X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.3.2 sourceware.org 78124383301D
Authentication-Results:	sourceware.org;
	dmarc=none (p=none dis=none) header.from=bellsouth.net
Authentication-Results:	sourceware.org;
	spf=none smtp.mailfrom=worsafe AT bellsouth DOT net
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=bellsouth.net; s=s2048;
	t=1608271188; bh=gXRXJUQvweBcSg8EaQHro32axxVYItmW3v0hJ//GUGI=;
	h=From:Subject:To:Date:References:From:Subject;
	b=JxRTL5tGRFTilvbuduoiz24uA4aDxP+otnEdUbXev7iMJ2jy7Kok291lzck3QlAgqP+m+cl4YST2Zwhz/kK+1i3A2AQOdOl7kP8K8jj/EQwP8jiNPLibhJIQbOWqAD7j/2HsH7psJXf6+erzkVnJBE0Z6gJbgFWKXpDWklYVVM5d1lPDtBbOGR1BN+UEz6teSPDTk/O1tOEY7ufRiQZTt2veJ66xF8NmxCOuVNi61K+FD0mfvA13qppxAZ0fv0UNpV9AIs+J1do+NFWZ/cFDH4shsQh7QygjTqCTF1Pz/yQxopC4C7bF3WQ1h5fYSJmkMwTw9308gOpsEqCWlKXLIA==
X-SONIC-DKIM-SIGN:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048;
	t=1608271188; bh=1hNqiWGXpO6CAkQNTDdCQe17gozmrksmJb29RdgG35+=;
	h=From:Subject:To:Date:From:Subject;
	b=ph2xr928Ruh1kSsXwUAmjyO9fVl9Zc8HaRYRGMX2O7XbZFdUTuaneH8tuptziiQIIMHr5Pnq4uLXnQX1dyJ0iBsDOW8dyWOxNizG2eK4C3SR5G+bTe/Z5PBFmgbErkR0Ql7IMwC7+D7xSoJP7bkX7Flp+tJsGO5OBpHv/OqPLdl4Bs9vgDrEJ7h/ZaX27z0h+f2yTo+UQ2IGb56vFih/Ik+ZkB6EQftjdH2AHqB6JWtFe4ejZ9yyByTIaFQZEGrvGCp3kJR4rO7zQLbhFCYPVFqFCBSaLgGyNVx+AnJ9E/M6oug3Xuk5Rwt21Jk+cnQcfomsHLPGZy1a1HuRosKEvA==
X-YMail-OSG:	Ij_v3O8VM1nJ_ADHEkiYT5JE0dNLjcHFDu02jGupX._WA1s8NWjIst7l2Aj7u7I
	6LPGHti8nMb3d3INWoQe9kqV9sk9qjynn0xO.ZGOLDb2G9A32yIG9Z2wVp5g9OEOoUcArdMCMJW6
	I4SpSRX8Q9uuC7lu09xNdHm7opldN3qUYq5NYQasfEgNkYCIge.wPcWD9nsOIE2xSIzGwdmMTjjP
	zA3ASyoanOxRSY7h6krWXwuQVGu3ugMReQJ.bveeiHF6ioa7O5we66V94OlB8vZCLPDjPPf_IGKA
	y_nF9yfo7U62tIs4FbDngz.D7Xi7K2RrVDQl5ez0tGU5VQ5sTYk4WCK7soBzjgJSRyryFm92Z3Fc
	jKO2Lh82GZHSp_5WSYOn1GZoW.bUE2wWXuzOf_oAhgyskqmxMqempdEycgQLjvNzYqewF5EUrnX1
	YGI7f1573XT_5wQFBVOPeIU.MXeSmGiUR5WcYv4osU29edLctkaxkux0lsGdLEeJ4nuCe.iP3n9p
	CyUyY4voinja6oqyyUA7OY.0wXlY2c_r5ASuh_Ya1iCNHUnaXv0ISlR7pf2dWcTdPqccexoeTj0S
	ilv68TJdgqU0BGA.hFQDleXOsGRoBvWsk5U5gGFUzqp6PWAclM08CY.Jvmw52V3vmR7xy_cC8Q4r
	gvcaVsUbyqk0fBhdyx6naHZXnTt3bwfZm0RlZTYgMaURsuVIf8GJMjyA3ZMzwXpKO23C89HJtYvy
	lWMbM93_pljy_JRGXDZ.Oh9bQCQyC3KMXfnY5y2iNHwUGtWtpWzB5ennUJr72m.JJc61jjIOqXjS
	fT_e6fsxAUOlaxncpiclgAJ4m3ibCutZ3.vsprhirgVBU3jOZZki1UWu5ixNz7_9x05nCPNRIcbJ
	cbmIKWu0rI0.utELQjyVptUr8zGE1mBDx1XjAIlRnGA7Wh5KsFqhc3RK3FegIH03fL7CKsYDJDve
	Nuo.cIDen70dO2GxbW.gwsxDHhvWWIXuC2EcCzmdgcRLwkeFrX2.rH.Tupqd4EMtp6euvFEfQhyV
