Can't SSH from work???

Painthappy · 06-28-2007, 11:13 AM

It's been about two weeks now, and I can't seem to SSH from work to this server.

I can telnet to another server, and then SSH into my server. Or I can SSH from home. But I'm getting a connection timed out when I try from here.

I can FTP to my server from work. And just about anything else, but I can't SSH.

Should I just be deleting the temp files or something for authentication, or what could I be missing?

Carter

incynr8 · 06-28-2007, 11:16 AM

yon can try editing the
/home/USER/.ssh/known_hosts file if the RSA key for ip/host might have changed. I usually just delete that particular hosts entry and allow it to be recreated.

not sure about your work network, you own it? Full NAT with port forwarding and nothing blocked? ssh to elsewhere ok?

ssh port, has it been changed on this server or the default outgoing ssh port on your client system?

Kindred · 06-28-2007, 11:34 AM

I think Al is on the right track.
Double check that your outbound IP address hasn't changed?

I've seen a change in IP and/or hostname cause similar issues around here.

Painthappy · 06-28-2007, 11:38 AM

Yeah.. outbound IP hasn't changed.

I can no longer log into SSH, or into the plesk-stat admin section. it just won't connect.

So if I do a tracert, and it goes through the NSA servers.. should I be worried? heh...

incynr8 · 06-28-2007, 11:41 AM

check etc\hosts_deny for a possible scripted host addition?

HP_Lovecraft · 06-28-2007, 11:44 AM

I have that problem whenever the server resets the ID keys. The client then thinks there is a security breach, and does not want to connect.

Otherwise, try "pinging" on port 22. If nothing can get through on that port, then somewhere in the pipe might be blocking it. For some reason, lots of firewalls turn off port 22 by default, so I sometimes have to tunnel 22 through port 21 to get around the instrusive firewall.

nick

incynr8 · 06-28-2007, 11:45 AM

i move sshd port by default due to scripted attack attempts

Painthappy · 06-28-2007, 12:25 PM

Yeah.. it's not port 22. But I can't seem to connect to anything in a high range. So I'm a little stumped on that one. nothing in hosts.deny...

I can't log into multiple accounts in the high IP range... not just ssh now. There are a few other things I can't get into also.

I'm wondering if it's on my end now. I don't know where, but I'm looking.

How do you ping a particular port again?

incynr8 · 06-28-2007, 12:27 PM

best tool for that
The GNU Netcat -- Official homepage
or nmap
nmapfe

Painthappy · 06-28-2007, 12:45 PM

I just did a scan, and any port of 7070 is just not recognized.

As if it doesn't exist. Grrrr.... But they DO exist if I try from another computer? That's messed up.

06-28-2007, 11:13 AM	#1 (permalink)
Painthappy I Am The Admin Join Date: Mar 2006 Location: New Boston, NH	Can't SSH from work??? It's been about two weeks now, and I can't seem to SSH from work to this server. I can telnet to another server, and then SSH into my server. Or I can SSH from home. But I'm getting a connection timed out when I try from here. I can FTP to my server from work. And just about anything else, but I can't SSH. Should I just be deleting the temp files or something for authentication, or what could I be missing? Carter __________________ Focal point of a distant gaze MCB Rules - Please Read them MySpace.com/painthappy - MySpace Blog PM me or Email me if you have tips, paintball news, or press releases.

06-28-2007, 11:16 AM	#2 (permalink)
incynr8 .:\|Purification Admin\|:. Join Date: Apr 2006 Location: PA	yon can try editing the /home/USER/.ssh/known_hosts file if the RSA key for ip/host might have changed. I usually just delete that particular hosts entry and allow it to be recreated. not sure about your work network, you own it? Full NAT with port forwarding and nothing blocked? ssh to elsewhere ok? ssh port, has it been changed on this server or the default outgoing ssh port on your client system? __________________ Advertise on MCB That's two-ing thirteen while she's eleven-ing your five........ PPS4LIFE "If a man neglects to enforce his rights, he cannot complain if, after a while, the law follows his example."

