Hi,
I am running SSHD over Tor in a VPS in openbsd.amsterdam. In all my
other setups, in other providers, I do not see this problem happening.
Upon connecting for the first time, I do get a "banner line contains
invalid characters" error, and the connection is terminated. (MSG1)
Upon connecting for the second time, everything goes smooth. (MSG2)
Problem is happening on my 2 servers in openbsd.amsterdam.
Any directions into debugging this problem? Both via Tor or via SSHD?
System:
uname -a
OpenBSD xxxx.yyyy.com.br 7.5 GENERIC#188 amd64
*(MSG1):
OpenSSH_9.7p1, OpenSSL 3.2.1 30 Jan 2024
debug1: Reading configuration data /root/.ssh/config
debug1: /root/.ssh/config line 284: Applying options for ams02
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 22: include
/etc/ssh/ssh_config.d/*.conf matched no files
debug1: Connecting to
hug43gx6ftw3rxd3vchtsnbkl5doyqknqdnxua46deaosomghpjmyhqd.onion
[127.42.42.0] port 60112.
debug1: Connection established.
debug1: identity file /root/.ssh/oams002_2 type 0
debug1: identity file /root/.ssh/oams002_2-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_9.7
kex_exchange_identification: banner line contains invalid characters
banner exchange: Connection to 127.42.42.0 port 60112: invalid format
*(MSG2):
OpenSSH_9.7p1, OpenSSL 3.2.1 30 Jan 2024
debug1: Reading configuration data /root/.ssh/config
debug1: /root/.ssh/config line 284: Applying options for ams02
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 22: include
/etc/ssh/ssh_config.d/*.conf matched no files
debug1: Connecting to
hug43gx6ftw3rxd3vchtsnbkl5doyqknqdnxua46deaosomghpjmyhqd.onion
[127.42.42.0] port 60112.
debug1: Connection established.
debug1: identity file /root/.ssh/oams002_2 type 0
debug1: identity file /root/.ssh/oams002_2-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_9.7
debug1: Remote protocol version 2.0, remote software version OpenSSH_9.8
debug1: compat_banner: match: OpenSSH_9.8 pat OpenSSH* compat 0x04000000
debug1: Authenticating to
hug43gx6ftw3rxd3vchtsnbkl5doyqknqdnxua46deaosomghpjmyhqd.onion:60112 as
'xxxREDACTEDxxx'
debug1: load_hostkeys: fopen /root/.ssh/known_hosts2: No such file or
directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or
directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or
directory
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
...
dmesg:
OpenBSD 7.5-current (GENERIC) #188: Sun Jul 14 05:56:27 MDT 2024
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 1056952320 (1007MB)
avail mem = 1002041344 (955MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xf2760 (10 entries)
bios0: vendor SeaBIOS version "1.16.3p0-OpenBSD-vmm" date 01/01/2011
bios0: OpenBSD VMM
acpi at bios0 not configured
cpu0 at mainbus0: (uniprocessor)
cpu0: Intel(R) Xeon(R) CPU E5-2630 0 @ 2.30GHz, 2300.03 MHz, 06-2d-07
cpu0: cpuid 1
edx=78ba97f<FPU,VME,DE,PSE,TSC,MSR,PAE,CX8,SEP,PGE,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2>
ecx=96982203<SSE3,PCLMUL,SSSE3,CX16,SSE4.1,SSE4.2,POPCNT,AES,XSAVE,AVX,HV>
cpu0: cpuid 7.0 edx=400<MD_CLEAR>
cpu0: cpuid 80000001 edx=24100800<NXE,PAGE1GB,LONG> ecx=1<LAHF>
cpu0: cpuid 80000007 edx=100<ITSC>
cpu0: MELTDOWN
cpu0: 32KB 64b/line 8-way D-cache, 32KB 64b/line 8-way I-cache, 256KB
64b/line 8-way L2 cache, 15MB 64b/line 20-way L3 cache
cpu0: smt 0, core 0, package 0
cpu0: using VERW MDS workaround
pvbus0 at mainbus0: OpenBSD
pvclock0 at pvbus0
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "OpenBSD VMM Host" rev 0x00
virtio0 at pci0 dev 1 function 0 "Qumranet Virtio RNG" rev 0x00
viornd0 at virtio0
virtio0: irq 3
virtio1 at pci0 dev 2 function 0 "Qumranet Virtio Network" rev 0x00
vio0 at virtio1: address fe:e1:bb:d4:c3:10
virtio1: irq 5
virtio2 at pci0 dev 3 function 0 "Qumranet Virtio Storage" rev 0x00
vioblk0 at virtio2
scsibus1 at vioblk0: 1 targets
sd0 at scsibus1 targ 0 lun 0: <VirtIO, Block Device, >
sd0: 51200MB, 512 bytes/sector, 104857600 sectors
virtio2: irq 6
virtio3 at pci0 dev 4 function 0 "OpenBSD VMM Control" rev 0x00
vmmci0 at virtio3
virtio3: irq 7
isa0 at mainbus0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns8250, no fifo
com0: console
vscsi0 at root
scsibus2 at vscsi0: 256 targets
softraid0 at root
scsibus3 at softraid0: 256 targets
root on sd0a (f32b57a6105ff2a8.a) swap on sd0b dump on sd0b
I am running SSHD over Tor in a VPS in openbsd.amsterdam. In all my
other setups, in other providers, I do not see this problem happening.
Upon connecting for the first time, I do get a "banner line contains
invalid characters" error, and the connection is terminated. (MSG1)
Upon connecting for the second time, usually everything goes smooth. (MSG2)
Any directions into debugging this problem? Both via Tor or via SSHD?
System:
uname -a
OpenBSD xxxx.yyyy.com.br 7.5 GENERIC#188 amd64
*(MSG1):
OpenSSH_9.7p1, OpenSSL 3.2.1 30 Jan 2024
debug1: Reading configuration data /root/.ssh/config
debug1: /root/.ssh/config line 284: Applying options for ams02
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 22: include
/etc/ssh/ssh_config.d/*.conf matched no files
debug1: Connecting to
hug43gx6ftw3rxd3vchtsnbkl5doyqknqdnxua46deaosomghpjmyhqd.onion
[127.42.42.0] port 60112.
debug1: Connection established.
debug1: identity file /root/.ssh/oams002_2 type 0
debug1: identity file /root/.ssh/oams002_2-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_9.7
kex_exchange_identification: banner line contains invalid characters
banner exchange: Connection to 127.42.42.0 port 60112: invalid format
*(MSG2):
OpenSSH_9.7p1, OpenSSL 3.2.1 30 Jan 2024
debug1: Reading configuration data /root/.ssh/config
debug1: /root/.ssh/config line 284: Applying options for ams02
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: /etc/ssh/ssh_config line 22: include
/etc/ssh/ssh_config.d/*.conf matched no files
debug1: Connecting to
hug43gx6ftw3rxd3vchtsnbkl5doyqknqdnxua46deaosomghpjmyhqd.onion
[127.42.42.0] port 60112.
debug1: Connection established.
debug1: identity file /root/.ssh/oams002_2 type 0
debug1: identity file /root/.ssh/oams002_2-cert type -1
debug1: Local version string SSH-2.0-OpenSSH_9.7
debug1: Remote protocol version 2.0, remote software version OpenSSH_9.8
debug1: compat_banner: match: OpenSSH_9.8 pat OpenSSH* compat 0x04000000
debug1: Authenticating to
hug43gx6ftw3rxd3vchtsnbkl5doyqknqdnxua46deaosomghpjmyhqd.onion:60112 as
'xxxREDACTEDxxx'
debug1: load_hostkeys: fopen /root/.ssh/known_hosts2: No such file or
directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or
directory
debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or
directory
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
...
dmesg:
OpenBSD 7.5-current (GENERIC) #188: Sun Jul 14 05:56:27 MDT 2024
dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC
real mem = 1056952320 (1007MB)
avail mem = 1002041344 (955MB)
random: good seed from bootblocks
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 2.4 @ 0xf2760 (10 entries)
bios0: vendor SeaBIOS version "1.16.3p0-OpenBSD-vmm" date 01/01/2011
bios0: OpenBSD VMM
acpi at bios0 not configured
cpu0 at mainbus0: (uniprocessor)
cpu0: Intel(R) Xeon(R) CPU E5-2630 0 @ 2.30GHz, 2300.03 MHz, 06-2d-07
cpu0: cpuid 1
edx=78ba97f<FPU,VME,DE,PSE,TSC,MSR,PAE,CX8,SEP,PGE,CMOV,PAT,PSE36,CFLUSH,MMX,FXSR,SSE,SSE2>
ecx=96982203<SSE3,PCLMUL,SSSE3,CX16,SSE4.1,SSE4.2,POPCNT,AES,XSAVE,AVX,HV>
cpu0: cpuid 7.0 edx=400<MD_CLEAR>
cpu0: cpuid 80000001 edx=24100800<NXE,PAGE1GB,LONG> ecx=1<LAHF>
cpu0: cpuid 80000007 edx=100<ITSC>
cpu0: MELTDOWN
cpu0: 32KB 64b/line 8-way D-cache, 32KB 64b/line 8-way I-cache, 256KB
64b/line 8-way L2 cache, 15MB 64b/line 20-way L3 cache
cpu0: smt 0, core 0, package 0
cpu0: using VERW MDS workaround
pvbus0 at mainbus0: OpenBSD
pvclock0 at pvbus0
pci0 at mainbus0 bus 0
pchb0 at pci0 dev 0 function 0 "OpenBSD VMM Host" rev 0x00
virtio0 at pci0 dev 1 function 0 "Qumranet Virtio RNG" rev 0x00
viornd0 at virtio0
virtio0: irq 3
virtio1 at pci0 dev 2 function 0 "Qumranet Virtio Network" rev 0x00
vio0 at virtio1: address fe:e1:bb:d4:c3:10
virtio1: irq 5
virtio2 at pci0 dev 3 function 0 "Qumranet Virtio Storage" rev 0x00
vioblk0 at virtio2
scsibus1 at vioblk0: 1 targets
sd0 at scsibus1 targ 0 lun 0: <VirtIO, Block Device, >
sd0: 51200MB, 512 bytes/sector, 104857600 sectors
virtio2: irq 6
virtio3 at pci0 dev 4 function 0 "OpenBSD VMM Control" rev 0x00
vmmci0 at virtio3
virtio3: irq 7
isa0 at mainbus0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns8250, no fifo
com0: console
vscsi0 at root
scsibus2 at vscsi0: 256 targets
softraid0 at root
scsibus3 at softraid0: 256 targets
root on sd0a (f32b57a6105ff2a8.a) swap on sd0b dump on sd0b
--
-fm
