From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from sonic303-23.consmr.mail.ne1.yahoo.com (sonic303-23.consmr.mail.ne1.yahoo.com [66.163.188.149]) by sourceware.org (Postfix) with ESMTPS id 78124383301D for ; Fri, 18 Dec 2020 05:59:49 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 78124383301D Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=bellsouth.net Authentication-Results: sourceware.org; spf=none smtp.mailfrom=worsafe@bellsouth.net DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=bellsouth.net; s=s2048; t=1608271188; bh=gXRXJUQvweBcSg8EaQHro32axxVYItmW3v0hJ//GUGI=; h=From:Subject:To:Date:References:From:Subject; b=JxRTL5tGRFTilvbuduoiz24uA4aDxP+otnEdUbXev7iMJ2jy7Kok291lzck3QlAgqP+m+cl4YST2Zwhz/kK+1i3A2AQOdOl7kP8K8jj/EQwP8jiNPLibhJIQbOWqAD7j/2HsH7psJXf6+erzkVnJBE0Z6gJbgFWKXpDWklYVVM5d1lPDtBbOGR1BN+UEz6teSPDTk/O1tOEY7ufRiQZTt2veJ66xF8NmxCOuVNi61K+FD0mfvA13qppxAZ0fv0UNpV9AIs+J1do+NFWZ/cFDH4shsQh7QygjTqCTF1Pz/yQxopC4C7bF3WQ1h5fYSJmkMwTw9308gOpsEqCWlKXLIA== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1608271188; bh=1hNqiWGXpO6CAkQNTDdCQe17gozmrksmJb29RdgG35+=; h=From:Subject:To:Date:From:Subject; b=ph2xr928Ruh1kSsXwUAmjyO9fVl9Zc8HaRYRGMX2O7XbZFdUTuaneH8tuptziiQIIMHr5Pnq4uLXnQX1dyJ0iBsDOW8dyWOxNizG2eK4C3SR5G+bTe/Z5PBFmgbErkR0Ql7IMwC7+D7xSoJP7bkX7Flp+tJsGO5OBpHv/OqPLdl4Bs9vgDrEJ7h/ZaX27z0h+f2yTo+UQ2IGb56vFih/Ik+ZkB6EQftjdH2AHqB6JWtFe4ejZ9yyByTIaFQZEGrvGCp3kJR4rO7zQLbhFCYPVFqFCBSaLgGyNVx+AnJ9E/M6oug3Xuk5Rwt21Jk+cnQcfomsHLPGZy1a1HuRosKEvA== X-YMail-OSG: Ij_v3O8VM1nJ_ADHEkiYT5JE0dNLjcHFDu02jGupX._WA1s8NWjIst7l2Aj7u7I 6LPGHti8nMb3d3INWoQe9kqV9sk9qjynn0xO.ZGOLDb2G9A32yIG9Z2wVp5g9OEOoUcArdMCMJW6 I4SpSRX8Q9uuC7lu09xNdHm7opldN3qUYq5NYQasfEgNkYCIge.wPcWD9nsOIE2xSIzGwdmMTjjP zA3ASyoanOxRSY7h6krWXwuQVGu3ugMReQJ.bveeiHF6ioa7O5we66V94OlB8vZCLPDjPPf_IGKA y_nF9yfo7U62tIs4FbDngz.D7Xi7K2RrVDQl5ez0tGU5VQ5sTYk4WCK7soBzjgJSRyryFm92Z3Fc jKO2Lh82GZHSp_5WSYOn1GZoW.bUE2wWXuzOf_oAhgyskqmxMqempdEycgQLjvNzYqewF5EUrnX1 YGI7f1573XT_5wQFBVOPeIU.MXeSmGiUR5WcYv4osU29edLctkaxkux0lsGdLEeJ4nuCe.iP3n9p CyUyY4voinja6oqyyUA7OY.0wXlY2c_r5ASuh_Ya1iCNHUnaXv0ISlR7pf2dWcTdPqccexoeTj0S ilv68TJdgqU0BGA.hFQDleXOsGRoBvWsk5U5gGFUzqp6PWAclM08CY.Jvmw52V3vmR7xy_cC8Q4r gvcaVsUbyqk0fBhdyx6naHZXnTt3bwfZm0RlZTYgMaURsuVIf8GJMjyA3ZMzwXpKO23C89HJtYvy lWMbM93_pljy_JRGXDZ.Oh9bQCQyC3KMXfnY5y2iNHwUGtWtpWzB5ennUJr72m.JJc61jjIOqXjS fT_e6fsxAUOlaxncpiclgAJ4m3ibCutZ3.vsprhirgVBU3jOZZki1UWu5ixNz7_9x05nCPNRIcbJ cbmIKWu0rI0.utELQjyVptUr8zGE1mBDx1XjAIlRnGA7Wh5KsFqhc3RK3FegIH03fL7CKsYDJDve Nuo.cIDen70dO2GxbW.gwsxDHhvWWIXuC2EcCzmdgcRLwkeFrX2.rH.Tupqd4EMtp6euvFEfQhyV