SSH connection refused

bmccorm2 · 05-14-2007, 04:04 PM

I am trying to remotely logon to my home machine. I have read some posts and have done the following:
1. Obtained a DNS from dyndns.com
2. configured a static IP for my wireless laptop
3. forwarded port 22 to my static IP on my router
4. turned off the local software firewall

I can also SSH into my school's CS computers, so I'm pretty sure the SSHD daemon is running. However, this is the output I get:

Code:

[bryan@paradise ~]$ ssh -v bryan@bmccorm2.homeip.net
OpenSSH_4.5p1, OpenSSL 0.9.8b 04 May 2006
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to bmccorm2.homeip.net [67.190.40.221] port 22.
debug1: connect to address 67.190.40.221 port 22: Connection refused
ssh: connect to host bmccorm2.homeip.net port 22: Connection refused

Any ideas?

Matir · 05-14-2007, 04:22 PM

Just because you can ssh out doesn't mean you can ssh in. Make sure ssh is running. Also, you cannot ssh from a computer behind the router to another behind the router THROUGH a port forwarding.

i_grok · 05-14-2007, 04:25 PM

To double check that the sshd daemon is listening on the system that you want to log into, run (as root):

Code:

netstat -pan | grep 22

This will show a list of processes that are listening on different ports. Obviously, you're only interested in port 22 right now. If it isn't running, you can start it with:

Code:

chkconfig --add sshd
/etc/init.d/sshd start

Please note that if you are a beginner with these sorts of things, you need to be careful. You are making your system available to anyone who'd like to take a crack at it.

I would strongly recommend that you disable root login via SSH, which can be configured in /etc/ssh/sshd_config. You might also want to configure additional authentication measures to ensure that you're the only person logging in.

bmccorm2 · 05-14-2007, 04:34 PM

Thank you guys that really helped. I did not have the sshd daemon running

It is running fine now. i_grok, do you have a good website that explains how to take all those security precautions you mentioned? Thanks again guys!!

i_grok · 05-15-2007, 02:59 PM

Well, Google was not as helpful as I had hoped, but this seems pretty decent:

http://thinkhole.org/wp/2006/10/30/f...re-secure-ssh/