:28 2013 > > > From: Fleuriot Damien > > To: me...@bristol.ac.uk > > Subject: Re: cannot ssh into a box with DHCP assigned IP addr

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Daniel Feenberg
From: Fleuriot Damien To: me...@bristol.ac.uk Subject: Re: cannot ssh into a box with DHCP assigned IP address Date: Wed, 20 Feb 2013 10:31:22 +0100 Cc: freebsd-questions@freebsd.org On Feb 20, 2013, at 10:28 AM, Anton Shterenlikht wrote

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Anton Shterenlikht
From feenb...@nber.org Wed Feb 20 13:39:28 2013 > From: Fleuriot Damien > To: me...@bristol.ac.uk > Subject: Re: cannot ssh into a box with DHCP assigned IP address > Date: Wed, 20 Feb 2013 10:31:22 +0100 >

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Anton Shterenlikht
From m...@my.gd Wed Feb 20 10:28:54 2013 Ok I think you've got a DNS resolution problem here, so when you try to establish the connection, SSHD tries to resolve your client's hostname. It fails and times out, however your ssh login gracetime

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Fleuriot Damien
Ok I think you've got a DNS resolution problem here, so when you try to establish the connection, SSHD tries to resolve your client's hostname. It fails and times out, however your ssh login gracetime is already over. You have several options here: 1/ increase the login gra

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Anton Shterenlikht
From m...@my.gd Wed Feb 20 10:11:12 2013 Run this on your server: tcpdump -ni wlan0 ip and port 22 Then try to ssh to the box, see if SYN packets arrive, see if your box sends SYN/ACK back. 172.21.220.12 is the ssh server 137.222.187.241 is the

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Fleuriot Damien
On Feb 20, 2013, at 10:45 AM, Anton Shterenlikht wrote: > From: Fleuriot Damien > To: me...@bristol.ac.uk > Subject: Re: cannot ssh into a box with DHCP assigned IP address > Date: Wed, 20 Feb 2013 10:31:22 +0100 > Cc: freebsd-questions@freebsd.or

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Anton Shterenlikht
From: Fleuriot Damien To: me...@bristol.ac.uk Subject: Re: cannot ssh into a box with DHCP assigned IP address Date: Wed, 20 Feb 2013 10:31:22 +0100 Cc: freebsd-questions@freebsd.org On Feb 20, 2013, at 10:28 AM, Anton Shterenlikht wrote

Re: cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Fleuriot Damien
On Feb 20, 2013, at 10:28 AM, Anton Shterenlikht wrote: > I have a laptop with FreeBSD -current, > with ip address assigned via DHCP. > The laptop has neither a static ip address, > nor a domain. > > I can ping the laptop fine, but cannot > ssh into it. The sshd is running

cannot ssh into a box with DHCP assigned IP address

2013-02-20 Thread Anton Shterenlikht
I have a laptop with FreeBSD -current, with ip address assigned via DHCP. The laptop has neither a static ip address, nor a domain. I can ping the laptop fine, but cannot ssh into it. The sshd is running, /etc/ssh/ssd_config seems fine, /etc/hosts.allow is fine. However, /etc/hosts is just the

RE: SSH on FreeBSD

2013-01-15 Thread Mannase Nyathi
PM To: Volodymyr Kostyrko Cc: Erich Dollansky; questi...@freebsd.org; Mannase Nyathi Subject: Re: SSH on FreeBSD El día Tuesday, January 15, 2013 a las 02:40:32PM +0200, Volodymyr Kostyrko escribió: > > In FreeBSD it is in rc.conf > > > > $ man rc.conf | col -b | fgrep -i ssh &g

Re: SSH on FreeBSD

2013-01-15 Thread Volodymyr Kostyrko
15.01.2013 14:48, Frank Staals: Volodymyr Kostyrko writes: In FreeBSD there are two ways of enabling sshd: default, fast and easy through rc.conf and a bit tricky and secure via inetd.conf. Everyone can select their own poison. I personally prefer the latter one. You seem to imply that enab

Re: SSH on FreeBSD

2013-01-15 Thread Bruce Cran
On 15/01/2013 12:51, Matthias Apitz wrote: Why it is more secure via inetd.conf? You can centralise access control via TCP Wrappers - http://www.freebsd.org/doc/handbook/tcpwrappers.html . -- Bruce Cran ___ freebsd-questions@freebsd.org mailing lis

