Several of our servers that do not have direct exposure to the Internet have the following entry appearing in their respective /var/log/secure files.Are these messages harmless? If so, is there any way or reason to suppress their appearing in the log files?
View 1 Replies
I'm using Ubuntu 11.04. I've bought an account in a SSH sever.
Code:
loveright 02:41:54 ~$ ssh gqqnb@205.185.123.107
gqqnb@205.185.123.107's password:
Last login: Sat Jul 2 14:41:53 2011 from 123.137.120.69
Connection to 205.185.123.107 closed.
[Code].....
I have installed Fedora 13 and updated it. I simply cant use ssh to connect to this Fedora, not even locally. I have enabled port22 in firewall settings and nothing. Tried to disable firewall completely and nothing. I have disabled SELinux (not sure if it has something to do with this, but... ) and nothing. Entered "ALL: ALL" in /etc/hosts.allow and still nothing. Dont know what to do anymore.
Here is what happens when I try to ssh to this machine, even from it:
[flibio@surf ~]$ ssh localhost
warning: Need basic cursor movement capability, using vt100
flibio's password:
Authentication successful.
Disconnected; connection lost (Connection closed.).
Connection to localhost closed.
[flibio@surf ~]$
Looking into Services > sshd and it says "This service is dead."
So I tried:
[root@surf etc]# service sshd restart
Stopping sshd: [FAILED]
Starting sshd: : OpenSSH_5.4p1 on
: FATAL: Creating listener failed: port 22 probably already in use! .....
And still I get disconnected whenever I try to ssh to this machine from anywhere. Services says that sshd is allways dead, even restarting it but I can only restart it by doing a pkill sshd before.
I have recently installed fedora 14 and configured vpn to access my work network. I need to access some windows machines which although I can ping I cannot remote desktop into. When I go to Applications>Internet> Remote Desktop Viewer and put in the machine name (either just the machine name or the FQDN including the domain name) I get an error "Connection to <machinename> was closed".
View 4 Replies View Relatedi try to connect to a specific ip address with ssh i have installed the ssh server and client. i also try it by connecting with localhost without any problem. But i keep taking this message if to try to connect to the ip address. i checked my hosts.allow and hosts.deny files and all are commented in there (i think tha this should not be the problem).
View 2 Replies View RelatedI've installed (Slackware 12.2) Cisco AnyConnect Secure Mobility Client for vpn connection (it is OpenSSL based app). When I'm trying to connect using this agent I get the error
Code: AnyConnect cannot confirm it is connected to your secure gateway.The local network may not be trustworthy.Please try another network.I don't know much about vpn. Any help are very welcomed.
I'm a member of ubuntuone-android-hackers team on Launchpad, I work on Ubuntu One Files app. If you would like to see new features in the app, you can post your ideas here. I think the forums is a good and comfortable place to share ideas. We have already received quite a lot of requests via e-mail. Most notably, these have been already requested:
- secure app launch with PIN entry
- preserve folder structure when auto-uploading files
- real sync (i.e. reupload a file, that has been modified; sync down favorite folders; etc)
We continue to fix bugs and improve on what we already have, this is just to give you a place to share ideas on new features. We will select the best we can take on given available time and resources. I can't guarantee we'll implement them, I can guarantee however that we're doing our best and I'll be keeping track of this official thread.
I'm having a problem with Subversion. When I try an "svn up" it gives me this error message:
SSL handshake failed: Secure connection truncated
I'm running Ubuntu 10/4 but I also had this problem with 9/10. Does anyone know what this error message means? It appears to be an SSL problem but it's not clear to me what exactly the problem is. I do not have this problem with svn on my other office computer, nor my home computer. FYI, I'm running subversion on the Regina project.
The full error message is this:
Code:
svn up
svn: OPTIONS of '[URL]': SSL handshake failed: Secure connection truncated [URL]. Although I don't think there's anything specific to Regina about this svn problem, as I mentioned, I can "svn up" from home, or from my other office computer.
If I look at firestarter actve connections I see that there are several connections from me to some dynamic ip, on various ports. I have no idea what that is.1. How to find which process is doing this connection ?2This is sure nothing good, how to kill /block connection
View 1 Replies View RelatedI need a single user ftp server on a dedicated machine which encrypts passcode transaction (and preferably everything else) and logs attempted entry. Assume forwarding port stuff / DMZ stuff is already setup.
connecting client will be either command-line tools or winscp, depending on client OS.
I use a secure connection to reach company network from outside. There's a client application "Juniper network", which creates the secured tunnel to a company network. However, the connection never survives more than 8 seconds, when it goes disconnected with the message "Route monitor alarm". From my recent search for a solution I've found that this error is caused by a change in a route table, which violates a connection policy.
"This disconnect is typically triggered by a change in the routing table of the client machine, the change is such that the split tunnel policies defined by the administrator will be violated" - from [URL]
This is how a routing table looks before, during and after the connection attempt:
Code:
[vs@dilbert network-scripts]$ route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.64.64.64 * 255.255.255.255 UH 0 0 0 ppp0
xxx.xxx.xxx.0 10.64.64.64 255.255.255.255 UGH 0 0 0 ppp0
[Code].....
