Oops, went to you instead of the list first... Carlos E. R. wrote:
And when I try to log in, I see (with a delay):
cer@nimrodel:~> ssh localhost ssh_exchange_identification: Connection closed by remote host cer@nimrodel:~>
And the logs:
Nov 22 12:27:43 nimrodel sshd[7056]: twist 127.0.0.1 to /bin/echo -e "\n\n\tAccess Denied from 127.0.0.1\tSo kindly FOADAH\n";sleep 10
So... the log entry is entirely local. They don't get any text message, but your log is filled with refuse :-p
You'd better modify that line of yours ;-)
-- Cheers, Carlos E. R.
Carlos, I saw that too, but I figured that the examples in /etc/hosts.allow that show that format must be sending the string somewhere besides the log. Maybe, in the past, it did get sent back to the person attempting to gain access, but now due to either some suse setting or some change in how the ssh handshake works, they don't see it any more. But it sure makes finding the stuff in the logs easy ;-) -- David C. Rankin, J.D.,P.E. | openSoftware und SystemEntwicklung Rankin Law Firm, PLLC | Countdown for openSuSE 11.1 www.rankinlawfirm.com | http://counter.opensuse.org/11.1/small -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org