forum.excito.org

Hello,

I have had this as well!
No acces to B3.
IP number indeed 169.254.x.x self assigned Windows IP
I was able to look in my wireless gatway and is said 0.0.0.0 so DHCP from B3 was broke.

Problem for my was I could not reboot B3 without pulling the plug which i do not like..
After a hard (plug) boot it worked again.

This was the second time it happend.

B2 has no problem (old firmware)

Excito please investigate

Puma

I have asked this customer to return his unit for replacement. Difficult to know what it is right now but we'll investigate.

Got this suddenly: ssh_exchange_identification: Connection closed by remote host

What can I do?

Please post some more information:

You can no longer log in using SSH?
Were you able to log in before?
Is your B3 functioning apart form this?
Any hints in the logs?
etc...

I was able to log in with SSH without problems. Out of nowhere it just stopped. Everything else works as usual. What should I look for in the logs? I installed some things on b3 like denyhosts and snort. Could it be a problem with denyhosts?

Maybe it would be better to know which precautions to take so that this could never happen. Reinstalling every time something happens is too much of fuss.

It shouldn't be possible for admin to get shut out from b3 on your own LAN but that is what SSH did to me.

Indeed probably the denyhosts.
So, get out the rescue USB and do check that the file /etc/hosts.deny is empty and reboot.

Hi,

If denyhost added a IP address to the /etc/deny.hosts file, denyhost will put it back automatically (if entry is removed). There is a description on http://denyhosts.sourceforge.net/faq.html#3_19 how to remove it completely. It is a bit messy but it works, I have done it

Best Regards,
Morgan

Well, I have to nuke the whole sh*t. There should be a way to pre-empt the situation where you get locked out from SSH-connection to B3.

You can add the IP address(es) of you LAN to a "ignore" list in denyhosts. This will prevent any blocking of IP addresses that you use on your LAN.

The drawback is that if someone is faking these IP addresses in an attack denyhost will not block them.

I have looked into allowing all traffic on the LAN interface but not found one yet.

If you are blocked out due to the IP address of you "PC" you could set a fixed IP address on the computer (in the correct range) and then connect to the B3. This would allow you the possibility to remove the denyhost blockage if this is the problem.

Best Regards,
Morgan

I took the easy way out. What I know now is that one has to be very careful with "denyhosts".
THX for the advice anyway!

I've started this thread so I have to write what happens until now:
The B3 was send to Excito and they see that there was a formatting and installation problem in the manufacturing process. They fixed everything, send it back and it was no problem for me to run the B3. Just plug in and work with it.

Happy end

Well now; all's well that ends well.