MHETIivOUMm.g0Kqe_4BKNMwD3b3S.mMVZUDpAQFhTWCo7Cr_C4gxNs91yY4zNUYGV3HE8fN6vUJ USAGzi2abSc55AN0C88jVC_V6umZB9uAvX.i5L23XkjPHhQcobjkhn3TW4p.IHFuvY_T79K6aNjz 2wDXdbeqaP.LZHpNwNoQ1.iSifShaHmrBku8sHOL9hCa7GOmUguS6JWtCd4iRwl3boclYFYPlXqW t906B410wyKFrYLvsAnT.pB87ee8RZEPKPhQqoAfq6RxKfutwGlrJJD.Q9NTnE9I3q.w_P50g_IV BB716dZRlK.ejqeT6AKppBCHciF73i1AdhvQC7shJrL0rAp0Fh0A3yjeiWesTJeYqLTOlVJMdr0G 2vTW0NhYaCHq604XADRHCkJH5pC1rlVTIkcWSn73FVQ83Ae02qgx1SqmMKHIjisn_ZL00Z5buTcb _9m11v2ULy2pZ.NrfH0DS8lk8A1_G0tiGOOQZ8C0lYoSYfy6uOSMSHD3pZkJ540.BGQKqEst_ari OZ2RH9NIlC76AsEbJK4pg5OAbssgiVEmeqPzhx9g01EHO32xMmiRwOSCoKJiQ5xb6CPbxrzVMTVV hTAxmDHXPG3IgzcnV7w_fXwpiiDdpW7udTn4y5BwBmVhjnVMv124NIJ9AFmD3MgEsNa05bT.8vs4 LTpp5v56oEyikJp1qnKq36tkL.2qbCUmr2PmkRstrCJTKuDvgoiDGOpQaKAqy3Vs5xNvRnW.vHLY 7uM.MP2Xfi6GXe5RDU63ypQubA0ZOr3b9MR.B_.ZqmRIp8814DKv3VOC2HwlOtBblNaohMoJvHI8 57__vhswsAhz0aubzMUqAeCA3u3PeGIpau2gz0b8VxjLKAnld.CFcbfFGHc68y7AqXoZEZdqsKES G1BumSopo9BGJRobDoZfcbAeVH2PpwgCtpEdtjNAuryOoXHQlYsrXEEXOzzN3p4TILjJsQFl6lHa 8oAlwiZC4P2mBPZGDYFLUyXWV2H3YU3lvIL26PHi20NMH_q0JpBC0_64tQwqvwqsa12bVWtlaMYc CH.0Y76cTuqHzOwefEM8JtnHmtaFCf0WaldSvxW_cOXPQ5JzEo6SHDUnHaMj5VoDMuOa8okRpmLx qsHE5gLbUCqkybCo.otrFoCmKsOqnMU74pzslC9Qg1sNkOtOpaisVKrKPGJRgkdk7zqTMvD6TDtz UB3zvJs30rhiFraimkA62zsn0a.Bix97VMdLxK_qhJvYXWuELwri1tZoG200nvMUxcXkCDhQeYNJ qIUxx3tHAIFYuMfKzJEBSoe3nxn3yeRGZfD_ZIy5I4hllQYgJZ663PSf74JPpZALDfS8UdQxf6we tG.H8wk8kbD1XEdlOGuHWMg-- Received: from sonic.gate.mail.ne1.yahoo.com by sonic303.consmr.mail.ne1.yahoo.com with HTTP; Fri, 18 Dec 2020 05:59:48 +0000 Received: by smtp411.mail.gq1.yahoo.com (VZM Hermes SMTP Server) with ESMTPA ID e491f91319d94f72efcbce2960794c90; Fri, 18 Dec 2020 05:59:45 +0000 (UTC) From: Charles Russell Subject: Re: Cygwin sshd broken by seemingly trivial network change To: cygwin cygwin Message-ID: <16d39bf2-36c8-2688-e892-c2e126728462@bellsouth.net> Date: Thu, 17 Dec 2020 23:59:43 -0600 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.5.1 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit References: <16d39bf2-36c8-2688-e892-c2e126728462.ref@bellsouth.net> X-Mailer: WebService/1.1.17278 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.yahoo Apache-HttpAsyncClient/4.1.4 (Java/11.0.8) X-Spam-Status: No, score=-2.2 required=5.0 tests=BAYES_00, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, FREEMAIL_FROM, RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H2, SPF_HELO_NONE, SPF_NONE, TXREP autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on server2.sourceware.org X-BeenThere: cygwin@cygwin.