Re: SSH on FreeBSD

2013-01-15 Thread Matthias Apitz
El día Tuesday, January 15, 2013 a las 02:40:32PM +0200, Volodymyr Kostyrko escribió: > > In FreeBSD it is in rc.conf > > > > $ man rc.conf | col -b | fgrep -i ssh > > In FreeBSD there are two ways of enabling sshd: default, fast and easy > through rc.conf and

Re: SSH on FreeBSD

2013-01-15 Thread Frank Staals
Volodymyr Kostyrko writes: > > In FreeBSD there are two ways of enabling sshd: default, fast and easy through > rc.conf and a bit tricky and secure via inetd.conf. Everyone can select their > own poison. I personally prefer the latter one. You seem to imply that enabling sshd through inetd is

Re: SSH on FreeBSD

2013-01-15 Thread Volodymyr Kostyrko
FreeBSD on my server. I would like to find out how can I be able to login to it via ssh? Looking forward to hear from you soon. Thank you you must enable ssh in /etc/inetd.conf and then read In FreeBSD it is in rc.conf $ man rc.conf | col -b | fgrep -i ssh In FreeBSD there are two ways of

Re: SSH on FreeBSD

2013-01-15 Thread Jerry
On Tue, 15 Jan 2013 10:52:04 + Matthew Seaman articulated: > On 15/01/2013 10:10, Mannase Nyathi wrote: > > I have just configured FreeBSD on my server. I would like to find > > out how can I be able to login to it via ssh? > > Start by editing /etc/rc.conf and add the l

Re: SSH on FreeBSD

2013-01-15 Thread Matthias Apitz
> > > > I have just configured FreeBSD on my server. I would like to find out > > how can I be able to login to it via ssh? > > > > Looking forward to hear from you soon. > > > > Thank you > > > > you must enable ssh in /etc/inetd.conf and th

Re: SSH on FreeBSD

2013-01-15 Thread Bruce Cran
root logins by default. You can change that by editing /etc/ssh/sshd_config . -- Bruce Cran ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"

Re: SSH on FreeBSD

2013-01-15 Thread Matthew Seaman
On 15/01/2013 10:10, Mannase Nyathi wrote: > I have just configured FreeBSD on my server. I would like to find out > how can I be able to login to it via ssh? Start by editing /etc/rc.conf and add the line: sshd_enable="YES" (anywhere in the file -- order doesn't matter) T

Re: SSH on FreeBSD

2013-01-15 Thread Olivier Nicole
Hi, >> I have just configured FreeBSD on my server. I would like to find out >> how can I be able to login to it via ssh? >> >> Looking forward to hear from you soon. >> >> Thank you >> > > you must enable ssh in /etc/inetd.conf and then read Or be

Re: SSH on FreeBSD

2013-01-15 Thread Erich Dollansky
Hi, On Tue, 15 Jan 2013 10:10:16 + Mannase Nyathi wrote: > CipherWave Fibre Broadband with FREE installation from only > R8840/month > > Good day, > > I have just configured FreeBSD on my server. I would like to find out > how can I be able to login to it via ssh? &g

SSH on FreeBSD

2013-01-15 Thread Mannase Nyathi
CipherWave Fibre Broadband with FREE installation from only R8840/month Good day, I have just configured FreeBSD on my server. I would like to find out how can I be able to login to it via ssh? Looking forward to hear from you soon. Thank you -- Mannase Nyathi Support Technician sb: 011 541

Re: ssh server hashcode change on nanoBSD

2013-01-02 Thread takCoder
There are a number of keys involved in ssh. The host keys are used at >the start of the connection to make sure that some other machine doesn't >impersonate the one you wanted. and On Wed, Jan 2, 2013 at 2:22 PM, Polytropon wrote: >The key received in the first step of a SSH sessio

Re: ssh server hashcode change on nanoBSD

2013-01-02 Thread Polytropon
On Tue, 1 Jan 2013 18:59:05 +0330, takCoder wrote: > thank you for the details mentioned :) > > but now, a questions occurred to me about this ssh key. > as i don't know enough about its process, would you please tell me whether > this key is a shared key for all ssh client

