Jan 5 22:54:49 freerouter sshd[32148]: fatal: PRNG is not seeded
Остановил... запускаю заново - пишет
PRNG is not seeded
В чем может быть проблема???
Такое ощущение что трабла с IPFW
Если делаешь ipfirewall_type="OPEN" на узле с которого коннектишься, все нормально... да уж.
Проблемы начались после поднятия VPN с IPSec
00001 allow ip from any to any via gif0
00010 allow ip from any to any via fxp0
00020 allow ip from any to any via lo0
00025 deny ip from 192.168.0.0/16 to any in via xl0
00030 deny ip from 87.224.x.x/26 to any in via fxp0
00040 divert 8668 ip from any to any in via xl0
00060 check-state
00066 skipto 800 udp from [ip DNS провайдера] 53 to any
00067 skipto 800 udp from any to [ip DNS провайдера] dst-port 53
00068 skipto 800 udp from [ip DNS провайдера] 53 to any
00069 skipto 800 udp from any to [ip DNS провайдера] dst-port 53
00096 skipto 800 tcp from any 25,110 to any
00098 skipto 800 tcp from any to any dst-port 25,110
00105 skipto 800 tcp from any to any dst-port 21,22,80,443,5190,1979,8080 out via xl0 setup keep-state
00120 skipto 800 icmp from any to 87.224.x.x in via xl0
00124 skipto 800 icmp from any to any out via xl0 keep-state
00200 skipto 800 tcp from 83.167.x.x to me dst-port 22 in via xl0 #Удаленный хост, разрешающий SSH
00210 skipto 800 tcp from me 22 to 83.167.x.x out via xl0 #Удаленный хост, разрешающий SSH
00300 deny ip from 172.16.0.0/12 to any in via xl0
00301 deny ip from 10.0.0.0/8 to any in via xl0
00302 deny ip from 127.0.0.0/8 to any in via xl0
00303 deny ip from 0.0.0.0/8 to any in via xl0
00304 deny ip from 169.254.0.0/16 to any in via xl0
00305 deny ip from 192.0.2.0/24 to any in via xl0
00306 deny ip from 204.152.64.0/23 to any in via xl0
00307 deny ip from 224.0.0.0/3 to any in via xl0
00310 deny tcp from any to any dst-port 138 in via xl0
00311 deny tcp from any to any dst-port 139 in via xl0
00312 deny tcp from any to any dst-port 81 in via xl0
00313 deny tcp from any to any dst-port 137 in via xl0
00315 deny tcp from any to any dst-port 113 in via xl0
00320 deny tcp from any to any frag in via xl0
00330 deny tcp from any to any established in via xl0
00500 allow ip from 83.167.x.x to any #Удаленный хост - чтоб пахал VPN
00501 allow ip from any to 83.167.x.x #Удаленный хост - чтоб пахал VPN
00600 deny log logamount 200 ip from any to any in via xl0
00650 deny log logamount 200 ip from any to any out via xl0
00800 divert 8668 ip from any to any out via xl0
00801 allow ip from any to any
00999 deny log logamount 200 ip from any to any
65535 deny ip from any to any