What is left is a firewall on your box ( or another block of another nature ) or a misconfig of your box ....
Like the firewall I run, I can set that IP's that have failed 5 times going in are added to a permanent block ....
Ir is weird.... to say the least
Example:
Time: Sun Dec 17 11:32:26 2006
IP: 208.116.38.153 (Unknown)
Failures: 5 (sshd)
Interval: 75 seconds
Blocked: Yes
Log entries:
Dec 17 11:32:21 serveur2 sshd[9807]: Failed password for root from 208.116.38.153 port 33456 ssh2
Dec 17 11:32:21 serveur2 sshd[9809]: Failed password for root from 208.116.38.153 port 37039 ssh2
Dec 17 11:32:21 serveur2 sshd[9811]: Failed password for root from 208.116.38.153 port 58033 ssh2
Dec 17 11:32:21 serveur2 sshd[9812]: Failed password for root from 208.116.38.153 port 60947 ssh2
Dec 17 11:32:21 serveur2 sshd[9815]: Failed password for root from 208.116.38.153 port 38928 ssh2
I know that Asspimple is stoopid ... As he says, it is a FACT !
But I can't figure out how he can breathe or type , at the same time ....
1) Reverse DNS problem. The DNS server for the reverse resolution of your IP is playing up. That's why you can connect, but nothing appears to happen (or it takes a long time)
2) TCP MTU or MSS problem. Something in between you and your server is quietly dropping packets that are becoming fragmented. Perhaps a router is also blocking the ICMP message that goes back to you to say "you're sending packets that are too large" (this was a common problem when PPPoE first appeared and shaved several bytes off the default maximum packet size... many sites indiscriminately block ICMP to block pings so it kills off legit msgs too)
Ok. Didn't see that one. Then it is without a doubt a DNS issue. And if you haven't played with your DNS settings it is with 99% certainty on the host site. Your ISP is that last 1% and since you can connect fine to other servers, that 1% is almost eliminated.
Have your host go over the reverse DNS again as Rowan suggested.
Try having them run sshd in debug mode (-d) while you try logging in
Ok. Didn't see that one. Then it is without a doubt a DNS issue. And if you haven't played with your DNS settings it is with 99% certainty on the host site. Your ISP is that last 1% and since you can connect fine to other servers, that 1% is almost eliminated.
Have your host go over the reverse DNS again as Rowan suggested.
Try having them run sshd in debug mode (-d) while you try logging in
He's unable to connect via IP, so I don't see where DNS settings come in to play.
1. Have your host disable name resolving in your sshd and ftp server configurations. (Temporarily for sshd anyway, ftp reverse lookups are a waste of resources)
2. See if a reverse entry for your IP exists and is resolvable. If not, see above.
3. Change either your FTP or SSH port (or both, whatever) on the server and see if you can connect through the alternate port(s).
Not completly fixed. I can however connect and get some of the work done thanks to crank over at techiemedia who directed me to try using an SSH ftp program over port 22.
I also discovered if I set the timeout function in my ftp to over 2 minutes, it allowed me in. Though it was also a long wait between each task. The SSH way just takes a bit to connect but once connected all is fine and fast.
The direct problem has not been resolved yet and I am leaning toward a hardware issue on my end. So still have a tech scheaduled to see what the fuck is and went wrong.
BTW for those that suggested it, adding ips and domains to hosts file, no help. Firewall was also not blocking any ports. DNS is fine. Lastly I was unable to connect via standard ftp through port 22. Crank had to have me change and set a lot of different check boxes in the secure ftp program he suggested I try.
I also discovered if I set the timeout function in my ftp to over 2 minutes, it allowed me in. Though it was also a long wait between each task. The SSH way just takes a bit to connect but once connected all is fine and fast.
The direct problem has not been resolved yet and I am leaning toward a hardware issue on my end. So still have a tech scheaduled to see what the fuck is and went wrong.
So then, how come you could FTP in one of my boxes with no delay ?
Makes no fucking sense
I know that Asspimple is stoopid ... As he says, it is a FACT !
But I can't figure out how he can breathe or type , at the same time ....
Comment