Re: Problem with ssh
On Thu, Jun 27, 2002 at 09:25:52PM +0700, [EMAIL PROTECTED] wrote: > I have a problem with my ssh, when i try to connect to our server using > ssh have an error like this : > > ssh -l [EMAIL PROTECTED] > 2f65 7463 2f73 7368 > Disconnecting: Bad packet length 795178083. > > What's Wrong with my server or my ssh client. And how to solve them. to me, it looks like you are trying to log in as myuser to server xxx.xxx.xxx.xxx, but as far as the command says, you are tying to log in as [EMAIL PROTECTED] to nowhere, atleast the ssh in woody does not even try to connect, maybe it is different with your version of ssh. try either: ssh [EMAIL PROTECTED] or: ssh -l myusername xxx.xxx.xxx.xxx it might be something else, or it might be this.. Sami -- -< Sami Haahtinen >- -[ Notify immediately if you do not receive this message ]- -< 2209 3C53 D0FB 041C F7B1 F908 A9B6 F730 B83D 761C >- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: Problem with ssh
Try connecting in verbose mode for debugging, I think it's "ssh -v" or even "-v (B-v" as I saw someone suggest recently. (B (BSomething changed. The goal is to find out what. (B (BAlso try "ssh -1 ..." to force version 1 access and see if that works. (B (BCurt- (B (B> > First question: (B> > (B> > Has it worked before now? (B> (B> Yes. (B> (B> > (B> > Second question: (B> > (B> > What did you change between then and now? (B> (B> no, i did not change anything with my configuration (ssh client or (B> ssh server) (B> (B> -Ryansimon aku (B (B (B-- (BTo UNSUBSCRIBE, email to [EMAIL PROTECTED] (Bwith a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: Problem with ssh
On Fri, 28 Jun 2002, Howland, Curtis wrote: > First question: > > Has it worked before now? Yes. > > Second question: > > What did you change between then and now? no, i did not change anything with my configuration (ssh client or ssh server) -Ryansimon aku > > Curt- > > > Dear All, > > > > I have a problem with my ssh, when i try to connect to our > > server using > > ssh have an error like this : > > > > ssh -l [EMAIL PROTECTED] > > 2f65 7463 2f73 7368 > > Disconnecting: Bad packet length 795178083. > > > > > > What's Wrong with my server or my ssh client. And how to solve them. > > > > > > Thank's > > > > Ryansimon Aku > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Problem with ssh
On Thu, 27 Jun 2002 21:25:52 +0700 (JAVT) <[EMAIL PROTECTED]> wrote: > Dear All, > > I have a problem with my ssh, when i try to connect to our server > using ssh have an error like this : > > ssh -l [EMAIL PROTECTED] > 2f65 7463 2f73 7368 > Disconnecting: Bad packet length 795178083. > > > What's Wrong with my server or my ssh client. And how to solve them. > > > Thank's > > Ryansimon Aku > > Make sure that your sshd uses the same protocol as your client. There's both ssh1 and ssh2. Look att www.ssh.com for more info. -- Best regards, Erik Main: [EMAIL PROTECTED] Alternative: [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: Problem with ssh
First question: (B (BHas it worked before now? (B (BSecond question: (B (BWhat did you change between then and now? (B (BCurt- (B (B> Dear All, (B> (B> I have a problem with my ssh, when i try to connect to our (B> server using (B> ssh have an error like this : (B> (B> ssh -l [EMAIL PROTECTED] (B> 2f65 7463 2f73 7368 (B> Disconnecting: Bad packet length 795178083. (B> (B> (B> What's Wrong with my server or my ssh client. And how to solve them. (B> (B> (B> Thank's (B> (B> Ryansimon Aku (B (B (B-- (BTo UNSUBSCRIBE, email to [EMAIL PROTECTED] (Bwith a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Problem with ssh
Dear All, I have a problem with my ssh, when i try to connect to our server using ssh have an error like this : ssh -l [EMAIL PROTECTED] 2f65 7463 2f73 7368 Disconnecting: Bad packet length 795178083. What's Wrong with my server or my ssh client. And how to solve them. Thank's Ryansimon Aku -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: Problem with ssh
Try connecting in verbose mode for debugging, I think it's "ssh -v" or even "-v -v" as I saw someone suggest recently. Something changed. The goal is to find out what. Also try "ssh -1 ..." to force version 1 access and see if that works. Curt- > > First question: > > > > Has it worked before now? > > Yes. > > > > > Second question: > > > > What did you change between then and now? > > no, i did not change anything with my configuration (ssh client or > ssh server) > > -Ryansimon aku -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: Problem with ssh
