ssh_exchange_identification: Connection closed by remote host... portsentry

mythicsentinel · 11-11-2009, 08:06 AM

I recently installed portsentry and i ran an nmap scan against the server. I logged out, but i can't seem to log back in from the machine i ran the scan from.
I get the following when i try:
ssh_exchange_identification: Connection closed by remote host.
Pls help

centosboy · 11-11-2009, 08:17 AM

Quote:

Originally Posted by mythicsentinel

I recently installed portsentry and i ran an nmap scan against the server. I logged out, but i can't seem to log back in from the machine i ran the scan from.
I get the following when i try:
ssh_exchange_identification: Connection closed by remote host.
Pls help

portsentry is possibly blocking you out. you may have to try from a remote server and remove the blocked ip from /etc/hosts.deny or iptables or wait for the block to timeout if this is how you have configured it

mythicsentinel · 11-11-2009, 09:38 AM

Quote:

Originally Posted by centosboy

portsentry is possibly blocking you out. you may have to try from a remote server and remove the blocked ip from /etc/hosts.deny or iptables or wait for the block to timeout if this is how you have configured it

The IP entry in /etc/hosts/deny has been removed but i still can't log in, any pointers as to how i remove the entry from iptables?

centosboy · 11-11-2009, 09:41 AM

Quote:

Originally Posted by mythicsentinel

The IP entry in /etc/hosts/deny has been removed but i still can't log in, any pointers as to how i remove the entry from iptables?

well, first check it is there...!
it only adds to the running config anyway, so if it is there, restarting iptables should do it.

check first

Code:

iptables -L -n -v | grep <ipaddress>