Comments on: ssh_exchange_identification: Connection closed by remote host

By: MJR/slef

MJR/slef — Wed, 16 Aug 2006 07:59:36 +0000

A NAT device can limit your checks: you can either allow or disallow connections which appear to be from the NAT device. Then again, most NAT devices I have seen can do firewalling too, so that’s not a major problem. Just another place to set access control…

By: cakebaker

cakebaker — Wed, 16 Aug 2006 06:57:14 +0000

@MJR/slef: Thanks for the warning, I changed it. Is it also an issue if a NAT device is used?

By: MJR/slef

MJR/slef — Tue, 15 Aug 2006 16:11:26 +0000

Warning: that line will allow SSH access from any IPv4 address and there are a lot of scanners out there (machines which just try to guess logins with brute force). If you can, only put hosts, domains or networks which you want to have SSH access in there.