Prev: Creating a patch
Next: Help needed because C++ free() does not give the memory back to the system
From: er.verma on 21 Oct 2009 15:20

some time when i login to my server using ssh it show me error like

ssh jakarta
ssh_exchange_identification: Connection closed by remote host

thank you so much.
From: ITguy on 21 Oct 2009 17:48
> some time when i login to my server using ssh it show me error like
>
> ssh jakarta
> ssh_exchange_identification: Connection closed by remote host
>
> thank you so much.

I've seen this when TCP wrappers are enabled for SSHD, and the host
you're connecting from is not found in /etc/hosts.allow
From: Oscar Iván on 12 Nov 2009 16:49
On Oct 21, 2:20 pm, "er.verma" <24.ash...(a)gmail.com> wrote:
> some time when i login to my server using ssh it show me error like
>
> ssh jakartassh_exchange_identification: Connection closed by remote host

This is an oldish thread but we got the same problem recently.
The problem was caused by script-kiddies running botnets, scanning the
ssh servers with a dictionary attack.
The ssh servers refuse connections after MaxStartups from the botnet
is reached.

From "man sshd_config"

MaxStartups

Specifies the maximum number of concurrent unauthenti-
cated connections to the sshd daemon. Additional
connections are dropped until authentication succeeds or
the LoginGraceTime expires for a connection. The default
is 10.

The solution was to increase the MaxStartups in /etc/sshd_config and
block the botnets with something like "DenyHosts"
http://denyhosts.sourceforge.net/
 | 
Pages: 1
Prev: Creating a patch
Next: Help needed because C++ free() does not give the memory back to the system