Odd ‘ssh’ problem

[gw1500se]

I have an xserve, running 10.4.3, on my DMZ that is open for ‘ssh’. Some users from the internet can ‘ssh’ into that machine with no problem. Other users try to ‘ssh’ and never get a login prompt. Instead, they get a connection reset by remote host error after a period of time. The strange part is that the system log on the server says they timed out before authentication. Clearly the server is waiting for the login, but the remote client does not put up a prompt for one. My remote test machine is an iBook running 10.4.3.

Does anyone have any ideas? TIA.

[crackmac]

Hi TIA,
How are the signing on? Are they using terminal or something else?
I usually do something like

%ssh [email protected]

and then it just asks for a password. Is that what’s happening (or not happening)? Have these particular users been able to log on in the past and is this a new problem?

[gw1500se]

Thanks for the reply.

[QUOTE]How are the signing on? Are they using terminal or something else?
I usually do something like

%ssh [email protected]
[/QUOTE]
Exactly.

[QUOTE]it just asks for a password. Is that what’s happening (or not happening)?[/QUOTE]
That is what is not happening.

[QUOTE]Have these particular users been able to log on in the past and is this a new problem?[/QUOTE]

This is a new problem to us. We use ssh very little and hardly ever from the internet, until now. So there is no way to know if this has been a problem all along or not.

[TheMacKat]

Not sure… sounds like a problem on the client side though. Here are a few articles that may help you out.
http://www.macdevcenter.com/pub/a/mac/2004/07/09/inside_ssh_pt1.html
http://www.macdevcenter.com/pub/a/mac/2004/07/13/inside_ssh_pt2.html
http://www.macdevcenter.com/pub/a/mac/2004/07/20/inside_ssh_pt3.html
http://www.macdevcenter.com/pub/a/mac/2004/08/06/inside_ssh_pt4.html

There is probably more there than you need but there are several techniques for using ssh.

[gw1500se]

We’ve finally isolated it to our firewall. If we turn it off completely, it works. Thanks for the help anyway.

[Author]

Posts