On Sat, May 05, 2001 at 01:07:58PM -0500, James Moore wrote:
> May 5 11:50:13 darla sshd[14228]: Connection from 192.168.1.5 port 1584
> May 5 11:50:13 darla sshd[14228]: Enabling compatibility mode for
> protocol 2.0
> May 5 11:50:15 darla sshd[14228]: Accepted password for jamoore from
> 192.168.1.5 port 1584 ssh2
> May 5 11:50:15 darla sshd[17126]: Connection from 127.0.0.1 port 1476
> May 5 12:00:15 darla sshd[17126]: fatal: Timeout before authentication
> for 127.0.0.1.
> May 5 12:00:15 darla sshd[14228]: Closing connection to 192.168.1.5
>
> Could this all be due to NAT?
Hmm... maybe. Are you doing any transparent proxy? I'm very curious
why you're seeing a connection from 127.0.0.1.
