Bug#1077799: openssh-server: cannot login anymore: error "kex_exchange_identification: read: Connection reset by peer"

Andrea Zagli <[email protected]>
Newsgroups gmane.linux.debian.devel.ssh
Message-ID <87bk2b9cpi.fsf__16236.8325911061$1722612095$gmane$org@deimos.saetta.homelinux.org>
Andrea Zagli <[email protected]> writes:

> Colin Watson <[email protected]> writes:
>
>> (CCing the bug report again so that this is archived)
>>
>> On Fri, Aug 02, 2024 at 04:30:35PM +0200, Andrea Zagli wrote:
>>> i think it's disabled
>>> 
>>> ○ ssh.socket - OpenBSD Secure Shell server socket
>>>      Loaded: loaded (/usr/lib/systemd/system/ssh.socket; disabled; preset: enabled)
>>>      Active: inactive (dead)
>>>    Triggers: ● ssh.service
>>>      Listen: [::]:22 (Stream)
>>> 
>>> 
>>> the sshd service starts without problems
>>> 
>>> i tried with a clean sshd_config file, but same problem
>>> 
>>> i downgraded openssh to 9.7 and it works
>>
>> In that case I need all the ssh-related log entries you can give me -
>> "journalctl -u ssh.service --lines=1000", /var/log/auth.log, and so on.
>
>
> the only log produced 
>
> ago 02 16:30:11 deimos sshd[27821]: Received signal 15; terminating.
> ago 02 16:30:11 deimos systemd[1]: Stopping ssh.service - OpenBSD Secure Shell server...
> ago 02 16:30:11 deimos systemd[1]: ssh.service: Deactivated successfully.
> ago 02 16:30:11 deimos systemd[1]: Stopped ssh.service - OpenBSD Secure Shell server.
> ago 02 16:30:25 deimos systemd[1]: Starting ssh.service - OpenBSD Secure Shell server...
> ago 02 16:30:25 deimos sshd[32054]: Server listening on 0.0.0.0 port 22.
> ago 02 16:30:25 deimos sshd[32054]: Server listening on :: port 22.
> ago 02 16:30:25 deimos systemd[1]: Started ssh.service - OpenBSD Secure Shell server.
> ago 02 16:30:29 deimos sshd-session[32063]: refused connect from 10.0.0.99 (10.0.0.99)
>
>
> last line also on auth.log


i set sshd loglevel to debug3 and i found


ago 02 17:06:21 deimos sshd-session[35156]: debug1: Connection refused by tcp wrapper


i have "sshd: ALL" in hosts.allow and "ALL: ALL" in hosts.deny... never
changed these files from years
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.