0

information

I asked the same question in stackoverflow.com and was told that this would be a better place to ask. I'm running an Ubuntu Server 13.10. I can connect to it using SSH from any computer except my laptop (MacBook 2007, OSX 10.6.8). OpenSSH was installed using port.

When I try to connect to the server, it will always be added to the host.deny. Nevertheless it is possible to connect to the server of my university with denyhost active. When I'm connected to the university server, it is also possible to connect to mine using the same command.

/var/log/denyhosts:

2014-08-31 22:49:28,183 - denyhosts   : INFO     new denied hosts: ['xxx.xxx.xxx.xxx']
2014-08-31 22:49:28,183 - denyhosts   : INFO     new suspicious logins: ['username - xxx.xxx.xxx.xxx']
2014-08-31 22:49:58,283 - denyhosts   : INFO     new suspicious logins: ['username - xxx.xxx.xxx.xxx']

/etc/denyhosts.conf

SECURE_LOG = /var/log/auth.log
HOSTS_DENY = /etc/hosts.deny
PURGE_DENY = 1y
BLOCK_SERVICE  = sshd
DENY_THRESHOLD_INVALID = 5
DENY_THRESHOLD_VALID = 10
DENY_THRESHOLD_ROOT = 1
DENY_THRESHOLD_RESTRICTED = 1
WORK_DIR = /var/lib/denyhosts
SUSPICIOUS_LOGIN_REPORT_ALLOWED_HOSTS=YES
HOSTNAME_LOOKUP=YES
LOCK_FILE = /run/denyhosts.pid
ADMIN_EMAIL = root@localhost
SMTP_HOST = localhost
SMTP_PORT = 25
SMTP_FROM = DenyHosts <nobody@localhost>
SMTP_SUBJECT = DenyHosts Report
AGE_RESET_VALID=5d
AGE_RESET_ROOT=25d
AGE_RESET_RESTRICTED=25d
AGE_RESET_INVALID=10d
DAEMON_LOG = /var/log/denyhosts
DAEMON_SLEEP = 30s
DAEMON_PURGE = 1h

question

What would cause such strange behaviour, and how can I fix it?

Poehli
  • 103
  • 1
  • 4

1 Answers1

1

You can try to whitelist your IP:

sudo vi /etc/hosts.allow
Add (w/o quotes):  "sshd: 1.2.3.4"

Also, check the options in /etc/denyhosts.conf to see if there is anything you want to change.

You can also uninstall denyhosts if it's causing more harm than good (apt-get remove denyhosts), OR tweak the denyhosts.conf thresholds to be more relaxed.

EDIT: denyhosts' FAQ is one of the most comprehensive ones I've ever seen.