On Fri, 28 Jun 2002, Howland, Curtis wrote: > First question: > > Has it worked before now? Yes. > > Second question: > > What did you change between then and now? no, i did not change anything with my configuration (ssh client or ssh server) -Ryansimon aku > > Curt- > > > Dear All, > > > > I have a problem with my ssh, when i try to connect to our > > server using > > ssh have an error like this : > > > > ssh -l [EMAIL PROTECTED] > > 2f65 7463 2f73 7368 > > Disconnecting: Bad packet length 795178083. > > > > > > What's Wrong with my server or my ssh client. And how to solve them. > > > > > > Thank's > > > > Ryansimon Aku > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Problem with ssh
On Thu, 27 Jun 2002 21:25:52 +0700 (JAVT) <[EMAIL PROTECTED]> wrote: > Dear All, > > I have a problem with my ssh, when i try to connect to our server > using ssh have an error like this : > > ssh -l [EMAIL PROTECTED] > 2f65 7463 2f73 7368 > Disconnecting: Bad packet length 795178083. > > > What's Wrong with my server or my ssh client. And how to solve them. > > > Thank's > > Ryansimon Aku > > Make sure that your sshd uses the same protocol as your client. There's both ssh1 and ssh2. Look att www.ssh.com for more info. -- Best regards, Erik Main: [EMAIL PROTECTED] Alternative: [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
RE: Problem with ssh
First question: Has it worked before now? Second question: What did you change between then and now? Curt- > Dear All, > > I have a problem with my ssh, when i try to connect to our > server using > ssh have an error like this : > > ssh -l [EMAIL PROTECTED] > 2f65 7463 2f73 7368 > Disconnecting: Bad packet length 795178083. > > > What's Wrong with my server or my ssh client. And how to solve them. > > > Thank's > > Ryansimon Aku -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Problem with ssh
Dear All, I have a problem with my ssh, when i try to connect to our server using ssh have an error like this : ssh -l [EMAIL PROTECTED] 2f65 7463 2f73 7368 Disconnecting: Bad packet length 795178083. What's Wrong with my server or my ssh client. And how to solve them. Thank's Ryansimon Aku -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Fw: OpenSSH Security Advisory (adv.iss)
Hi All,
How are you guys handling the SSH vunerability issue?
Have any of you got the 3.3 working on testing/woody?
Anyone tested the newest 3.4?
I've included patches below to solve the problem (courtesy Markus Friedl
[EMAIL PROTECTED]). How soon do you think these patches could be included
in the Debian binaries? This would be a real solution for us ISPs, since
going to 3.3 may not be a pratical option, especially with no compression
and broken PAM support.
> Index: auth2-chall.c
> ===
> RCS file: /cvs/src/usr.bin/ssh/auth2-chall.c,v
> retrieving revision 1.18
> diff -u -r1.18 auth2-chall.c
> --- auth2-chall.c 19 Jun 2002 00:27:55 - 1.18
> +++ auth2-chall.c 26 Jun 2002 09:37:03 -
> @@ -256,6 +256,8 @@
>
> authctxt->postponed = 0; /* reset */
> nresp = packet_get_int();
> + if (nresp > 100)
> + fatal("input_userauth_info_response: nresp too big %u", nresp);
> if (nresp > 0) {
> response = xmalloc(nresp * sizeof(char*));
> for (i = 0; i < nresp; i++)
>
> B:
>
> Index: auth2-pam.c
> ===
> RCS file: /var/cvs/openssh/auth2-pam.c,v
> retrieving revision 1.12
> diff -u -r1.12 auth2-pam.c
> --- auth2-pam.c 22 Jan 2002 12:43:13 - 1.12
> +++ auth2-pam.c 26 Jun 2002 10:12:31 -
> @@ -140,6 +140,15 @@
> nresp = packet_get_int(); /* Number of responses. */
> debug("got %d responses", nresp);
>
> +
> + if (nresp != context_pam2.num_expected)
> + fatal("%s: Received incorrect number of responses "
> + "(expected %u, received %u)", __func__, nresp,
> + context_pam2.num_expected);
> +
> + if (nresp > 100)
> + fatal("%s: too many replies", __func__);
> +
> for (i = 0; i < nresp; i++) {
> int j = context_pam2.prompts[i];
>
>
Sincerely,
Jason
http://www.zentek-international.com/
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
OpenSSH vuln: BSD only?
