一个ssh的问题（fc4）

ak47mig

一台fc4，确认网络没问题，别的机器可以访问http
sshd配置了之后，本机可以登录，但其他的机器用winputty登录不上


本来没有修改配置，后来试图修改了一下，还是不能上

请问这个需要怎么配才好



sshd_config文件如下:

1. 
   
2. #    $OpenBSD: sshd_config,v 1.70 2004/12/23 23:11:00 djm Exp $
   
3. 
   
4. # This is the sshd server system-wide configuration file.  See
   
5. # sshd_config(5) for more information.
   
6. 
   
7. # This sshd was compiled with PATH=/usr/local/bin:/bin:/usr/bin
   
8. 
   
9. # The strategy used for options in the default sshd_config shipped with
   
10. # OpenSSH is to specify options with their default value where
    
11. # possible, but leave them commented.  Uncommented options change a
    
12. # default value.
    
13. 
    
14. Port 24321
    
15. #Protocol 2,1
    
16. Protocol 2
    
17. #AddressFamily any
    
18. ListenAddress 222.29.216.138
    
19. #ListenAddress ::
    
20. 
    
21. # HostKey for protocol version 1
    
22. #HostKey /etc/ssh/ssh_host_key
    
23. # HostKeys for protocol version 2
    
24. #HostKey /etc/ssh/ssh_host_rsa_key
    
25. #HostKey /etc/ssh/ssh_host_dsa_key
    
26. 
    
27. # Lifetime and size of ephemeral version 1 server key
    
28. #KeyRegenerationInterval 1h
    
29. ServerKeyBits 768
    
30. 
    
31. # Logging
    
32. #obsoletes QuietMode and FascistLogging
    
33. #SyslogFacility AUTH
    
34. SyslogFacility AUTHPRIV
    
35. #LogLevel INFO
    
36. 
    
37. # Authentication:
    
38. 
    
39. #LoginGraceTime 2m
    
40. PermitRootLogin yes
    
41. StrictModes yes
    
42. #MaxAuthTries 6
    
43. 
    
44. #RSAAuthentication yes
    
45. #PubkeyAuthentication yes
    
46. #AuthorizedKeysFile    .ssh/authorized_keys
    
47. 
    
48. # For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
    
49. #RhostsRSAAuthentication no
    
50. # similar for protocol version 2
    
51. #HostbasedAuthentication no
    
52. # Change to yes if you don't trust ~/.ssh/known_hosts for
    
53. # RhostsRSAAuthentication and HostbasedAuthentication
    
54. #IgnoreUserKnownHosts no
    
55. # Don't read the user's ~/.rhosts and ~/.shosts files
    
56. IgnoreRhosts yes
    
57. 
    
58. # To disable tunneled clear text passwords, change to no here!
    
59. #PasswordAuthentication yes
    
60. #PermitEmptyPasswords no
    
61. PasswordAuthentication yes
    
62. 
    
63. # Change to no to disable s/key passwords
    
64. #ChallengeResponseAuthentication yes
    
65. ChallengeResponseAuthentication no
    
66. 
    
67. # Kerberos options
    
68. #KerberosAuthentication no
    
69. #KerberosOrLocalPasswd yes
    
70. #KerberosTicketCleanup yes
    
71. #KerberosGetAFSToken no
    
72. 
    
73. # GSSAPI options
    
74. #GSSAPIAuthentication no
    
75. GSSAPIAuthentication yes
    
76. #GSSAPICleanupCredentials yes
    
77. GSSAPICleanupCredentials yes
    
78. 
    
79. # Set this to 'yes' to enable PAM authentication, account processing,
    
80. # and session processing. If this is enabled, PAM authentication will
    
81. # be allowed through the ChallengeResponseAuthentication mechanism.
    
82. # Depending on your PAM configuration, this may bypass the setting of
    
83. # PasswordAuthentication, PermitEmptyPasswords, and
    
84. # "PermitRootLogin without-password". If you just want the PAM account and
    
85. # session checks to run without PAM authentication, then enable this but set
    
86. # ChallengeResponseAuthentication=no
    
87. #UsePAM no
    
88. UsePAM yes
    
89. 
    
90. #AllowTcpForwarding yes
    
91. #GatewayPorts no
    
92. #X11Forwarding no
    
93. X11Forwarding yes
    
94. #X11DisplayOffset 10
    
95. #X11UseLocalhost yes
    
96. #PrintMotd yes
    
97. #PrintLastLog yes
    
98. #TCPKeepAlive yes
    
99. #UseLogin no
    
100. #UsePrivilegeSeparation yes
     
101. #PermitUserEnvironment no
     
102. #Compression yes
     
103. #ClientAliveInterval 0
     
104. #ClientAliveCountMax 3
     
105. #UseDNS yes
     
106. #PidFile /var/run/sshd.pid
     
107. #MaxStartups 10
     
108. #ShowPatchLevel no
     
109. 
     
110. # no default banner path
     
111. #Banner /some/path
     
112. 
     
113. # override default of no subsystems
     
114. Subsystem    sftp    /usr/libexec/openssh/sftp-server
     
115. 
     

复制代码

[/code]

河里的鱼

telnet 22端口是否正常?

我爱钓鱼

service iptables stop. 再试

x718

sshd第一次登陆的时候会有一点问题，你可以尝试删除.ssh/know_hosts中相关用户的记录，然后尝试重新登陆，一般就可以解决问题。

ak47mig

[quote]原帖由 "我爱钓鱼"]service iptables stop. 再试[/quote 发表：

good
I can connect
but how can I configuration the firewall.
thank u！

btw:the sshd port is 24321