DMARC-Filter: OpenDMARC Filter v1.4.2 delorie.com 50ON4Ave558914
Authentication-Results: delorie.com; dmarc=pass (p=none dis=none) header.from=cygwin.com
Authentication-Results: delorie.com; spf=pass smtp.mailfrom=cygwin.com
DKIM-Filter: OpenDKIM Filter v2.11.0 delorie.com 50ON4Ave558914
Authentication-Results: delorie.com;
	dkim=pass (1024-bit key, unprotected) header.d=cygwin.com header.i=@cygwin.com header.a=rsa-sha256 header.s=default header.b=KXaXOYdJ
X-Recipient: archive-cygwin AT delorie DOT com
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 1B1593857733
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cygwin.com;
	s=default; t=1737759849;
	bh=Jd5+C48ER/7spFhVsxKctSKcAmLtpM8g8vVGqYHfg4k=;
	h=Date:Subject:To:References:In-Reply-To:List-Id:List-Unsubscribe:
	 List-Archive:List-Post:List-Help:List-Subscribe:From:Reply-To:Cc:
	 From;
	b=KXaXOYdJ3QF58SZZ3X+idYfBgN5jVUlxX60WJzFjNaxNT0UukNgDaTo8JUd7ixGhE
	 uaMEwmuQSRJwZpcDO1dRZLqvWCPrwuE5LHXXmjPfuWe+8F8aHJbmsOcvq06V/RZGWH
	 UbZ338EQj2dGQTT4HND3vzAOrsUlFmZbX9xgX/jw=
X-Original-To: cygwin AT cygwin DOT com
Delivered-To: cygwin AT cygwin DOT com
DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 12B523857C6C
ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 12B523857C6C
ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1737759815; cv=none;
 b=omzYPN7ZIuEuHZomEOajOu/woHaKl9nfz3nCs8ve5exUB9gPtgAuyvu76HfCLO12uhJLU93qOmV5nT+4hc0+YSRiYpcUjHaAFf9xoeaFZrW7GjUaTBOFm2rkClDRUfhgTx7C34UXfnowOqTw/+VRawzlHX9UZGTG8RKUna3ExJc=
ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key;
 t=1737759815; c=relaxed/simple;
 bh=E85xudtWcRm/GQVvQ6meCzT2LQ6Bkf/upKtarNfQIVQ=;
 h=Message-ID:Date:MIME-Version:From:Subject:To:DKIM-Signature;
 b=G5qXkDuawqzNr3J4vkGV3sx8NZ59r4bKK6QUer8hEvnK1m8sjQEdN2z5eLPf8egkDaBIL1179Tb81LtySwF/SegUqQWiq0zPSMMblp+wv2/IF0nh0i6ufWWaZlA5npUUFjDtimNH/WHH1y0gkFPD+fmMKCZKSn0uDV/mkQVb42Q=
ARC-Authentication-Results: i=1; server2.sourceware.org
DKIM-Filter: OpenDKIM Filter v2.11.0 sourceware.org 12B523857C6C
Message-ID: <95498088-682c-4228-a4fb-55be58f27b07@SystematicSW.ab.ca>
Date: Fri, 24 Jan 2025 16:02:39 -0700
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: fail: sshd
Content-Language: en-CA
To: cygwin AT cygwin DOT com
References: <CAGB_HuTZo0aUHiXx4tcSQqXz+5UB62f5FJdvZt=qhySOxbmfww AT mail DOT gmail DOT com>
 <02f3a2e5-3b8a-4e94-8c5d-106d99598f20 AT gmail DOT com>
 <cbb844b0-5574-4d21-a92e-1711a7488284 AT SystematicSW DOT ab DOT ca>
 <11399562 DOT 20250104042224 AT yandex DOT ru>
 <CAGB_HuQ6tAkjn51M_bG13QPVKzGPfiL5By5ZwLuCjXrE9e7=zQ AT mail DOT gmail DOT com>
Organization: Systematic Software
In-Reply-To: <CAGB_HuQ6tAkjn51M_bG13QPVKzGPfiL5By5ZwLuCjXrE9e7=zQ@mail.gmail.com>
X-Stat-Signature: g76jxh5qohkeyskgbuqkswnhkj5xcsec
X-Rspamd-Server: rspamout01
X-Rspamd-Queue-Id: 62CE56000B
X-Session-Marker: 427269616E2E496E676C69734053797374656D6174696353572E61622E6361
X-Session-ID: U2FsdGVkX1/q1yJft4iAJixIAkg3PTyFJ1qF+DAG5bE=
X-HE-Tag: 1737759760-448374
X-HE-Meta: U2FsdGVkX1+Y31vQsd/CypNSLlFPqRK8il7m1jRJBlb6lUoWKopMZ5+LiTYS7cpvoRMEKpNrxGh3nbVaszVL6ikXF57XbSBv2WsCq9opjj4RDsddrFZ4YxCgzpJvjxmUWd3T6pvZrtY4IUe4IqYU7zfgKx133wcgDjS4v94Ifz9KsdsT9fUuJKjXcgsgzL8m14ztNlwINs9ld4TCPZyoZLb32vUNP9vjLdKwnVJ/Pld5jxMOavXZ+WG8ozltocLrbxtJUxBOOlyAPYYdTe4+bJU8E5+v0RYKkWUSfyQSNzmUlzvrwqleKZ9M0wZtgTAKsws7T3/sgOX2n0V99Noep1k1PgcpybNV
X-BeenThere: cygwin AT cygwin DOT com
X-Mailman-Version: 2.1.30
Precedence: list
List-Id: General Cygwin discussions and problem reports <cygwin.cygwin.com>
List-Unsubscribe: <https://cygwin.com/mailman/options/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=unsubscribe>
List-Archive: <https://cygwin.com/pipermail/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-request AT cygwin DOT com?subject=help>
List-Subscribe: <https://cygwin.com/mailman/listinfo/cygwin>,
 <mailto:cygwin-request AT cygwin DOT com?subject=subscribe>
From: Brian Inglis via Cygwin <cygwin AT cygwin DOT com>
Reply-To: cygwin AT cygwin DOT com
Cc: Brian Inglis <Brian DOT Inglis AT SystematicSW DOT ab DOT ca>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com
Sender: "Cygwin" <cygwin-bounces~archive-cygwin=delorie DOT com AT cygwin DOT com>
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from base64 to 8bit by delorie.com id 50ON4Ave558914

