Hi Dan,

PF=NO won't disable pf unless you reboot, FYI. Run

   # pfctl -d

to disable it immediately.

If you want to keep pf running, you can run tcpdump while attempting to connect with a client to see if pf is blocking SSH:

    # tcpdump -nettti pflog0 port 22

That will show you all activity on port 22 and tell if you if it is passed or blocked by pf.

Some other troubleshooting tips:

Run

    # grep sshd /var/log/authlog

and see what it says about connection attempts.

Awhile back another user had a similar issue, and the result, I believe, was a bad MTU setting on the client. Do your clients have a custom ssh_config? Can you try another client?



--
Jeff Goettsch
Agricultural and Resource Economics
http://agecon.ucdavis.edu/

On 1/24/14 7:50 AM, Dan Daley wrote:
I am new to OpenBSD and just installed 5.4 on an AMD 64 machine.  Still running 
generic kernel.

sshd is running and I can ssh into the local machine using ssh 192.168.1.4

However, if I attempt to ssh into the box from another machine on the network, I get 
"Operation timed out"

I tried disabling pf by adding PF=NO to rc.conf.local, to make sure that that 
wasn't the culprit, but that didn't help.

I also attempted to telnet to port 22 to see if I received the SSH header 
response… but that timed out with no response.

Also tried with a hosts.allow with ALL: 192.

Any other suggestions to assist troubleshooting this?  I haven't seen any 
messages output to any of the logs when attempting to ssh into the machine.

Dan.

Reply via email to