Re: ssh server hashcode change on nanoBSD

2013-01-01 Thread Lowell Gilbert
Don't top-post, please. takCoder writes: > but now, a questions occurred to me about this ssh key. > as i don't know enough about its process, would you please tell me whether > this key is a shared key for all ssh clients who send a request? or it > differs as the client

Re: ssh server hashcode change on nanoBSD

2013-01-01 Thread takCoder
thank you for the details mentioned :) but now, a questions occurred to me about this ssh key. as i don't know enough about its process, would you please tell me whether this key is a shared key for all ssh clients who send a request? or it differs as the client changes? (this question may

Re: ssh server hashcode change on nanoBSD

2013-01-01 Thread Polytropon
On Tue, 1 Jan 2013 14:11:21 +0330, takCoder wrote: > everything is fine until i restart my nanoBSD server. the problem is that > each time i restart my server, the source system is complaining about that > i need to edit my known_hosts file cause my nanoBSD hash-code is not > matched.. > > how ca

Re: ssh server hashcode change on nanoBSD

2013-01-01 Thread takCoder
>-- Forwarded message -- >From: Aldis Berjoza >Date: Tue, Jan 1, 2013 at 2:17 PM >Subject: Re: ssh server hashcode change on nanoBSD > >I've never used NanoBSD, but, check if ssh daemon can write to /etc/ssh/ otherwise it >won't be able to save ssh

Re: Odd X11 over SSH issue

2012-11-24 Thread Christer Solskogen
On Fri, Nov 23, 2012 at 6:43 PM, Paul Kraus wrote: > I am seeing very poor response time running the VitrualBox GUI via X11 > tunneled over SSH via the Internet. The issue _appears_ to be limited > to the VBox GUI as Firefox is reasonable. I am well aware of the > latency issues t

Re: Odd X11 over SSH issue

2012-11-24 Thread Lowell Gilbert
Paul Kraus writes: > On Fri, Nov 23, 2012 at 4:31 PM, Lowell Gilbert > wrote: > > Yup, I just have not had a chance to chase that one down, and > given that it happens once per SSH session, has not been a high > priority. I mentioned it in the spirit

Re: Odd X11 over SSH issue

2012-11-23 Thread Paul Kraus
On Fri, Nov 23, 2012 at 4:31 PM, Lowell Gilbert wrote: >> Observations: >> >> 1. When I first SSH into the box I see a long delay after the SSH >> tunnel is setup before being prompted for a password, and I do not >> know if this delay is related to the VBox issue.

Re: Odd X11 over SSH issue

2012-11-23 Thread Lowell Gilbert
Paul Kraus writes: > I am seeing very poor response time running the VitrualBox GUI via X11 > tunneled over SSH via the Internet. The issue _appears_ to be limited > to the VBox GUI as Firefox is reasonable. I am well aware of the > latency issues tunneling X11 over SSH across the I

Re: Odd X11 over SSH issue

2012-11-23 Thread Paul Kraus
On Fri, Nov 23, 2012 at 1:01 PM, Adam Vande More wrote: > On Fri, Nov 23, 2012 at 11:43 AM, Paul Kraus wrote: >> >> I am seeing very poor response time running the VitrualBox GUI via X11 >> tunneled over SSH via the Internet. The issue _appears_ to be limited >> to

Re: Odd X11 over SSH issue

2012-11-23 Thread Adam Vande More
On Fri, Nov 23, 2012 at 11:43 AM, Paul Kraus wrote: > I am seeing very poor response time running the VitrualBox GUI via X11 > tunneled over SSH via the Internet. The issue _appears_ to be limited > to the VBox GUI as Firefox is reasonable. I am well aware of the > latency issues t

Odd X11 over SSH issue

2012-11-23 Thread Paul Kraus
I am seeing very poor response time running the VitrualBox GUI via X11 tunneled over SSH via the Internet. The issue _appears_ to be limited to the VBox GUI as Firefox is reasonable. I am well aware of the latency issues tunneling X11 over SSH across the Internet, but that is what we are stuck

Re: FTP oddness, over SSH session.

