On Thu, May 06, 2010 at 12:32:18PM -0500, Tim Daneliuk wrote:
> On 5/6/2010 12:21 PM, Gary Kline wrote:
> >
> > can anybody help me with ne of my last problems: getting ssh Into
> > my new comuter? i am able to ssh outside. need to scp my config
> > files over.
> >
> > sshd is running on "zen"
> >
> >
>
> This generally involves two or three steps:
>
> 1) Make sure /etc/rc.conf has this in it:
>
> sshd_enable="YES"
Yes; this was my first try. no diff.
>
> 2) Make sure /etc/hosts.allow permits access
> to your machine via ssh. Something like this:
>
> sshd: 192.168. a_host-name.com an.ip.add.ress :ALLOW
>
> Some people do this:
>
> sshd: ALL :ALLOW
>
> That's fine if the machine sits on a trusted LAN, but I don't
> much like this for machines that are internet-facing ... it
> just provides another vector for attack. So, for such machines,
> I explicitly name the address and names that are permitted ssh access.
ok. itried this; have not rebooted yet. no difference right
now.
>
> 3) If you're running a firewall, make sure that the sshd ports
> (22/tcp and 22/udp) are open for those machines/addresses
> you want to connect into your FreeBSD box.
>
i'm runnning a pfSense computer; pretty sure that things are
sett correctly there.
>
> If you are still having trouble, go to the client machine
> and invoke your session like this:
>
> ssh -vvvvv your_freebsd_machine
>
the files in /etc/ssh were the first thing i thought of
editing. didn't see many differences between rel 8.0 and my
current 7.3. still, here is the verbose output.
pl 14:20 <tao> [5036] ssh zen
ssh: connect to host zen port 22: Connection refused
pl 14:20 <tao> [5037] ssh -vvvv zen
OpenSSH_5.1p1 FreeBSD-20080901, OpenSSL 0.9.8e 23 Feb 2007
debug1: Reading configuration data /etc/ssh/ssh_config
debug2: ssh_connect: needpriv 0
debug1: Connecting to zen [10.47.0.190] port 22.
debug1: connect to address 10.47.0.190 port 22: Connection
refused
ssh: connect to host zen port 22: Connection refused
pl 14:22 <tao> [5038]
any idea what the ``needpriv 0'' means?
> It will barf out a bunch of interesting information about why the connection
> isn't working that may help you figure out what's going on.
>
> Happy Trails,
>
> ----------------------------------------------------------------------------
> Tim Daneliuk tun...@tundraware.com
> PGP Key: http://www.tundraware.com/PGP/
>
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
--
Gary Kline kl...@thought.org http://www.thought.org Public Service Unix
The 7.83a release of Jottings: http://jottings.thought.org/index.php
http://journey.thought.org 99 44/100% Guaranteed Novel
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscr...@freebsd.org"