I am running an Ubuntu Server on a VirtualBox VM running on my windows machine. So I've created a self-signed certificate using the following tutorial: [URL]
From this tutorial I'm left with 3 files:
server.key
server.csr
server.crt
Then I found this very similar tutorial that has an extra bit on installing the certificates in apache: [URL] So I followed it's instructions which boil down to this:
[Code]...
So I'm thinking this should work now. However in Chrome I get: SSL connection error Unable to make a secure connection to the server. This may be a problem with the server, or it may be requiring a client authentication certificate that you don't have. Error 107 (net::ERR_SSL_PROTOCOL_ERROR): SSL protocol error. IE8 gives me a typical "Internet Explorer cannot display the webpage" Note that [URL] fails while [URL] works fine, so it's definitely something in my ssl setup I'm thinking.
I am facing problem while connection to host (Red Hat Enterprise Linux ES release 4 (Nahant Update 5)) via putty.
when ever i try to connect host machine via putty/ssh, connection is established succussfully but just after few minutes it disconnectes . same is the problem if i connect using VNC. I did't made any configuration changes in recent past, earlier every thing was fine.
I'm a frequent user of the shared connection feature of SSH. Usually i have two or three connections open at the same time through the connection sharing feature, but sometimes when i try to start another i get the message "Shared connection to <server< closed". All the connection that are established through the connection sharing feature are still active and not closed, but when i try to create a new one i get that message.. i've even got that message when i have only had two connections through the shared connection feature.
I've tried to search google but it doesnt seem like anyone else has had the same kind of problem, does someone know why i sometimes get this error ?
As the title implies, I'm having an issue with svn, whenever I try to make an svn action, I get: svn: Network connection closed unexpectedly
I've done some Google-fu on this, and the obvious culprits don't seem to be at work. Specifically, the svn server does not use a nonstandard port, and I'm not using Tortoise SVN or putty, just going directly from the command line. Additionally, I was able to use the server as recently as this morning and no coworkers are having problems.
I have a weird problem with ssh, I am trying to ssh to a solaris server (sparc) running solaris 10 from my Ubuntu box and as soon as it authenticates the password it closes the connection. The box is located on a internal network in a wiring closet with no ability for me to access console but i still have a working ssh session from 2 days ago with what i'm trying to comb through settings and trying to resolve the issue. It also has 2 NIC's and I cannot connect to the either ruling out hardware problem. I checked if there is a limit of the number of active connections and the was no limit. I was able to connect mitiple session till 2 days ago (at one point i had on my machine 8 active ssh sessions to the same server).
Here is the output of ssh -vvv:
Code: $ ssh -vvv -l user1 10.100.xxxxx
OpenSSH_5.5p1 Debian-4ubuntu4, OpenSSL 0.9.8o 01 Jun 2010
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0 .....
debug3: channel 0: close_fds r -1 w -1 e 6
Connection to 10.100.50.4 closed.
Transferred: sent 1768, received 1688 bytes, in 0.1 seconds
Bytes per second: sent 12077.9, received 11531.4
debug1: Exit status 254
setting up an SFTP server on debian, all the way down through step 3, though I did not "Match Group" I did Match User as I only need 1 user to have access to the SFTP server(did not continue on to step 4 and beyond as they did not apply to me) Im getting the error:
connection closed by server with exitcode 141
I get this when trying to log in via filezilla. I actually only got the 141 error on the first attempt, any attempts after that just says "could not connect to server". Username and password authentication goes through, so it is not a login info issue.Im running Debian squeeze, and that guide was for Lenny, that shouldnt matter, I dont think.
In my case, it occurs intermittently when trying to connect using putty's command line client 'plink.exe' to a linux machine using ssh. For some testing purposes, a linux server is setup with 8K virtual ip addresses and the testing scripts will connect to these ip addresses through ssh using plink.exe. There will be concurrently 25 ssh sessions launched to the server. While it works for sometimes, it throws 'server unexpectedly closed network connection' error intermittently. If the same ip address is tried again manually, it works. While the ssh server is accepting connections, this error is thrown sometimes and unable to find out the reason from the logs. It is not that the ssh connection is completely blocked. It gives this error message while connecting to some of the virtual ip addresses but works some times.
The hosts.deny, sshd_config are tuned to allow the connections, allow more sessions etc.
I am having trouble connecting to one of the VM's through ssh from base machine all of a sudden. All I get is an error : ssh_exchange_identification: Connection closed by remote host
--IP/Hostname crossed out --
[root@XX-XX02 ~]# ssh -v 1XX.1X.5X.1XX
OpenSSH_4.3p2, OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008[code].....
Saying that the problem is only with ssh would be wrong as I can't seem to telnet or ftp it either. But I can ping it fine.When I try to login to that VM through console, it won't even let me login. The screen would flash for a sec and the same login prompt would reappear. I am not sure what exactly happened as it was working fine before.
OS version: CentOS release 5.5 (Final)
uname -a: Linux XX.XX 2.6.18-194.17.1.el5 #1 SMP Wed Sep 29 12:50:31 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux
Just setup my postfix and trying to telnet localhost.
here it is..
telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
Connection closed by foreign host.
