The macosxhints Forums

The macosxhints Forums (http://hintsforums.macworld.com/index.php)
-   Networking (http://hintsforums.macworld.com/forumdisplay.php?f=14)
-   -   Blocking SSH Dictionary Attacks (http://hintsforums.macworld.com/showthread.php?t=44260)

zed 11-30-2005 07:28 AM

Random Guess... did you restart the SSH daemon?

you can either HUP sshd or reboot the system.

-Zed :cool:

trevor 11-30-2005 07:35 AM

Yes, I tried* both.

Trevor

[Full disclosure edit: sshd is not running all the time, so HUPing sshd was unsuccessful--I got a "No matching processes belonging to you were found" message.]

zed 11-30-2005 07:36 AM

ok then which sshd.conf file did you change? what was the full path to it?

--Zed :cool:

trevor 11-30-2005 07:37 AM

/etc/sshd_config

Trevor

zed 11-30-2005 07:50 AM

hehe just got it working here...

it appears that sshd is not really running... apple must be running it under a different process.. not look yet.. but anyway do this:

sudo sshd

then try to connect again to 2222

--Zed :cool:

trevor 11-30-2005 07:56 AM

Yes, that works. Hmmm. What is the mechanism that usually launches sshd and makes it listen on port 22, ignoring /etc/sshd_config? Is that xinetd? So how do I configure xinetd (if that is correct) to launch sshd but not ignore sshd_config?

Trevor

zed 11-30-2005 08:05 AM

nothing to do with xinetd... the ssh that's running on 22 is control from the sharing control panel.

I'm not sure what it's running atm..

blb 11-30-2005 02:00 PM

If you're on 10.4, launchd is what's handling things; specifically, this part of /System/Library/LaunchDaemons/ssh.plist:
Code:

<key>Sockets</key>
<dict>
    <key>Listeners</key>
    <dict>
        <key>Bonjour</key>
        <array>
            <string>ssh</string>
            <string>sftp-ssh</string>
        </array>
        <key>SockServiceName</key>
        <string>ssh</string>
    </dict>
</dict>

Changing ssh's info in /etc/services and HUPing launchd should switch ssh over (I haven't tested it though).


All times are GMT -5. The time now is 09:34 PM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.
Site design © IDG Consumer & SMB; individuals retain copyright of their postings
but consent to the possible use of their material in other areas of IDG Consumer & SMB.