On 2025-01-24 12:30, Soren via Cygwin wrote:
> Hello folks. A few weeks ago, on Dec 19, I wrote to you all on the cygwin
> list "[...] I am able to ssh into those [Debian] boxes from my Cygwin box
> without any trouble. But when I try to ssh *into* my Cygwin box, the
> connection attempt times out." Etc. So now, I wanted to inform the
> community that I am successfully logging-in via ssh to my Cygwin laptop.
> The point of failure, as suggested to me in replies, was Windows Firewall.
> 
> When the laptop arrived and Windows 10 set itself up, it gave no
> information about turning on the firewall (typical Microsoft) and so I had
> never given it any thought. When I went to try seeing the settings based on
> the advice received, I reluctantly stumbled at first because Windows 10
> doesn't have the familiar "Start" button anymore. Instead, it has a
> "Search" field which may or may not find internal settings on first
> attempts -- instead it may search the Web. Also typical Microsoft. Now that
> I know, the steps are:
> 
> Settings -> Privacy & security -> Windows Security
> 
> I turned the firewall off completely; my only connectivity is at home over
> a secure WiFi net. I don't haul this laptop around connecting to strange
> WiFi networks.

I believe in belts and braces/suspenders wherever possible to reduce SPoF!

You could adapt the following to allow ssh on port 22 or whatever you need.

Extract from elevated admin script to allow curl build tests with perl:

set add=netsh advfirewall firewall add rule
set prof=Private
set dir=In
set proto=Any
set act=Allow
:: ...		Profile		Action		Direction	Protocol
set params=Profile=%prof%	Action=%act%	Dir=%dir%	Protocol=%proto%

FOR /f "usebackq" %%c IN (`cygpath -aw /bin/`) DO IF EXIST %%c set bindir=%%c

:: ...	Name	Profile	Action Direction Protocol	Program
%add% Name=perl         %params%        	Program=%bindir%\perl.exe

which also looks up a bunch of test programs in build directories and sets them 
all up for running against the current test release.

> I hope this helps someone else.
> 
>      Soren Andersen
> 
> Thanks to
> Kevin Schnitzius
> Brian Inglis
> Andrey Repin (your English seems just fine)
> 
> On Fri, Jan 3, 2025 at 8:38 PM Andrey Repin via Cygwin wrote:
>>> Check Windows SSHD is not running and disabled!
>> Or moved to a different port. ( C:\ProgramData\ssh\sshd_config )
>> In some specific situations, you WILL need native SSH available, Cygwin one
>> will not work for VS Code remote server f.e.

-- 
Take care. Thanks, Brian Inglis              Calgary, Alberta, Canada

La perfection est atteinte                   Perfection is achieved
non pas lorsqu'il n'y a plus rien à ajouter  not when there is no more to add
mais lorsqu'il n'y a plus rien à retrancher  but when there is no more to cut
                                 -- Antoine de Saint-Exupéry

-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple