some time when i login to my server using ssh it show me error like
ssh jakarta
ssh_exchange_identification: Connection closed by remote host
thank you so much.
|
|
0
|
|
|
|
Reply
|
24.ashish (9)
|
10/21/2009 7:20:54 PM |
|
> some time when i login to my server using ssh it show me error like
>
> ssh jakarta
> ssh_exchange_identification: Connection closed by remote host
>
> thank you so much.
I've seen this when TCP wrappers are enabled for SSHD, and the host
you're connecting from is not found in /etc/hosts.allow
|
|
0
|
|
|
|
Reply
|
ITguy
|
10/21/2009 9:48:31 PM
|
|
On Oct 21, 2:20=A0pm, "er.verma" <24.ash...@gmail.com> wrote:
> some time when i login to my server using ssh it show me error like
>
> ssh jakartassh_exchange_identification: Connection closed by remote host
This is an oldish thread but we got the same problem recently.
The problem was caused by script-kiddies running botnets, scanning the
ssh servers with a dictionary attack.
The ssh servers refuse connections after MaxStartups from the botnet
is reached.
From "man sshd_config"
MaxStartups
Specifies the maximum number of concurrent unauthenti-
cated connections to the sshd daemon. Additional
connections are dropped until authentication succeeds or
the LoginGraceTime expires for a connection. The default
is 10.
The solution was to increase the MaxStartups in /etc/sshd_config and
block the botnets with something like "DenyHosts"
http://denyhosts.sourceforge.net/
|
|
0
|
|
|
|
Reply
|
ISO
|
11/12/2009 9:49:44 PM
|
|