Re: Odd sshd entry in auth.log

2013-09-14 Thread Willem Jan Withagen
On 2013-09-14 14:01, David Wolfskill wrote: Sep 13 12:43:24 albert sshd[43949]: fatal: Read from socket failed: Connection reset by peer [preauth] I see plentyu of these, if only because I test the sshd availablity with nagios without actually going thru the full login... I just abort once I

Re: Odd sshd entry in auth.log

2013-09-14 Thread Dag-Erling Smørgrav
David Wolfskill writes: > Sep 13 12:43:24 albert sshd[43949]: fatal: Read from socket failed: > Connection reset by peer [preauth] Probably a banner scan. I wouldn't worry about it. I see millions of these every day. DES -- Dag-Erling Smørgrav - d...@des.no __

Odd sshd entry in auth.log

2013-09-14 Thread David Wolfskill
My (tiny) networks at home are sitting behind a multi-homed FreeBSD machine using IPFW & natd, with an externally-visible static /32 -- nothing particularly obscure or exotic, certainly. The packet-filter box is configured to forward incoming ssh (22/tcp) to my primary internal machine; in turn, t