06-28-2007, 11:34 AM	#3 (permalink)
Kindred Mod & Underwear Model Join Date: Mar 2006 Location: Neshanic Station, NJ	I think Al is on the right track. Double check that your outbound IP address hasn't changed? I've seen a change in IP and/or hostname cause similar issues around here. __________________ Strive for that moment when you're only a slice of pizza and a hooker away from paradise.

06-28-2007, 11:38 AM	#4 (permalink)
Painthappy I Am The Admin Join Date: Mar 2006 Location: New Boston, NH	Yeah.. outbound IP hasn't changed. I can no longer log into SSH, or into the plesk-stat admin section. it just won't connect. So if I do a tracert, and it goes through the NSA servers.. should I be worried? heh... __________________ Focal point of a distant gaze MCB Rules - Please Read them MySpace.com/painthappy - MySpace Blog PM me or Email me if you have tips, paintball news, or press releases.

06-28-2007, 11:41 AM	#5 (permalink)
incynr8 .:\|Purification Admin\|:. Join Date: Apr 2006 Location: PA	check etc\hosts_deny for a possible scripted host addition? __________________ Advertise on MCB That's two-ing thirteen while she's eleven-ing your five........ PPS4LIFE "If a man neglects to enforce his rights, he cannot complain if, after a while, the law follows his example."

06-28-2007, 11:44 AM	#6 (permalink)
HP_Lovecraft MCB Member Join Date: Aug 2006 Location: Southern Maine	I have that problem whenever the server resets the ID keys. The client then thinks there is a security breach, and does not want to connect. Otherwise, try "pinging" on port 22. If nothing can get through on that port, then somewhere in the pipe might be blocking it. For some reason, lots of firewalls turn off port 22 by default, so I sometimes have to tunnel 22 through port 21 to get around the instrusive firewall. nick __________________ www.montneel.com My Myspace nonsense "the evidence strongly suggests that neither Billy nor Adam (Smart Parts) could have invented the electronic paintgun" -Garr M. King, U.S. Judge

06-28-2007, 11:45 AM	#7 (permalink)
incynr8 .:\|Purification Admin\|:. Join Date: Apr 2006 Location: PA	i move sshd port by default due to scripted attack attempts __________________ Advertise on MCB That's two-ing thirteen while she's eleven-ing your five........ PPS4LIFE "If a man neglects to enforce his rights, he cannot complain if, after a while, the law follows his example."

06-28-2007, 12:25 PM	#8 (permalink)
Painthappy I Am The Admin Join Date: Mar 2006 Location: New Boston, NH	Yeah.. it's not port 22. But I can't seem to connect to anything in a high range. So I'm a little stumped on that one. nothing in hosts.deny... I can't log into multiple accounts in the high IP range... not just ssh now. There are a few other things I can't get into also. I'm wondering if it's on my end now. I don't know where, but I'm looking. How do you ping a particular port again? __________________ Focal point of a distant gaze MCB Rules - Please Read them MySpace.com/painthappy - MySpace Blog PM me or Email me if you have tips, paintball news, or press releases.

06-28-2007, 12:27 PM	#9 (permalink)
incynr8 .:\|Purification Admin\|:. Join Date: Apr 2006 Location: PA	best tool for that The GNU Netcat -- Official homepage or nmap nmapfe __________________ Advertise on MCB That's two-ing thirteen while she's eleven-ing your five........ PPS4LIFE "If a man neglects to enforce his rights, he cannot complain if, after a while, the law follows his example."

06-28-2007, 12:45 PM	#10 (permalink)
Painthappy I Am The Admin Join Date: Mar 2006 Location: New Boston, NH	I just did a scan, and any port of 7070 is just not recognized. As if it doesn't exist. Grrrr.... But they DO exist if I try from another computer? That's messed up. __________________ Focal point of a distant gaze MCB Rules - Please Read them MySpace.com/painthappy - MySpace Blog PM me or Email me if you have tips, paintball news, or press releases.