2012-04-15 Thread Dave B
On 13 Apr 2012 at 23:51, Frank Staals wrote: > "John McDonnell" writes: > > > All in all, creating an entry in Site Manager makes more sense if > > it's something you connect to from your own hardware. From someone > > else's machine, the quick connect is quite handy though. > > Don't forget to

Re: FTP oddness, over SSH session.

2012-04-13 Thread Frank Staals
"John McDonnell" writes: > All in all, creating an entry in Site Manager makes more sense if it's > something you connect to from your own hardware. From someone else's > machine, the quick connect is quite handy though. Don't forget to clear out the entry from the dropdown list then. Because I

Re: FTP oddness, over SSH session.

2012-04-13 Thread Dave B
On 13 Apr 2012 at 9:21, John McDonnell wrote: > > From: owner-freebsd-questi...@freebsd.org [mailto:owner-freebsd- > > questi...@freebsd.org] On Behalf Of Dave B > > > FYI, you have to create an entry in FileZilla's Site Manager, for it > > to invoke SFTP, the "Quickconnect" feature just uses pla

RE: FTP oddness, over SSH session.

2012-04-13 Thread John McDonnell
> From: owner-freebsd-questi...@freebsd.org [mailto:owner-freebsd- > questi...@freebsd.org] On Behalf Of Dave B > FYI, you have to create an entry in FileZilla's Site Manager, for it > to invoke SFTP, the "Quickconnect" feature just uses plain vanilla FTP. > > Best Regards. > > Dave Baxter.

Re: FTP oddness, over SSH session.

2012-04-13 Thread Dave B
> I have a small FreeBSD 8.0 system (above, yes I know, not current, > > but it works.) That is mainly used for timekeeping with an attached > > PPS equipped GPS. No problems with that. > > > > It also has a small web server (Hiawatha) FTP server and SSH portal, >

Re: FTP oddness, over SSH session.

2012-04-13 Thread Dave B
On 12 Apr 2012 at 9:32, Frank Staals wrote: > "Dave B" writes: > > > Hi, ordinarily perhaps yes, if I could only figure out how to set it > > up on the FreeBSD box. As always, the "Manuals" though no doubt > > correct and complete as a "reference", are no good to people who > > don't already kn

Re: FTP oddness, over SSH session.

2012-04-13 Thread Dave B
On 12 Apr 2012 at 11:28, Frank Bonnet wrote: > > "Dave B" writes: > > > >> Hi, ordinarily perhaps yes, if I could only figure out how to set > >> it up on the FreeBSD box. As always, the "Manuals" though no doubt > >> correct and complete as a "reference", are no good to people who > >> don't a

Re: FTP oddness, over SSH session.

2012-04-12 Thread Matthew Seaman
ere's a little-used PUT command, or you can use such things as WEBDAV. Easy to run over TLS by using HTTPS. * RSYNC -- has an anonymous mode which works fine for generic downloads. For authenticated access defaults to ssh(1) for all traffic. * SFTP or SCP -- for those wh

Re: FTP oddness, over SSH session.

2012-04-12 Thread Frank Bonnet
why not ftp over TLS ? like proftpd or pure-ftpd can do ? Envoyé de mon iPhone. Le 12 avr. 2012 à 09:32, Frank Staals a écrit : > "Dave B" writes: > >> Hi, ordinarily perhaps yes, if I could only figure out how to set it up >> on the FreeBSD box. As always, the "Manuals" though no doubt co

Re: FTP oddness, over SSH session.

2012-04-12 Thread Frank Staals
"Dave B" writes: > Hi, ordinarily perhaps yes, if I could only figure out how to set it up > on the FreeBSD box. As always, the "Manuals" though no doubt correct and > complete as a "reference", are no good to people who don't already know > "How To" do it. There is not much to set up. Just

Re: FTP oddness, over SSH session.

2012-04-11 Thread Dave B
On 11 Apr 2012 at 14:54, Mike Clarke wrote: > On Wednesday 11 April 2012, Dave B wrote: > > > I just found however, that though I can reliably send a file to the > > FTP server and it get's saved just fine, that's not true when > > connecting this way using

Re: FTP oddness, over SSH session.

2012-04-11 Thread Da Rock
timekeeping with an attached PPS equipped GPS. No problems with that. It also has a small web server (Hiawatha) FTP server and SSH portal, for my own use. The FTP "server" is the built-in OS based ftpd implementation, and works well for all that I need. Anyway... I found a while ago,

Re: FTP oddness, over SSH session.