	MHETIivOUMm.g0Kqe_4BKNMwD3b3S.mMVZUDpAQFhTWCo7Cr_C4gxNs91yY4zNUYGV3HE8fN6vUJ
	USAGzi2abSc55AN0C88jVC_V6umZB9uAvX.i5L23XkjPHhQcobjkhn3TW4p.IHFuvY_T79K6aNjz
	2wDXdbeqaP.LZHpNwNoQ1.iSifShaHmrBku8sHOL9hCa7GOmUguS6JWtCd4iRwl3boclYFYPlXqW
	t906B410wyKFrYLvsAnT.pB87ee8RZEPKPhQqoAfq6RxKfutwGlrJJD.Q9NTnE9I3q.w_P50g_IV
	BB716dZRlK.ejqeT6AKppBCHciF73i1AdhvQC7shJrL0rAp0Fh0A3yjeiWesTJeYqLTOlVJMdr0G
	2vTW0NhYaCHq604XADRHCkJH5pC1rlVTIkcWSn73FVQ83Ae02qgx1SqmMKHIjisn_ZL00Z5buTcb
	_9m11v2ULy2pZ.NrfH0DS8lk8A1_G0tiGOOQZ8C0lYoSYfy6uOSMSHD3pZkJ540.BGQKqEst_ari
	OZ2RH9NIlC76AsEbJK4pg5OAbssgiVEmeqPzhx9g01EHO32xMmiRwOSCoKJiQ5xb6CPbxrzVMTVV
	hTAxmDHXPG3IgzcnV7w_fXwpiiDdpW7udTn4y5BwBmVhjnVMv124NIJ9AFmD3MgEsNa05bT.8vs4
	LTpp5v56oEyikJp1qnKq36tkL.2qbCUmr2PmkRstrCJTKuDvgoiDGOpQaKAqy3Vs5xNvRnW.vHLY
	7uM.MP2Xfi6GXe5RDU63ypQubA0ZOr3b9MR.B_.ZqmRIp8814DKv3VOC2HwlOtBblNaohMoJvHI8
	57__vhswsAhz0aubzMUqAeCA3u3PeGIpau2gz0b8VxjLKAnld.CFcbfFGHc68y7AqXoZEZdqsKES
	G1BumSopo9BGJRobDoZfcbAeVH2PpwgCtpEdtjNAuryOoXHQlYsrXEEXOzzN3p4TILjJsQFl6lHa
	8oAlwiZC4P2mBPZGDYFLUyXWV2H3YU3lvIL26PHi20NMH_q0JpBC0_64tQwqvwqsa12bVWtlaMYc
	CH.0Y76cTuqHzOwefEM8JtnHmtaFCf0WaldSvxW_cOXPQ5JzEo6SHDUnHaMj5VoDMuOa8okRpmLx
	qsHE5gLbUCqkybCo.otrFoCmKsOqnMU74pzslC9Qg1sNkOtOpaisVKrKPGJRgkdk7zqTMvD6TDtz
	UB3zvJs30rhiFraimkA62zsn0a.Bix97VMdLxK_qhJvYXWuELwri1tZoG200nvMUxcXkCDhQeYNJ
	qIUxx3tHAIFYuMfKzJEBSoe3nxn3yeRGZfD_ZIy5I4hllQYgJZ663PSf74JPpZALDfS8UdQxf6we
	tG.H8wk8kbD1XEdlOGuHWMg--
From:	Charles Russell <worsafe AT bellsouth DOT net>
Subject:	Re: Cygwin sshd broken by seemingly trivial network change
To:	cygwin cygwin <cygwin AT cygwin DOT com>
Message-ID:	<16d39bf2-36c8-2688-e892-c2e126728462@bellsouth.net>
Date:	Thu, 17 Dec 2020 23:59:43 -0600
User-Agent:	Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101
	Thunderbird/78.5.1
MIME-Version:	1.0
References:	<16d39bf2-36c8-2688-e892-c2e126728462 DOT ref AT bellsouth DOT net>
X-Mailer:	WebService/1.1.17278
	mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo
	Apache-HttpAsyncClient/4.1.4 (Java/11.0.8)
X-Spam-Status:	No, score=-2.2 required=5.0 tests=BAYES_00, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, RCVD_IN_DNSWL_NONE,
	RCVD_IN_MSPIKE_H2, SPF_HELO_NONE, SPF_NONE,
	TXREP autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version:	SpamAssassin 3.4.2 (2018-09-13) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Sender:	"Cygwin" <cygwin-bounces AT cygwin DOT com>

On 12/17/2020 3:09 PM, Brian Inglis wrote:

> Have you checked your new router to see what default rules are enabled
> there?

The router firewall is disabled. (I have a another router serving as a 
firewall between it and the modem.) Besides, all hosts are on the local 
side of the new router, and disabling the Windows firewall eliminates 
the problem.
_____________________
On 12/17/2020 3:23 PM, Bill Stewart wrote:
>
> If it works when you disable the firewall, then (to state the obvious,
> sorry) there is a rule in the firewall that is blocking the traffic.

So far so good.

> I would suggest to examine all of the rules carefully. I say this
> because it is happened to me before, and I could have sworn that I
> looked at all of the rules.

I've looked at
   Advanced Settings; Incoming Rules
and I've looked at the output of
   netsh advfirewall firewall show rule name=all

What else is there to look at in Windows 7 Home?

This is doubly frustrating because Cygwin sshd has been running properly 
for 10 years on one of these computers and 8 years on the other. Perhaps 
I should reset the firewalls to default, but that will break other things.
____________

On 12/17/2020 3:24 PM, Erik Soderquist wrote:

> I've had weird instances where the Windows Firewall tools lied; I
> confirmed this by temporarily shutting down the Windows Firewall
> entirely, then restarting the service having problems and retesting.
> On retest, it worked fine, confirming it was the firewall causing the
> problem.

I didn't have to restart sshd; I could connect as soon as I disabled 
Windows Firewall.

>
> What exactly the problem was varied (this has happened many many times
> to me)...  In some cases it was the rule definition for the scope not
> matching the actual network, in some cases I could not find any real
> issue, but deleting and recreating the rules fixed the issue, in a few
> cases, I also found a deny rule that somehow matched the service
> having problems, and deny rules take precedence over allow rules.  One
> example of the conflict could be "sshd allowed" vs "port 22 denied";
> the deny would take precedence.

I don't see any way to set port rules in Windows 7 Home, and none are 
visible in the list of incoming rules.

I could not delete sshd, only disable it, even as administrator. (The 
delete button was grayed out).  I disabled it, rebooted, then enabled 
it. That didn't help.
--
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -