Isso foi causado pelo Firestarter, que eu tinha esquecido que estava instalado nesta máquina. A remoção e a reinicialização resolveram o problema.
Eu tenho uma máquina Ubuntu 12.10 na minha LAN para a qual todas as conexões ssh terminam. Vamos chamá-lo de 'F' (para falhar!)
Duas outras máquinas 'A' e 'B' na mesma LAN podem se conectar umas às outras. Eu também posso ssh de F para A. Então eu não acredito que haja um problema de configuração de rede. O problema parece estar confinado à máquina F.
Após várias outras respostas de fóruns, verifiquei e tentei o seguinte.
Verifique se o sshd está em execução e atendendo na porta 22:
F$ ps -A | grep sshd
853 ? 00:00:00 sshd
F$ sudo ss -lnp | grep sshd
LISTEN 0 128 :::22 :::* users:(("sshd",4244,4))
LISTEN 0 128 *:22 *:* users:(("sshd",4244,3))
F$ sudo lsof -i | grep ssh
sshd 4244 root 3u IPv4 53321 0t0 TCP *:ssh (LISTEN)
sshd 4244 root 4u IPv6 53323 0t0 TCP *:ssh (LISTEN)
ssh 5244 michael 3u IPv4 82208 0t0 TCP localhost:40209->cubebot:ssh (ESTABLISHED)
sshd 5245 root 3u IPv4 83301 0t0 TCP cubebot:ssh->localhost:40209 (ESTABLISHED)
sshd 5362 michael 3u IPv4 83301 0t0 TCP cubebot:ssh->localhost:40209 (ESTABLISHED)
F$ netstat -nat | grep 22
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 192.168.1.28:41782 74.125.225.209:443 ESTABLISHED
tcp 0 0 192.168.1.28:47576 74.125.142.125:5222 ESTABLISHED
tcp 0 0 192.168.1.28:54925 91.189.89.122:443 ESTABLISHED
tcp 0 0 192.168.1.28:54762 74.125.225.167:443 ESTABLISHED
tcp 0 0 192.168.1.28:48473 74.125.225.181:443 ESTABLISHED
tcp 0 0 192.168.1.28:36177 74.125.225.198:443 ESTABLISHED
tcp6 0 0 :::22 :::* LISTEN
Experimente o telnet:
A$ telnet F 22
Trying 192.168.1.28...
telnet: Unable to connect to remote host: Connection timed out
A mesma coisa acontece com o ssh. O endereço IP para F está correto:
F$ ifconfig
wlan1 Link encap:Ethernet HWaddr 00:1a:70:3b:58:2e
inet addr:192.168.1.28 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::21a:70ff:fe3b:582e/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:22070 errors:0 dropped:0 overruns:0 frame:0
TX packets:15344 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:12137460 (12.1 MB) TX bytes:2564022 (2.5 MB)
Os anfitriões parecem corretos:
F$ cat /etc/hosts
127.0.0.1 localhost
127.0.1.1 cubebot
# The following lines are desirable for IPv6 capable hosts
::1 ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
Onde cubebot é a máquina 'F' e o nome do host está correto:
$ cat /etc/hostname
cubebot
Usando localhost e hostname na máquina F ambos funcionam:
F$ ssh localhost
Welcome to Ubuntu 12.10 (GNU/Linux 3.5.0-31-generic x86_64)
F$ ssh cubebot
Welcome to Ubuntu 12.10 (GNU/Linux 3.5.0-31-generic x86_64)
Saída de sudo iptables -L -nv :
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
65 8910 ACCEPT tcp -- * * 127.0.1.1 0.0.0.0/0 tcpflags:! 0x17/0x02
4468 479K ACCEPT udp -- * * 127.0.1.1 0.0.0.0/0
4850 337K ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
4 336 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/sec burst 5
2139 384K DROP all -- wlan1 * 0.0.0.0/0 255.255.255.255
1898 327K DROP all -- * * 0.0.0.0/0 192.168.1.255
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0
1 40 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
0 0 LSI all -f * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/min burst 5
674K 975M INBOUND all -- wlan1 * 0.0.0.0/0 0.0.0.0/0
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix "Unknown Input"
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/sec burst 5
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix "Unknown Forward"
Chain OUTPUT (policy DROP 524 packets, 88964 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- * * 192.168.1.28 127.0.1.1 tcp dpt:53
0 0 ACCEPT udp -- * * 192.168.1.28 127.0.1.1 udp dpt:53
9383 825K ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 DROP all -- * * 224.0.0.0/8 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 224.0.0.0/8
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0
49 3372 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
383K 20M OUTBOUND all -- * wlan1 0.0.0.0/0 0.0.0.0/0
524 88964 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
524 88964 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 6 prefix "Unknown Output"
Chain INBOUND (1 references)
pkts bytes target prot opt in out source destination
669K 974M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
4883 511K ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT all -- * * 192.168.1.14 0.0.0.0/0
76 5013 LSI all -- * * 0.0.0.0/0 0.0.0.0/0
Chain LOG_FILTER (5 references)
pkts bytes target prot opt in out source destination
Chain LSI (2 references)
pkts bytes target prot opt in out source destination
76 5013 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
44 2640 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcpflags: 0x17/0x02 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix "Inbound "
44 2640 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcpflags: 0x17/0x02
0 0 LOG tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcpflags: 0x17/0x04 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix "Inbound "
0 0 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcpflags: 0x17/0x04
0 0 LOG icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8 limit: avg 1/sec burst 5 LOG flags 0 level 6 prefix "Inbound "
0 0 DROP icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8
32 2373 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 5/sec burst 5 LOG flags 0 level 6 prefix "Inbound "
32 2373 DROP all -- * * 0.0.0.0/0 0.0.0.0/0
Chain LSO (0 references)
pkts bytes target prot opt in out source destination
0 0 LOG_FILTER all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 LOG all -- * * 0.0.0.0/0 0.0.0.0/0 limit: avg 5/sec burst 5 LOG flags 0 level 6 prefix "Outbound "
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
Chain OUTBOUND (1 references)
pkts bytes target prot opt in out source destination
4 336 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0
375K 20M ACCEPT tcp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
331 25140 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
7583 563K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0
Estou completamente sem ideias (e links úteis) neste momento. Qualquer / Todas as sugestões, sugestões ou palavras encorajadoras de simpatia serão apreciadas neste momento!
Felicidades, Mike
Isso foi causado pelo Firestarter, que eu tinha esquecido que estava instalado nesta máquina. A remoção e a reinicialização resolveram o problema.