2012-04-11 Thread Andrew Gould
On Wed, Apr 11, 2012 at 8:54 AM, Mike Clarke wrote: > On Wednesday 11 April 2012, Dave B wrote: > >> I just found however, that though I can reliably send a file to the >> FTP server and it get's saved just fine, that's not true when >> connecting this way using

Re: FTP oddness, over SSH session.

2012-04-11 Thread Mike Clarke
On Wednesday 11 April 2012, Dave B wrote: > I just found however, that though I can reliably send a file to the > FTP server and it get's saved just fine, that's not true when > connecting this way using a SSH tunnel. Would it not be simpler just to use sftp directly rather t

FTP oddness, over SSH session.

2012-04-11 Thread Dave B
equipped GPS. No problems with that. It also has a small web server (Hiawatha) FTP server and SSH portal, for my own use. The FTP "server" is the built-in OS based ftpd implementation, and works well for all that I need. Anyway... I found a while ago, that I can tunnel connectio

Re: FreeBSD 9's SSH HPN

2012-03-20 Thread Adam Vande More
On Mon, Mar 19, 2012 at 8:45 PM, Mark Felder wrote: > Is the HPN patchset included with the base OpenSSH the full patchset? Does > it include the threaded CTR patch? I can't seem to find a clear answer to > this. > crypto/openssh/README.hpn references it so I would assume so. -- Adam Vande Mo

FreeBSD 9's SSH HPN

2012-03-19 Thread Mark Felder
Is the HPN patchset included with the base OpenSSH the full patchset? Does it include the threaded CTR patch? I can't seem to find a clear answer to this. Thanks, Mark ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailma

Re: inetd[1081]: ssh/tcp: bind: address already in use

2012-02-08 Thread Chuck Swiger
On Feb 8, 2012, at 11:39 AM, Henry Olyer wrote: > Second, I am getting: inetd[1081]: ssh/tcp: bind: address already in use. > What's the fix, please? Don't try to run sshd via inetd when you're already starting it as a daemon.

inetd[1081]: ssh/tcp: bind: address already in use

2012-02-08 Thread Henry Olyer
, I have a pretty nice Fvwm environment with some nifty plotting. (Though I wonder, is it better to be forced to visualize the underlying curve's of a system without looking. A philosophical problem for another day...) Second, I am getting: inetd[1081]: ssh/tcp: bind: address already i

Windows XP ssh client to FreeBSD 5.3/pf issue

2012-01-09 Thread Matt Kosht
ss everything on loopback (lo0) pass in quick on lo0 all pass out quick on lo0 all # block all badguys table persist file "/var/db/ssh-bruteforce" pass in log quick proto tcp from $whitelist to any port ssh block in log quick proto tcp from to any port ssh # setup a default deny policy b

Re: SSH Access To Live CD? (Was Re: FBSD-9.0-RC3 Disk 1 ISO Bootable?)

2012-01-06 Thread Коньков Евгений
t on the test box. I had to set up the lan manually to >>>> first get it up. Then you should be able to use ssh. >>> >>> I take it you either arranged for ssh to accept a direct root login, >>> or added a non-root username. Does the new installer do one of &g

SSH Access To Live CD? (Was Re: FBSD-9.0-RC3 Disk 1 ISO Bootable?)

2012-01-06 Thread Drew Tomlinson
On 1/6/2012 12:07 PM, Al Plant wrote: per...@pluto.rain.com wrote: Al Plant wrote: I accessed the sshd from the new install screen as an option when I loaded it on the test box. I had to set up the lan manually to first get it up. Then you should be able to use ssh. I take it you either

Re: ports/distfiles via NFS or SSH

2011-10-15 Thread Lowell Gilbert
Peter Kryszkiewicz writes: > I have several machines networked using NFS mounts or SSH and scp. Only one > machine has internet connectivity - a laptop (machine vbear) with a wireless > card (I'm in a temporary location for a few weeks and only wireless is > available here). >

ports/distfiles via NFS or SSH

2011-10-13 Thread Peter Kryszkiewicz
I have several machines networked using NFS mounts or SSH and scp. Only one machine has internet connectivity - a laptop (machine vbear) with a wireless card (I'm in a temporary location for a few weeks and only wireless is available here). I tried to mount the ports tree on this machine t

