RE: [cobalt-users] Portsentry blocking port 22

["Andy Brown" <andy.brown@xxxxxxxxxxxxx>]

<snip>
> Portsentry has suddenly decided to block port 22 on one of 
> our RaQ3s - ever
> since installing the RaQ3-All-Security-4.0.1-13453.pkg Cobalt 
> patch last
> week.
</snip>

Hi,
Is it portsentry that is alerting you of this block, or is it the server itself?
If portsentry has just started alerting you of this then it may be that the security update has changed something that portsentry uses.

I'm a little confused that you say portsentry has blocked a lot of people on this port, as portsentry ONLY binds to ports that ARENT in use, so perhaps your SSH daemon isn't running, and after a reboot portsentry now thinks its a spare port.

telnet in and check that the sshd process is running:
ps ax |grep sshd

I suspect this is where the problem will be.

Regards,

Andy
andy@xxxxxxxxxxxxxxx
http://www.raqpak.com/ <-- Raq/Qube unofficial PKGs and support advice
http://www.linuxnetworking.co.uk