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20584 I just read this over at iss, it seems that the vuln only exists for default installations of BSD and only for S-KEY and BSD authentication. So need to upgrade at all.. its just a way to get everyone over to 3.x i guess... With kind regards, Wim Fournier -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: throttle pop3 access
From: "Tinus Nijmeijers" <[EMAIL PROTECTED]> > On Thu, 2002-06-27 at 02:20, Jeremy C. Reed wrote: > > (I maintain vm-pop3d. It doesn't support that. I have thought about it > > before, but I am more concerned with users that continue to leave mail on > > server. I am more interested in a non-RFC option so all RETReived mail is > > DELEted automatically.) > > > > vm-pop3d was the one I was hoping to work with. > > btw why are you concerned with users leaving mail as to go non-RFC on > them? disk space is soo cheap. > Maybe something that would DELE RETR'd mails after a period? Because the popd running over 55MB every 3 mins sends my system load wy high. BTW, anyone knows of a IMAPD which works with mbox, and faster(?) than uw-imapd? Too many users with large mailboxes. I am scared of converting to maildir on a live system. Thanks -- Sanjeev "Happy vm-pop3d user" Gupta -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
[Fwd: Re: OpenSSH 3.4 released... should FIX problems]
> Head over to OpenSSH.com > > They have just released version 3.4, which should fix some overflow > problems and adds lot's of new checks against dubious input. > > Advisories and updates on the various pages there. How about the compression support and PAM? is that already fixed? Cuz without that it isnt really going to be a decend replacement for the other versions. With kind regards, Wim Fournier -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: throttle pop3 access
On Thu, 2002-06-27 at 02:20, Jeremy C. Reed wrote: > (I maintain vm-pop3d. It doesn't support that. I have thought about it > before, but I am more concerned with users that continue to leave mail on > server. I am more interested in a non-RFC option so all RETReived mail is > DELEted automatically.) > > Jeremy C. Reed In another thread here: archive-mail. removes anything older than x days. then gzips the removed mails. Then you put the oldmails.gz in a ftp'able place for the client where they can get it if they want. auto-purged after 100 days. Tinus. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: throttle pop3 access
On Thu, 2002-06-27 at 02:20, Jeremy C. Reed wrote: > On 26 Jun 2002, Tinus Nijmeijers wrote: > > > Ideal would be to let the pop3 server tell them (if they checked again > > within 10 minutes of the last time): "no messages". > > nupop does UIDL and STAT caching (using Berkeley DB) already so it would > probably be easy to add that feature. > http://nupop.nuvox.net/ > > http://pulsar.sourceforge.net/ has some interesting features -- including > a configuration file and already does some caching. It would probably be > easy to add that feature to it too. > thanks, I'll check them out. > Maybe ask those two pop3d programmers about it. > > (I maintain vm-pop3d. It doesn't support that. I have thought about it > before, but I am more concerned with users that continue to leave mail on > server. I am more interested in a non-RFC option so all RETReived mail is > DELEted automatically.) > vm-pop3d was the one I was hoping to work with. btw why are you concerned with users leaving mail as to go non-RFC on them? disk space is soo cheap. Maybe something that would DELE RETR'd mails after a period? Tinus. > Jeremy C. Reed > > BSD software, documentation, resources, news... > http://bsd.reedmedia.net/ > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: throttle pop3 access
On Wed, 26 Jun 2002 11:11:28 +0200 Roger Abrahamsson <[EMAIL PROTECTED]> wrote: > Hello. > Well, scripts looking into logfiles, and each account that checks too > often gets > suddenly blocked.. change password or whatever, and then restore it 5/10 > > minutes > later.. that should do the trick. > I've wrote something similiar, but changing passwords every 5 or 10 minutes is bad. It should be somehow implemented in pop daemon. Anyway, script which is checking pop logon intervals can be found at http://x-si.org/perl.html. regards, damir -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Fw: OpenSSH Security Advisory (adv.iss)
Hi All,
How are you guys handling the SSH vunerability issue?
Have any of you got the 3.3 working on testing/woody?
Anyone tested the newest 3.4?
I've included patches below to solve the problem (courtesy Markus Friedl
[EMAIL PROTECTED]). How soon do you think these patches could be included
in the Debian binaries? This would be a real solution for us ISPs, since
going to 3.3 may not be a pratical option, especially with no compression
and broken PAM support.