Re: limit number of ssh connections

2011-09-19 Thread Robert Bonomi
> From owner-freebsd-questi...@freebsd.org Mon Sep 19 19:12:32 2011 > From: mer...@stonehenge.com (Randal L. Schwartz) > To: Paul Macdonald > Date: Mon, 19 Sep 2011 17:12:14 -0700 > Cc: James Strother , freebsd-questions@freebsd.org > Subject: Re: limit number of ssh connectio

Re: limit number of ssh connections

2011-09-19 Thread Chad Perrin
On Mon, Sep 19, 2011 at 05:11:28PM -0700, Randal L. Schwartz wrote: > > "Григорьев" == Григорьев Александр writes: > > Григорьев> If your target is protect freebsd box from bruting passwords > Григорьев> from inet maybe security/knockd will help you? > > Portknocking adds only a dozen bits o

Re: limit number of ssh connections

2011-09-19 Thread Randal L. Schwartz
>>>>> "Paul" == Paul Macdonald writes: Paul> in my experience running ssh on a high port cuts the amount of unwanted ssh Paul> connections to approximately zero, in fact i got a surprise when seeing a sec Paul> log from a box which i hadn't done th

Re: limit number of ssh connections

2011-09-19 Thread Randal L. Schwartz
> "Григорьев" == Григорьев Александр writes: Григорьев> If your target is protect freebsd box from bruting passwords Григорьев> from inet maybe security/knockd will help you? Portknocking adds only a dozen bits or so to your password. Do you really think it helps to go from a 1024-bit key t

Re: limit number of ssh connections

2011-09-19 Thread suxor
> Does anyone know a good way of limiting the number of ssh attempts > from a single IP address? > > I found the following website, which describes a variety of approaches: > > http://www.freebsdwiki.net/index.php/Block_repeated_illegal_or_failed_SSH_logins > > > B

RE: limit number of ssh connections

2011-09-19 Thread Matt Emmerton
Moving ssh to another port has solved the problem for me. I had used sshguard in the past, but was always leery of locking myself out. Regards, Matt Emmerton -Original Message- From: owner-freebsd-questi...@freebsd.org [mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of James

Re: limit number of ssh connections

2011-09-19 Thread Tim Daneliuk
On 9/19/2011 2:05 PM, James Strother wrote: Does anyone know a good way of limiting the number of ssh attempts from a single IP address? I found the following website, which describes a variety of approaches: http://www.freebsdwiki.net/index.php/Block_repeated_illegal_or_failed_SSH_logins

Re: limit number of ssh connections

2011-09-19 Thread James Strother
rs of unauthorized login attempts. Everything so far is highly unsophisticated, but it did make me start to really think about the issue. I might put ssh onto a different port, that would at least stop the sort of fishing I am currently seeing. It's not clear if that would be "good enough.&quo

Re: limit number of ssh connections

2011-09-19 Thread Григорьев Александр
орьев Александр : > >>  If your target is protect freebsd box from bruting passwords from inet >> maybe security/knockd will help you? >> >>  19.09.2011, 23:05, "James Strother" : >>>  Does anyone know a good way of limiting the number of ssh a

Re: limit number of ssh connections

2011-09-19 Thread Paul Macdonald
2011/9/19 Григорьев Александр : If your target is protect freebsd box from bruting passwords from inet maybe security/knockd will help you? 19.09.2011, 23:05, "James Strother": Does anyone know a good way of limiting the number of ssh attempts from a single IP address? Hi James,

Re: limit number of ssh connections

2011-09-19 Thread Damien Fleuriot
19.09.2011, 23:05, "James Strother" : >>> Does anyone know a good way of limiting the number of ssh attempts >>> from a single IP address? >>> >>> I found the following website, which describes a variety of approaches: >>> >>> http:/

Re: limit number of ssh connections

2011-09-19 Thread James Strother
on't think port knocking is a good fit here. Thanks, Jim 2011/9/19 Григорьев Александр : > If your target is protect freebsd box from bruting passwords from inet maybe > security/knockd will help you? > > 19.09.2011, 23:05, "James Strother" : >> Does anyone kn

