X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org 79A58387084F
Authentication-Results:	sourceware.org;
	dmarc=none (p=none dis=none) header.from=berkeley.edu
Authentication-Results:	sourceware.org;
	spf=pass smtp.mailfrom=carrier AT berkeley DOT edu
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=berkeley-edu.20150623.gappssmtp.com; s=20150623;
	h=from:date:to:cc:subject:message-id:references:mime-version
	:content-disposition:in-reply-to:user-agent;
	bh=88gYA6E5nQmr8Bv+PSnXhryFLdoKdVLYBrPNQkPt09k=;
	b=AS2JU32sjJh/slMlCYgnDlC9NvE6FPyBLvo4YSn7EWaSvh+pyfpf9eQiWNBK6bqQgm
	Y5nRp4hKxtZN7WJ04P/S1dMK66zJ6ABdfGDrtYH8HZEXzImqHAP6U4RINmnvt0a9jxbX
	gc1LUX926fAPOIiA62DBcMXKqdzcAXnp6Y8Or+bTu/NC2lOjKA4q6B73kr6KnGEHO8y9
	IRimcglw4IJFo0u3/9hW/AHqc+znCCeJli0HdojF84QToBz5/Gn4CQktcDyBd/L7MpN8
	ys4e+Tln6E4ivnVXY+ZKMraRCWyOUfgXDVXeXQG2kkhvVOCWmkoGJnIAnOFTx8l4gdfg
	8caQ==
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20161025;
	h=x-gm-message-state:from:date:to:cc:subject:message-id:references
	:mime-version:content-disposition:in-reply-to:user-agent;
	bh=88gYA6E5nQmr8Bv+PSnXhryFLdoKdVLYBrPNQkPt09k=;
	b=LePl6YPmkn+ZbS5MPcLbhCIe0shNM3CBR6lYqJenMzVgKYvHtH4hfF5rUBvrnhXA6D
	ZiZIb9fDVzz9OqWO1vNPjR04CzmIbRUv7nJ69eGpzvOofAVZs5k1RVfiDFlwdxsXuezd
	Wn3IZoj/8p8fMqi0YWbs69Lfz1zPQT7QRjBbFi/J+HJVOU25+7ZsiecaOMVZlDCqvFSN
	qO+Akxf18iS996YjjZHD92uVpb3Khl2ppWx8RaMfTRCIkdaGQjTPss1pcoYt3egEB22p
	8aUg/fowgg4QWClnnEPm1G7jI1x8Cc9u2TZ7dFYS/3HkuGzzTHmvyv9KRgOYKcCHJulj
	tzHQ==
X-Gm-Message-State:	AOAM531z5CA1z7XHb9Hvd0aZUW/V0sTnnb1cA9NtCmbGUpmJbPTE52DZ
	ZEZ5f0uMPyfeU+mexoja8oi28g==
X-Google-Smtp-Source:	ABdhPJw9XmZpgtMuqUnSV6Jm4z0rC46rb0btCkKzfbZ5dsXxg3GRnrc+PWJ9WimnbggYOwTl1BgrJQ==
X-Received:	by 2002:a63:c15:: with SMTP id b21mr203497pgl.341.1608225765444;
	Thu, 17 Dec 2020 09:22:45 -0800 (PST)
From:	Stephen Carrier <carrier AT berkeley DOT edu>
X-Google-Original-From:	Stephen Carrier <carrier AT Berkeley DOT EDU>
Date:	Thu, 17 Dec 2020 09:22:44 -0800
To:	worsafe AT bellsouth DOT net
Subject:	Re: Cygwin sshd broken by seemingly trivial network change
Message-ID:	<20201217172244.GA22670@iguana.crashland.org>
References:	<13d8e55e-bd07-24b7-628c-fa091f1c8401 DOT ref AT bellsouth DOT net>
	<13d8e55e-bd07-24b7-628c-fa091f1c8401 AT bellsouth DOT net>
MIME-Version:	1.0
In-Reply-To:	<13d8e55e-bd07-24b7-628c-fa091f1c8401@bellsouth.net>
User-Agent:	Mutt/1.12.2 (2019-09-21)
X-Spam-Status:	No, score=-2.5 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS,
	TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe:	<https://cygwin.com/mailman/options/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Cc:	cygwin cygwin <cygwin AT cygwin DOT com>
Errors-To:	cygwin-bounces AT cygwin DOT com
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>

On Wed, Dec 16, 2020 at 09:37:08AM -0600, worsafe AT bellsouth DOT net wrote:
> While installing a new router, I changed my local network from 192.168.4.*
> to 192.168.50.*. This seems to have broken Cygwin sshd on both of my remote
> computers, but only for Cygwin; sshd works fine if I boot the remote
> computer from a linux thumb drive. I have noticed no other problems with the
> new network configuration.
> --------
> ssh -vvv does not give any messages that look useful to me. Authentication
> problems usually give some useful message, but this seems to fail before
> getting that far:
> 
> ssh -vvv $ASUS12
> OpenSSH_8.3p1, OpenSSL 1.1.1f 31 Mar 2020
> debug1: Reading configuration data /home/cdr/.ssh/config
> debug1: /home/cdr/.ssh/config line 1: Applying options for *
> debug1: Reading configuration data /etc/ssh_config
> debug2: resolve_canonicalize: hostname 192.168.50.105 is address
> debug2: ssh_connect_direct
> debug1: Connecting to 192.168.50.105 [192.168.50.105] port 22.
> debug1: connect to address 192.168.50.105 port 22: Connection timed out
> ssh: connect to host 192.168.50.105 port 22: Connection timed out
> -----------
> The server is running, as confirmed by cyrunsrv -Q sshd.
> /var/log/sshd.log is an empty file.
> -------
> nmap shows port 22 open on the remote server:
> nmap -p22 $ASUS12
> Nmap scan report for asus12 (192.168.50.105)
> Host is up (0.13s latency).
> PORT STATE SERVICE
> 22/tcp filtered ssh
> ----------
> However, telnet fails before returning the expected header string:
> telnet $ASUS12 22
> Connecting To 192.168.50.105...Could not open connection to the host, on
> port 22
> : Connect failed
> (For comparison, linux returns the string "SSH-2.0-OpenSSH_7.9p1
> Debian-10+deb10u2")
> -------

I think 'filtered' means there is something in the way.  Is all this
on the same LAN but with a new router?  Are the connections wireless?
I would try the telnet test from the server itself, both to its external
address and to localhost.  All in search of clues.  This seems like a 
networking issue or a specific configuration on the server that limits
client access or listening ports.

Stephen

> I can't think what to try short of reinstalling sshd.
> 
> --
> Problem reports:      https://cygwin.com/problems.html
> FAQ:                  https://cygwin.com/faq/
> Documentation:        https://cygwin.com/docs.html
> Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -