X-Recipient:	archive-cygwin AT delorie DOT com
X-Original-To:	cygwin AT cygwin DOT com
Delivered-To:	cygwin AT cygwin DOT com
DMARC-Filter:	OpenDMARC Filter v1.4.1 sourceware.org C35193858435
Authentication-Results:	sourceware.org;
	dmarc=pass (p=none dis=none) header.from=gmail.com
Authentication-Results:	sourceware.org; spf=pass smtp.mailfrom=gmail.com
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112;
	h=mime-version:references:in-reply-to:from:date:message-id:subject:to;
	bh=rlOFZHJ1EW8/pqBZ6oLz1yqITUbK6VboX6GtFBLWDTk=;
	b=FbTDowTla22iRNvC29UBufUBz2mBmcAFSiP/JP1sn2zjzLQ1Tq+pbkxYMSs3wNqNuY
	C0HuC8IIh6uUtuf8QzZgIjijnvBjUyzb6tKbcsvCd05aCT25bWL4UP/QJiYKGqXO7sTX
	qnWU58H0lUCgZ/1LKyKd1+Y1PCiWcxU/8+meWj4IAx4+PYi0WlnTpe7205DJw65YIsZc
	drdf65kZS3nlRrw5doZql21hx/5TchgJL+8GHCj3i/Pvw8ifLVU2ah/cC9BpgBoH2w5n
	NOPLwXOnoh4BiM1b5Kvqg0u3PgiKfh4SRT5Rgm69s8q2KuJSUvrhyOkU5XQFnZzmMucM
	tlIA==
X-Google-DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=1e100.net; s=20210112;
	h=x-gm-message-state:mime-version:references:in-reply-to:from:date
	:message-id:subject:to;
	bh=rlOFZHJ1EW8/pqBZ6oLz1yqITUbK6VboX6GtFBLWDTk=;
	b=U1Mzj+9Sx4c4RlYR5l37MsQ/wyVu+6NhhqMHjN5dAaiLTvDK4YosvvFS1sJCFcAPyW
	hWY4Y8zkZAiVJy/tFY9TTwsiwfvreV/lX6O2nQBV31zGDarppx+CY3YSHAk5kuSEgO8v
	KVTV0C64yVRhhL5a/p0wGKfFuoEZbEOPiecOpw6SgE8ZXvgSlUMwOPkVsCoMiEjYNYeu
	lz1trd7eMLM/ou//w2e7aVQj9uQLoGI9luRyZyfDjVOq5JvzHcI09ce79pd3TEVdcDHA
	bajiSyKdncbh/KqF2VlI9p2YgoZhfXX32uwGxAb17ARoeybb+BG2DvRWmUwoKtTZuGkX
	OuQw==
X-Gm-Message-State:	AOAM531ORuaslhmOE1e5nysiUd9y3BPNKdi3FjorJVOW94l9VT4DTFLG
	M3SOTFqbNkKZEqtBC79NV5b3rzIIJ/yL3RLouOek+s11kwU=
X-Google-Smtp-Source:	ABdhPJxsR2i/hdEI6y4sqb0RRjk73IO3NFz1LB7WRCLW9tmAoJrDeORrZ6aSxxpaUAIej4vwXxrLwEYdNICeBt9C7Ek=
X-Received:	by 2002:a2e:9496:: with SMTP id c22mr3600329ljh.19.1644782368101;
	Sun, 13 Feb 2022 11:59:28 -0800 (PST)
MIME-Version:	1.0
References:	<8207721e-0b0d-2314-6038-c430e1758e53 AT raelity DOT com>
	<a267fb96-4f61-65d0-846a-9f55acd59ecb AT maxrnd DOT com>
	<a6282714-ab39-9f64-a099-e2d7d3d1bb28 AT raelity DOT com>
In-Reply-To:	<a6282714-ab39-9f64-a099-e2d7d3d1bb28@raelity.com>
From:	Erik Soderquist <ErikSoderquist AT gmail DOT com>
Date:	Sun, 13 Feb 2022 14:59:16 -0500
Message-ID:	<CACoZoo1=1pT5YMR8Ff7Vb3xJugutZydYNLXq6d1pYtBkmd5yrQ@mail.gmail.com>
Subject:	Re: sshd
To:	cygwin <cygwin AT cygwin DOT com>
X-Spam-Status:	No, score=1.1 required=5.0 tests=BAYES_05, DKIM_SIGNED,
	DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, RCVD_IN_DNSWL_NONE,
	SPF_HELO_NONE, SPF_PASS, TXREP,
	T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4
X-Spam-Level:	*
X-Spam-Checker-Version:	SpamAssassin 3.4.4 (2020-01-24) on
	server2.sourceware.org
X-BeenThere:	cygwin AT cygwin DOT com
X-Mailman-Version:	2.1.29
List-Id:	General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Archive:	<https://cygwin.com/pipermail/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe:	<https://cygwin.com/mailman/listinfo/cygwin>,
	<mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
Sender:	"Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

On Sun, Feb 13, 2022 at 7:38 AM Ernie Rael wrote:
> Doesn't seem to be a firewall issue. NetStat took about 90 seconds.
>
> $ ps -lp 255
>        PID    PPID    PGID     WINPID   TTY         UID    STIME COMMAND
>        255     254     255       4176  ?           1006   Feb  1
> /usr/sbin/sshd
>
> $ netstat -ao | grep 4176
>    TCP    0.0.0.0:22             spirit:0 LISTENING       4176
>    TCP    [::]:22                spirit:0 LISTENING       4176

It might still be a Windows Firewall issue; I've seen it listening
fine before and Windows Firewall silently discarding the packets.  I
suggest
- carefully searching all process deny rules in case  Windows silently
added a deny rule for the sshd process (yes, I've seen this happen)
- adding a blanket allow rule in your Windows Firewall for tcp/22 from
anywhere applied to all domains as a test.

If either/both of these resolve the issue, make a better firewall rule
for your use case.  Also be aware that Windows Firewall rules for
processes/binaries also do some kind of validation of the file itself,
so upgrades often break it because the file that was allowed has been
replaced and the replaced version needs to be manually allowed again.

-- Erik

 --
 --
 "I do not think any of us are truly sane, Caleb. Not even you.
Courage is not sanity. Being willing to die for someone else is not
sanity." ... "Love is not sane, nor is faith." ... "If sanity lacks
those things, Caleb, I want no part of it."

 -- Alexandria Terri in "Weaving the Wyvern" by Alexis Desiree Thorne

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple

- Raw text -