Date: Sun, 21 Aug 2005 04:07:47 -0600 From: Pat Maddox <pergesu@gmail.com> To: FreeBSD Questions <freebsd-questions@freebsd.org>, remko@freebsd.org Subject: Re: Security warning with sshd Message-ID: <810a540e05082103073f0622f7@mail.gmail.com> In-Reply-To: <43084AE9.7020305@FreeBSD.org> References: <810a540e05082101182e4e75fa@mail.gmail.com> <43084AE9.7020305@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On 8/21/05, Remko Lodder <remko@freebsd.org> wrote: > Pat Maddox wrote: > > In my recent security email, I got the following errors: > > cantona.dnswatchdog.com login failures: > > Aug 20 02:37:19 cantona sshd[9444]: fatal: Write failed: Operation not = permitted > > Aug 20 04:30:42 cantona sshd[16142]: fatal: Write failed: Operation > > not permitted > > Aug 20 21:21:51 cantona sshd[45716]: fatal: Write failed: Operation > > not permitted > > > > So three questions: What is it? Should I be worried? How can I fix it= ? > > > > Thanks, > > Pat >=20 > A couple of messages that i read when searching through google > appear to indicate that it might rely on your firewall, bad > packets that are not in state anymore and such and then gets > blocked by your firewall. >=20 > Could you provide some more details of events happening around > the same time of the messages you posted here? Perhaps something > else precedes the message which gives more information on what > might have happened... >=20 > Url with some information: > http://lists.freebsd.org/pipermail/freebsd-pf/2005-August/001337.html > (and related messages) >=20 > Cheers, > Remko >=20 > -- > Kind regards, >=20 > Remko Lodder ** remko@elvandar.org > FreeBSD ** remko@FreeBSD.org > Reporter DSINET ** remko@DSINet.org >=20 I don't know what exactly was happening, but after looking at that link my guess is that it occurred when I enabled the firewall. If I'm logged in and enable it, my ssh connection is dropped...except I don't get disconnected, the ssh connection is simply unresponsive. Which makes sense since the firewall just went up. But maybe that's part of the problem?
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?810a540e05082103073f0622f7>