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: General Cygwin discussions and problem reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Dec 2020 05:59:50 -0000 On 12/17/2020 3:09 PM, Brian Inglis wrote: > Have you checked your new router to see what default rules are enabled > there? The router firewall is disabled. (I have a another router serving as a firewall between it and the modem.) Besides, all hosts are on the local side of the new router, and disabling the Windows firewall eliminates the problem. _____________________ On 12/17/2020 3:23 PM, Bill Stewart wrote: > > If it works when you disable the firewall, then (to state the obvious, > sorry) there is a rule in the firewall that is blocking the traffic. So far so good. > I would suggest to examine all of the rules carefully. I say this > because it is happened to me before, and I could have sworn that I > looked at all of the rules. I've looked at Advanced Settings; Incoming Rules and I've looked at the output of netsh advfirewall firewall show rule name=all What else is there to look at in Windows 7 Home? This is doubly frustrating because Cygwin sshd has been running properly for 10 years on one of these computers and 8 years on the other. Perhaps I should reset the firewalls to default, but that will break other things. ____________ On 12/17/2020 3:24 PM, Erik Soderquist wrote: > I've had weird instances where the Windows Firewall tools lied; I > confirmed this by temporarily shutting down the Windows Firewall > entirely, then restarting the service having problems and retesting. > On retest, it worked fine, confirming it was the firewall causing the > problem. I didn't have to restart sshd; I could connect as soon as I disabled Windows Firewall. > > What exactly the problem was varied (this has happened many many times > to me)... In some cases it was the rule definition for the scope not > matching the actual network, in some cases I could not find any real > issue, but deleting and recreating the rules fixed the issue, in a few > cases, I also found a deny rule that somehow matched the service > having problems, and deny rules take precedence over allow rules. One > example of the conflict could be "sshd allowed" vs "port 22 denied"; > the deny would take precedence. I don't see any way to set port rules in Windows 7 Home, and none are visible in the list of incoming rules. I could not delete sshd, only disable it, even as administrator. (The delete button was grayed out). I disabled it, rebooted, then enabled it. That didn't help.