Re: limit number of ssh connections

2011-09-19 Thread Григорьев Александр
If your target is protect freebsd box from bruting passwords from inet maybe security/knockd will help you? 19.09.2011, 23:05, "James Strother" : > Does anyone know a good way of limiting the number of ssh attempts > from a single IP address? > > I found the following webs

limit number of ssh connections

2011-09-19 Thread James Strother
Does anyone know a good way of limiting the number of ssh attempts from a single IP address? I found the following website, which describes a variety of approaches: http://www.freebsdwiki.net/index.php/Block_repeated_illegal_or_failed_SSH_logins But I am honestly not really happy with any of

Re: ssh with bridged ap

2011-09-14 Thread Damien Fleuriot
s box, please pass the -v flag to your ssh client to toggle verbose output and post that here too. On 9/13/11 2:14 PM, George Vagner wrote: > I was thinking that maybe because the wired interface doesn't actually have > An IP address it is a reverse lookup thing. > > >

RE: ssh with bridged ap solved

2011-09-13 Thread george vagner
Allow connections to forwarded ports in sshd config -Original Message- From: owner-freebsd-questi...@freebsd.org [mailto:owner-freebsd-questi...@freebsd.org] On Behalf Of George Vagner Sent: Tuesday, September 13, 2011 8:14 AM To: freebsd-questions@freebsd.org Subject: RE: ssh with

RE: ssh with bridged ap

2011-09-13 Thread George Vagner
er 13, 2011 5:36 AM To: freebsd-questions@freebsd.org Subject: Re: ssh with bridged ap On 9/13/11 3:54 AM, george vagner wrote: > I have set up wireless AP with a static IP and bridged it to my internal > wired network on RE0. > > I can successfully connect with WPA to the wireless network

Re: ssh with bridged ap

2011-09-13 Thread Damien Fleuriot
he freebsd machine using ssh no problem as long as if I > connect via the wireless network. > > If I try and log into the freebsd machine using the wired network I get a > log in prompt for username > Then I get the password prompt but after typing in my password it always > says login

ssh with bridged ap

2011-09-12 Thread george vagner
I have set up wireless AP with a static IP and bridged it to my internal wired network on RE0. I can successfully connect with WPA to the wireless network and browse other computers on the wired net fine, I can log into the freebsd machine using ssh no problem as long as if I connect via the

ssh via NAT slow on _some_ connections only

2011-08-22 Thread Alejandro Imass
tmask 0xff00 Then in natd.conf I have nats defined like so: redirect_port tcp 192.168.101.123:22 12322 At first _all_ my NATed ssh connections were slow until I added -tso to the main nic ifconfig. So this -tco switch is something that I've had to add to all my nics for NAT to work prop

Re: ssh -X (X11 forwarding) not working from 6.1 to 8.1

2011-07-12 Thread perryh
Frank Shute wrote: > On Tue, Jul 12, 2011 at 03:18:07AM -0700, per...@pluto.rain.com wrote: > > > > DISPLAY is not getting set in a remote shell started by "ssh -X". ... > Have you tried putting: > > DISPLAY=:0.0 > > in ~/.ssh/environment on the machi

Solved: Re: ssh -X (X11 forwarding) not working from 6.1 to 8.1

2011-07-12 Thread perryh
Mark Felder wrote: > On Tue, 12 Jul 2011 00:06:33 -0500, Michael Sierchio > wrote: > > > xauth not in your path? > > ssh -Y skips all auth stuff so you don't need xauth; he said that > didn't work either :-( Well, apparently, even -Y needs xauth (which was n

Re: ssh -X (X11 forwarding) not working from 6.1 to 8.1

2011-07-11 Thread Frank Shute
On Tue, Jul 12, 2011 at 03:18:07AM -0700, per...@pluto.rain.com wrote: > > DISPLAY is not getting set in a remote shell started by "ssh -X". > > $ echo $DISPLAY > :0.0 > $ ssh -X [server] 'echo DISPLAY=%$DISPLAY%' > DISPLAY=%% > > How wou

