Титла: ssh Публикувано от: svilkata в Aug 14, 2004, 22:10 Здравейте, преди да си кажа проблема, малко предисловие: изпозвам един компютър за рутер, инсталирал съм му slackware 9.1 , и имам вързани 4 компа за него. Всичко вървеше идеално, но се появи следния проблем:
не мога да направя вризка по ssh от другитв компютри , излиза ми следното съобщение: ssh_exchange_identification: Connection closed by remote host. Когато обаче стартирам ssh ot рутере пак за него се вързвам, същото става и с телнет. Прилагам и няколко файла:ssh_config ------------------------------ # $OpenBSD: ssh_config,v 1.16 2002/07/03 14:21 ![]() # This is the ssh client system-wide configuration file. See # ssh_config(5) for more information. This file provides defaults for # users, and the values can be changed in per-user configuration files # or on the command line. # Configuration data is parsed as follows: # 1. command line options # 2. user-specific file # 3. system-wide file # Any configuration value is only changed the first time it is set. # Thus, host-specific definitions should be at the beginning of the # configuration file, and defaults at the end. # Site-wide defaults for various options Host * ForwardAgent no ForwardX11 no RhostsAuthentication no RhostsRSAAuthentication no RSAAuthentication yes PasswordAuthentication yes HostbasedAuthentication no BatchMode no CheckHostIP yes StrictHostKeyChecking ask IdentityFile ~/.ssh/identity IdentityFile ~/.ssh/id_rsa IdentityFile ~/.ssh/id_dsa Port 22 Protocol 2,1 Cipher 3des Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc EscapeChar ----------------------------- sshd_config ---------------------------- # $OpenBSD: sshd_config,v 1.59 2002/09/25 11:17:16 markus Exp $ # This is the sshd server system-wide configuration file. See # sshd_config(5) for more information. # This sshd was compiled with PATH=/usr/local/sbin:/usr/sbin:/sbin:/usr/local/bin:/usr/bin:/bin # The strategy used for options in the default sshd_config shipped with # OpenSSH is to specify options with their default value where # possible, but leave them commented. Uncommented options change a # default value. Port 22 #Protocol 2,1 ListenAddress 0.0.0.0 #ListenAddress :: # HostKey for protocol version 1 HostKey /etc/ssh/ssh_host_key # HostKeys for protocol version 2 #HostKey /etc/ssh/ssh_host_rsa_key #HostKey /etc/ssh/ssh_host_dsa_key # Lifetime and size of ephemeral version 1 server key KeyRegenerationInterval 3600 ServerKeyBits 768 # Logging #obsoletes QuietMode and FascistLogging SyslogFacility AUTH LogLevel INFO # Authentication: LoginGraceTime 600 PermitRootLogin yes #StrictModes yes #RSAAuthentication yes #PubkeyAuthentication yes #AuthorizedKeysFile .ssh/authorized_keys # rhosts authentication should not be used #RhostsAuthentication no # Don't read the user's ~/.rhosts and ~/.shosts files #IgnoreRhosts yes # For this to work you will also need host keys in /etc/ssh/ssh_known_hosts #RhostsRSAAuthentication no # similar for protocol version 2 #HostbasedAuthentication no # Change to yes if you don't trust ~/.ssh/known_hosts for # RhostsRSAAuthentication and HostbasedAuthentication #IgnoreUserKnownHosts no # To disable tunneled clear text passwords, change to no here! #PasswordAuthentication yes #PermitEmptyPasswords no # Change to no to disable s/key passwords #ChallengeResponseAuthentication yes # Kerberos options #KerberosAuthentication no #KerberosOrLocalPasswd yes #KerberosTicketCleanup yes #AFSTokenPassing no # Kerberos TGT Passing only works with the AFS kaserver #KerberosTgtPassing no # Set this to 'yes' to enable PAM keyboard-interactive authentication # Warning: enabling this may bypass the setting of 'PasswordAuthentication' PAMAuthenticationViaKbdInt no X11Forwarding no X11DisplayOffset 10 X11UseLocalhost yes PrintMotd yes #PrintLastLog yes KeepAlive yes UseLogin no UsePrivilegeSeparation yes PermitUserEnvironment no #Compression yes #MaxStartups 10 # no default banner path Banner /some/path #VerifyReverseMapping no # override default of no subsystems Subsystem sftp /usr/libexec/sftp-server ----------------------------------------------- Какъв според вас мойе да е проблема.10ь Титла: ssh Публикувано от: в Aug 15, 2004, 00:53 ok
log in router, type `netstat -tuln` and paste output here. Титла: ssh Публикувано от: svilkata в Aug 15, 2004, 14:10 Пак съм аз, намерих къде е проблема: в host.deny се бесхе появил следния ред: ALL 192.168.192.2. Някои може ли да ми каже защо, съответно да го предотвратя следващия път.
|