Path: eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail From: Stephen Hoffman Newsgroups: comp.os.vms Subject: Re: Eisner/Encompasserve down Date: Thu, 5 Sep 2024 14:44:36 -0400 Organization: HoffmanLabs LLC Lines: 125 Message-ID: References: <66d1fbc7$0$716$14726298@news.sunsite.dk> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1; format=flowed Content-Transfer-Encoding: 8bit Injection-Date: Thu, 05 Sep 2024 20:44:37 +0200 (CEST) Injection-Info: dont-email.me; posting-host="0c5f494007749fd1c4f65668a43b8b16"; logging-data="486265"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX18WdodlUe1avBSKGteMYC2vzFtRz6v/rj4=" User-Agent: Unison/2.2 Cancel-Lock: sha1:fnpX/J8cfeKc3mPDPyaDOyl7egE= On 2024-09-05 16:49:00 +0000, John H. Reinhardt said: > I don't know if this helps any. I make a successful connection. I > have an older version of Open SSH 8.6p1 vs 9.0p1 > > For some of my older OpenVMS systems I do have to specify specific algorithms. > > Host asimov > HostName asimov.xxxxxxxx.xxx > KexAlgorithms +diffie-hellman-group1-sha1 > HostKeyAlgorithms +ssh-dss > Ciphers aes128-cbc > > But nothing special for eisner > > Host eisner > HostName eisner.decus.org > Port 22867 > User reinhardt Yeah; my ~/.ssh/config was a little more complex than yours. The ssh connection was still refused after temporarily nerfing all that. Tried the usual fallback and some extensions to contend with ssh-dss deprecation in recent versions (with the ssh commands listed in my earlier reply), as well. Tried forcing password only access, and that via the registration user: % ssh -o PubkeyAuthentication=no -o PreferredAuthentications=password -p 22867 registration@eisner.decus.org ssh: connect to host eisner.decus.org port 22867: Connection refused % Comcast routing looks funky, but then Comcast routing often looks funky: % traceroute eisner.decus.org traceroute to eisner.decus.org (192.42.95.250), 64 hops max, 52 byte packets [expurgated] 4 burl-lnk-70-109-168-28.ngn.east.myfairpoint.net (70.109.168.28) 10.272 ms 10.027 ms 10.388 ms 5 et-0-3-0.mpr1.yul1.ca.zip.zayo.com (64.124.142.45) 12.110 ms 12.093 ms 12.184 ms 6 * * * 7 * * * 8 be-202-pe11.111eighthave.ny.ibone.comcast.net (50.242.151.213) 24.940 ms 24.781 ms 30.398 ms 9 be-3311-cs03.newyork.ny.ibone.comcast.net (96.110.34.25) 29.100 ms be-3111-cs01.newyork.ny.ibone.comcast.net (96.110.34.17) 25.225 ms 24.952 ms 10 be-32011-ar01.needham.ma.boston.comcast.net (96.110.42.2) 31.394 ms 26.703 ms be-32041-ar01.needham.ma.boston.comcast.net (96.110.42.14) 158.537 ms 11 be-1-sur02.framingham.ma.boston.comcast.net (96.108.69.50) 26.929 ms 26.606 ms 31.571 ms 12 eisner.decus.org (192.42.95.250) 31.720 ms 31.621 ms 26.567 ms 13 * * * 14 * * * 15 * * * 16 * * * 17 * * * 18 * * * 19 * * * 20 * * * ^C % Nmap is happy: % nmap -F eisner.decus.org Starting Nmap 7.92 ( https://nmap.org ) at 2024-09-05 14:20 EDT Nmap scan report for eisner.decus.org (192.42.95.250) Host is up (0.030s latency). Not shown: 93 filtered tcp ports (no-response) PORT STATE SERVICE 21/tcp closed ftp 25/tcp closed smtp 53/tcp closed domain 80/tcp closed http 443/tcp closed https 587/tcp closed submission 993/tcp closed imaps Nmap done: 1 IP address (1 host up) scanned in 5.08 seconds % On the off chance it's something within the macOS DNS or mDNS local universe, the following was checked and was found working: % dscacheutil -q host -a name eisner.decus.org name: eisner.decus.org ip_address: 192.42.95.250 % % dns-sd -G v4v6 eisner.decus.org DATE: ---Thu 05 Sep 2024--- 14:36:43.045 ...STARTING... Timestamp A/R Flags IF Hostname Address TTL 14:36:43.046 Add 40000003 0 eisner.decus.org. 0000:0000:0000:0000:0000:0000:0000:0000%<0> 752 No Such Record 14:36:43.046 Add 40000002 0 eisner.decus.org. 192.42.95.250 2252 % As for another symptom: Safari can't connect to the server https://eisner.decus.org. That's Safari on macOS 13.6.9, with Safari Version 17.6 (18618.3.11.11.7, 18618). Firewall? Something doing DPI? Virtual network in the hypervisor? -- Pure Personal Opinion | HoffmanLabs LLC