Re: ssh -X (X11 forwarding) not working from 6.1 to 8.1

2011-07-11 Thread perryh
Eitan Adler wrote: > > It still fails with the 6.1 system as the ssh client, > > and works with the 6.1 system as the ssh server > > Is X11Forwarding yes set in the server config of the failing > direction? Both seem to be defaulted. On 6.1: $ egrep -C 2 X11Forwarding

Re: ssh -X (X11 forwarding) not working from 6.1 to 8.1

2011-07-11 Thread Eitan Adler
> > It still fails with the 6.1 system as the ssh client, > and works with the 6.1 system as the ssh server Is X11Forwarding yes set in the server config of the failing direction? > ___ > freebsd-questions@freebsd.org mail

Re: ssh -X (X11 forwarding) not working from 6.1 to 8.1

2011-07-11 Thread Mark Felder
On Tue, 12 Jul 2011 00:06:33 -0500, Michael Sierchio wrote: xauth not in your path? ssh -Y skips all auth stuff so you don't need xauth; he said that didn't work either :-( ___ freebsd-questions@freebsd.org mailing

Re: ssh -X (X11 forwarding) not working from 6.1 to 8.1

2011-07-11 Thread Michael Sierchio
xauth not in your path? On Tue, Jul 12, 2011 at 4:46 AM, wrote: > Mark Felder wrote: > >> This sounds silly, but what happens if you try ssh -Y > > Exactly the same thing as with -X, in either direction. > > It still fails with the 6.1 system as the ssh client, > an

Re: ssh -X (X11 forwarding) not working from 6.1 to 8.1

2011-07-11 Thread perryh
Mark Felder wrote: > This sounds silly, but what happens if you try ssh -Y Exactly the same thing as with -X, in either direction. It still fails with the 6.1 system as the ssh client, and works with the 6.1 system as the ssh server ___ free

Re: ssh -X (X11 forwarding) not working from 6.1 to 8.1

2011-07-11 Thread Mark Felder
This sounds silly, but what happens if you try ssh -Y Regards, Mark ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-uns

ssh -X (X11 forwarding) not working from 6.1 to 8.1

2011-07-11 Thread perryh
DISPLAY is not getting set in a remote shell started by "ssh -X". $ echo $DISPLAY :0.0 $ ssh -X [server] 'echo DISPLAY=%$DISPLAY%' DISPLAY=%% How would I go about debugging this? DISPLAY _is_ set correctly on the ssh client -- I am running in an xterm there, and ca

Re: Color Spills Over From SSH Session

2011-07-09 Thread Joshua Isom
when I run GNU Screen on the remote box (which is OpenBSD). GNU Screen is not installed on the FreeBSD box. How can I get screen's colors to work in my FreeBSD ssh sessions? I can connect to the remote box from other computers (using putty, xterm, linux console, etc.) without issue. Maybe I

Re: Color Spills Over From SSH Session

2011-07-09 Thread David Krauser
Figured it out. I just needed screen installed on the FreeBSD box. Thanks for all your help! On Sat, 9 Jul 2011, Joshua Isom wrote: On 7/8/2011 11:07 PM, David Krauser wrote: Hello everybody, I've tried to setup a kind of 'dedicated ssh client' using FreeBSD, and I'

Re: Color Spills Over From SSH Session

2011-07-09 Thread David Krauser
I echoed $TERM on both boxes, and they are both cons25. I figured out, though, that I'm only seeing the color spillover issue when I run GNU Screen on the remote box (which is OpenBSD). GNU Screen is not installed on the FreeBSD box. How can I get screen's colors to work in my F

Re: Color Spills Over From SSH Session

2011-07-08 Thread Joshua Isom
On 7/8/2011 11:07 PM, David Krauser wrote: Hello everybody, I've tried to setup a kind of 'dedicated ssh client' using FreeBSD, and I'm having some issues with the terminal colors. I have a basic install of FreeBSD 8.2-RELEASE (I only had kernel-dev packages checked at

Color Spills Over From SSH Session

2011-07-08 Thread David Krauser
Hello everybody, I've tried to setup a kind of 'dedicated ssh client' using FreeBSD, and I'm having some issues with the terminal colors. I have a basic install of FreeBSD 8.2-RELEASE (I only had kernel-dev packages checked at installation) and I rebuilt the GENERIC k

  1   2   3   4   5   6   7   8   9   10   >