From owner-freebsd-security Fri Jan 26 12:35:31 2001 Delivered-To: freebsd-security@freebsd.org Received: from barabas.bitstream.net (barabas.bitstream.net [216.243.128.159]) by hub.freebsd.org (Postfix) with SMTP id 0492937B699 for ; Fri, 26 Jan 2001 12:35:14 -0800 (PST) Received: (qmail 371 invoked from network); 26 Jan 2001 20:35:13 -0000 Received: from unknown (HELO dmitri.bitstream.net) (216.243.132.33) by barabas with SMTP; 26 Jan 2001 20:35:13 -0000 Date: Fri, 26 Jan 2001 14:29:32 -0600 (CST) From: Dan Debertin To: Bruce Albrecht Cc: Subject: Re: wierd ssh failure In-Reply-To: <14961.56948.936058.387747@localhost.zuhause.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, 26 Jan 2001, Bruce Albrecht wrote: > > > > I forgot to mention that I'm running 4.2-stable (circa last week). > When I ran strings on sshd, I couldn't find the message that I got > from ssh, which is why I'm wondering if this was a temporary routing > error, or an attempt to do a man-in-the-middle attack. Run strings on your client; that's where it's coming from: kidjo [02:32pm] # strings /usr/bin/ssh | grep away You don't exist, go away! I've gotten that message when playing around with NIS; it looked like the SSH client couldn't tell who I was when I ran it, so it quit. I don't think you've been cracked; ssh just can't tell who you are. ~Dan D. -- ++ Unix is the worst operating system, except for all others. ++ Dan Debertin ++ Senior Systems Administrator ++ Bitstream Underground, LLC ++ airboss@bitstream.net ++ (612)321-9290 x108 ++ GPG Fingerprint: 0BC5 F4D6 649F D0C8 D1A7 CAE4 BEF4 0A5C 300D 2387 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message