I wanna paste my /var/log/maillog but i don't know how, when i copy from putty screen it's only copied part of the log.
btw i found one similar problem here [URL] but the thread starter already lost the pastebin so i don't know how he resolved the problems.
I am seeing an unknown internet connection both send and receive of about 5kbits that seems to happen every 15 seconds or so. I noticed this the other day and rebooted. It went away but I noticed it again. Nothing shows in the System monitor under processes. I can close all programs and it still seems to happen. What is the best way to track down what is causing this connection, and how to tell what it is connecting to?
View 8 Replies View RelatedI'm forwarding an application (HandBrakegui) over an ssh tunnel using X11 forwarding as follows
ssh -C -p PORTNUM user@host -X ghb
This all works fine and X11 loads and handbrake's X11 output to my local mac.The server is Ubuntu 10.4 and the client is Mac OS X.Is it possible for the X11 HandBrake Gui session to be kept alive once the SSH tunnel or the X11 window on the client (mac) has been closed? As I'm adding files to HandBrakes queue I want the programme to finish encoding them even if I turn off the client computer as the server is always on.
We have one FTP server. Users are uploding files to the perticular directory remotely. but today some users got below error message.
421 Service not available, remote server has closed connection.
(vsftpd service is up and running) What are the possible causes for this error and from where I should start troubleshooting?
Firstly I am new to red5 and not very strong when it comes to linux. I have had installed red5 on my dedicated server and going by the http://myIP:5080/installer demos it is all working fine. My problem is I cannot get it to work with my software being flashchat. I am not sure if it comes from me using the incorrect RTMP url and if so after trying about 20 or more ways of typing it in I always get the same error message "Connection Failed' or "Connection Closed" not to sure what is meant by Closed as to whether it's working but can't get in or what ever. I am after someone who can get this to work for me please and I am willing to pay for that service once it is working.
View 2 Replies View RelatedI have set up SSH and redirected the ssh server to listen on another port other than 22 for a bit of added security.
Now in hosts.deny I have:
ALL : ALL
In hosts.allow I have:
SSH : ip_address_of_client
I can no longer connect. I get the message: ssh_exchange_identification: Connection closed by remote host.
When I change hosts.allow to read:
ALL : ip_address_of_client
I can successfully connect the server.
However, I only want to allow SSH access in hosts.allow. What is the correct syntax?
I have tried and failed with each one of these:
SSH : ip_address:port_number
SSH2 : ipaddress
sshfwd-portnumber : ip_address_of_client
I have configured rssh 2.3 with openssh 5.8 on RHEL 5.6 64 bit to restrict the users to scp and sftp. When i try to sftp or scp it gives error connection closed. After long googling tried different solutions like add missing libraries, setuid to rssh_helper. I had full copy of /lib to /chroot/lib and /chroot/lib64 but no success. conf and log files are below for reference.
[Code]...
I'm writing a script that tars, bzips, and encrypts a set of files to my GPG key and then (ideally) uploads the files to a backup directory on my school's web server. I want to run it daily as a cron job. Problem is, the web server only allows connections with scp and sftp.
Neither program allows specifying a password as a switch. I want to run it as a cron job, so I won't necessarily be present to type the password, and I'd like to just be able to specify the password in the script.
"Ah ha!" you're thinking. "He needs to generate a keypair and set up ssh to not require a password!" And I've found tutorials on the web that show me how to do just that. Problem there is that they all require me to install software and/or access files outside my home directory on the remote machine.
I have zero access to anything other than my own home directory on the remote machine. None. Nada. Zip. I can't install software, access files in /var or /etc, or find out anything about running processes. The local IT priesthood won't give me any information about what's running on the machine or how I can connect to it (and has made a point of telling me that they don't care for Linux users and I should stop asking questions).
I'd really like to to just be able to specify my password in the script. I understand that scripts are really just text files and that anyone who can get at my desktop computer can read them with a text editor and that this would reveal my password and blah blah blah, but I'm willing to trade that particular risk for the convenience of not having to be awake and monitoring the computer when the cron job is running.
Is there any way to specify the password in the script itself? I'd be happy using either sftp or scp (I've used them both successfully from the terminal to transfer files to this machine).
I want to secure my internet connection by hiding my ip with another ip so I can log to my server with 2 ips . and when someone is tracing the "fake" ip it wont affect me .
Is my ssl connection secure if I'm going through a proxy. Is it possible to craft a malicious proxy to steal/crack authentication?
View 2 Replies View RelatedMy server is suddenly getting giving the following error: Quote: Secure Connection Failed An error occurred during a connection to inenergy.dvrdns.org. SSL received a record that exceeded the maximum permissible length. * The page you are trying to view can not be shown because the authenticity of the received data could not be verified. * Please contact the web site owners to inform them of this problem. Alternatively, use the command found in the help menu to report this broken site. I had been trying to configure the server to do secure logins (before Christmas) , but I don't think I had completed the configuration and I'm not sure how to reset it so that I can start again.
View 1 Replies View Related
