It seems very likely that you may be hitting the maximum number of 
unauthenticated connections.  I believe the default is 10.  Anytime someone has 
connected, but has not yet fully authenticated, they are in this bucket.  This 
can really show up on publically available SSH daemons - perhaps your 
connections are getting chewed up by someone trying to brute-force your 
passwords.

Another possibility (sorry, can recall exact versions where this effected it) 
is a bug I ran into where connections that exited too quickly also resulted in 
a similar situation.   Look at the output of ps and see if you have a bunch of 
defunct SSH processes laying around.  I ran into this on some of our Debian 
Sarge hosts, where I was doing a simple ssh 'cat /proc/loadavg' for monitoring. 
 I didn't dig too much into it, but if you google around you should be able to 
find something there.  An upgrade got around this in our case.

On Tuesday, May 06, 2008, at 12:30PM, "boris brinza" <[EMAIL PROTECTED]> wrote:
>Hello,
>
>I have strange problems with connecting to remote machine running suse 
>enterprise 9.0 sp3 using ssh
>
>After server is restarted, everything works fine.
>Then, after 5-6 days, sshd starts to drop incoming connections.
>Server has IP from private network range, i connect to router with 
>public IP, port 222, which is then forwarded to my server (port 22)
>Sometimes, ssh starts to work, but 10 minutes later, again, connections 
>are refused.
>
>Here is log i've got at client side:
>
>hts-fw:~# ssh xxx.xxx.xxx.xxx -p 222 -vvv
>OpenSSH_4.3p2 Debian-9, OpenSSL 0.9.8c 05 Sep 2006
>debug1: Reading configuration data /etc/ssh/ssh_config
>debug1: Applying options for *
>debug2: ssh_connect: needpriv 0
>Connecting to xxx.xxx.xxx.xxx [xxx.xxx.xxx.xxx] port 222.
>debug1: Connection established.
>debug1: permanently_set_uid: 0/0
>debug1: identity file /root/.ssh/identity type -1
>debug1: identity file /root/.ssh/id_rsa type -1
>debug1: identity file /root/.ssh/id_dsa type -1
>ssh_exchange_identification: Connection closed by remote host
>
>Have anyone anything, that can help?
>Tahnks in advance
>
>Boris
>
>-- 
>HT Solution s.r.o.
>Slávi?ie údolie 104 
>811 02 Bratislava
>tel: +421 (2) 3500 2512
>mob: +421 903 602 126
>web: www.htsolution.sk
>
>
>

Reply via email to