> Index: auth2-chall.c
> ===
> RCS file: /cvs/src/usr.bin/ssh/auth2-chall.c,v
> retrieving revision 1.18
> diff -u -r1.18 auth2-chall.c
> --- auth2-chall.c 19 Jun 2002 00:27:55 - 1.18
> +++ auth2-chall.c 26 Jun 2002 09:37:03 -
> @@ -256,6 +256,8 @@
>
> authctxt->postponed = 0; /* reset */
> nresp = packet_get_int();
> + if (nresp > 100)
> + fatal("input_userauth_info_response: nresp too big %u", nresp);
> if (nresp > 0) {
> response = xmalloc(nresp * sizeof(char*));
> for (i = 0; i < nresp; i++)
>
> B:
>
> Index: auth2-pam.c
> ===
> RCS file: /var/cvs/openssh/auth2-pam.c,v
> retrieving revision 1.12
> diff -u -r1.12 auth2-pam.c
> --- auth2-pam.c 22 Jan 2002 12:43:13 - 1.12
> +++ auth2-pam.c 26 Jun 2002 10:12:31 -
> @@ -140,6 +140,15 @@
> nresp = packet_get_int(); /* Number of responses. */
> debug("got %d responses", nresp);
>
> +
> + if (nresp != context_pam2.num_expected)
> + fatal("%s: Received incorrect number of responses "
> + "(expected %u, received %u)", __func__, nresp,
> + context_pam2.num_expected);
> +
> + if (nresp > 100)
> + fatal("%s: too many replies", __func__);
> +
> for (i = 0; i < nresp; i++) {
> int j = context_pam2.prompts[i];
>
>
Sincerely,
Jason
http://www.zentek-international.com/
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
OpenSSH vuln: BSD only?
http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20584 I just read this over at iss, it seems that the vuln only exists for default installations of BSD and only for S-KEY and BSD authentication. So need to upgrade at all.. its just a way to get everyone over to 3.x i guess... With kind regards, Wim Fournier -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: throttle pop3 access
From: "Tinus Nijmeijers" <[EMAIL PROTECTED]> > On Thu, 2002-06-27 at 02:20, Jeremy C. Reed wrote: > > (I maintain vm-pop3d. It doesn't support that. I have thought about it > > before, but I am more concerned with users that continue to leave mail on > > server. I am more interested in a non-RFC option so all RETReived mail is > > DELEted automatically.) > > > > vm-pop3d was the one I was hoping to work with. > > btw why are you concerned with users leaving mail as to go non-RFC on > them? disk space is soo cheap. > Maybe something that would DELE RETR'd mails after a period? Because the popd running over 55MB every 3 mins sends my system load wy high. BTW, anyone knows of a IMAPD which works with mbox, and faster(?) than uw-imapd? Too many users with large mailboxes. I am scared of converting to maildir on a live system. Thanks -- Sanjeev "Happy vm-pop3d user" Gupta -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Purging old e-mail
On Thu, Jun 27, 2002 at 01:43:49PM +1000, Andrew Tait wrote: > Quick question. Quick answer. > Does anyone know any easy way to delete e-mail (maildir format) that is more > that two years old? (ie, be checking the contents of the e-mail, NOT the > last time the file was modified). use archivemail, it can delete by age or date, or just move them away from your mailbox. http://archivemail.sf.net or just apt-get install archivemail Sami -- -< Sami Haahtinen >- -[ Notify immediately if you do not receive this message ]- -< 2209 3C53 D0FB 041C F7B1 F908 A9B6 F730 B83D 761C >- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
[Fwd: Re: OpenSSH 3.4 released... should FIX problems]
> Head over to OpenSSH.com > > They have just released version 3.4, which should fix some overflow > problems and adds lot's of new checks against dubious input. > > Advisories and updates on the various pages there. How about the compression support and PAM? is that already fixed? Cuz without that it isnt really going to be a decend replacement for the other versions. With kind regards, Wim Fournier -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: throttle pop3 access
On Thu, 2002-06-27 at 02:20, Jeremy C. Reed wrote: > (I maintain vm-pop3d. It doesn't support that. I have thought about it > before, but I am more concerned with users that continue to leave mail on > server. I am more interested in a non-RFC option so all RETReived mail is > DELEted automatically.) > > Jeremy C. Reed In another thread here: archive-mail. removes anything older than x days. then gzips the removed mails. Then you put the oldmails.gz in a ftp'able place for the client where they can get it if they want. auto-purged after 100 days. Tinus. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
