sshfs floods on connect

[Daniel Stone]

when connecting to remote via ssh from Places>Connect to Server(previously bookmarked connection). On the remote system it refuses connection and logs it as an attack or Flood as my host is calling it here is how the log output looks.

Sep 15 19:32:09 gator836 kernel: SSH-ATTACK : IN=eth0 OUT= MAC=00:24:f4:70:00:1b:00:22:55:d6:c2:bf:08:00 SRC=72.86.91.59 DST=174.120.105.126 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=13134 DF PROTO=TCP SPT=36776 DPT=2222 WINDOW=5840 RES=0x00 SYN URGP=0

Some of the ip and fingerprint have been changed in this but hostgator is saying that this is a flood. And connection is refused. I am running Ubuntu 9.04 64 gnome on a decent multicore machine

The pop up says connection refused, I connect this way all of the time though. Why would it show on CentOS as an attack or flood

[Daniel Stone (danielstone)]

I reported this as a bug but this may just be the way that this host has connections set one question that they asked me was does this sshfs fork connections I told them no but I don't know that this is true

[Jamie Strandboge (jdstrand)]

Thanks for taking the time to report this bug and helping to make Ubuntu better. We appreciate the difficulties you are facing, but this appears to be a "regular" (non-security) bug. I have unmarked it as a security issue since this bug does not show evidence of allowing attackers to cross privilege boundaries nor directly cause loss of data/privacy. Please feel free to report any other bugs you may find.

[Sebastien Bacher (seb128)]

Thank you for taking the time to report this bug and helping to make Ubuntu better. Please answer these questions:

 * Is this reproducible?
 * If so, what specific steps should we take to recreate this bug?

 This will help us to find and resolve the problem.

[Daniel Stone (danielstone)]

This is reproducible :
I simply open the stored bookmark to this server and randomly it happens.
I believe that this is an error in the network routing on Hostgators servers
as this is happening less often but they had blamed it on a bug in nautilus
I do see that I can not connect using WebDav on the same server and this
was also blamed on nautilus

Steps to reproduce:
Open bookmarked place and try to connect to server

This may not be a bug this may just be how the have their
network setup on this server

[Daniel Stone (danielstone)]

In fact the WebDav connection always fails but I have been told by them that this is a known bug

[Sebastien Bacher (seb128)]

not confirming since you seem the only one to get this issue

[Daniel Stone (danielstone)]

this is confirmed as a security setting they had in place. This issue does not exist currently. Moving to invalid to close