Click to See Complete Forum and Search --> : I broke sshd ;)


Soybomb
12-30-2001, 02:52 AM
So last night I was sitting in my apartment. I went on and ssh'ed into my linux box at home that is running slackware 8.0 and has been for quite a few months just fine. Everything was fine and I went on and way playing with nmap on a remote network (network I work at, ISP, its not malicious) and then went to bed and logged off everything.

This morning I tried to ssh into that box again and was denied access. I can still login locally and from another host that I tried. I can still see webpages from apache but get "secure login to x.x.x.x refused."

At first I thought maybe portsentry saw this scanning somehow and dropped me via /etc/hosts.deny but there is no matching entry and that ip is not in the portsentry logs. I'm truly confused as to whats happened here. Any ideas?

error27
12-30-2001, 03:57 AM
cat /var/log/auth.log | less

look at the bottom of the file.

btw I forget what distro you use... that makes a difference for helping you.

Soybomb
12-30-2001, 10:30 PM
I don't seem to have auth.log or anything that resembles it. What is that file for?

Hena
12-31-2001, 02:39 AM
At least my OpenSSH (in RH7.1) logs the logins to "/var/log/messages", might want to check, what reads there at the time you logged in.