SSH User Can Login From Within Network, "Bad Password" Externally

[brando56894]

Hey Guys,

I'm trying to setup a jailed SFTP user in one of the jails on my NAS and some very strange things are happening. I have /etc/ssh/sshd_config setup for matchuser and it works inside my network (from FreeBSD OS to FreeBSD Jail, ssh rejects the connection but sftp works as expected) but from outside my network it prompts me for the password and even when I enter it correctly it asks me for it again, eventually reaching my max login attempts then it closes the connection. I am 100% sure that the external IP is routed to the jail that I have created the jailed user in so I have no idea why it's not working and nothing is showing up in /var/log/auth.log when I attempt the external connection, info is there when I use the internal connection though. To make it even more odd, my normal user (bran) works perfectly from inside and outside of my network.

/etc/ssh/sshd_config

Code:

#  $OpenBSD: sshd_config,v 1.93 2014/01/10 05:59:19 djm Exp $   
#  $FreeBSD: releng/9.3/crypto/openssh/sshd_config 264693 2014-04-20 13:12:32Z des $   

LogLevel INFO   

# Authentication:
LoginGraceTime 2m
PermitRootLogin no
MaxAuthTries 3
MaxSessions 10

PrintMotd no
TCPKeepAlive yes

# override default of no subsystems
Subsystem  sftp  /usr/libexec/sftp-server

Match User blackbeard
  ChrootDirectory /sshjail
  ForceCommand internal-sftp
  X11Forwarding no
  AllowTcpForwarding no
  PermitTunnel no

Code:

 [bran@UsenetApps /home]$ ls -l /|grep ssh
drwxr-xr-x  2 root  wheel  3 Dec 16 11:27 sshjail

 [bran@UsenetApps /home]$ id blackbeard
uid=1003(blackbeard) gid=1003(blackbeard) groups=1003(blackbeard)

Code:

[root@freenas] ~# sftp blackbeard@usenet
Password for blackbeard@UsenetApps.brandongolway.us:
Connected to usenet.
sftp> dir
test  
sftp>

Code:

 [bran@UsenetApps /home]$ ls /sshjail/
test

Code:

 [bgolway@frichardslinux ~]$  sftp -P3000 blackbeard@myhost.us
blackbeard@myhost.us's password:
Permission denied, please try again.
blackbeard@myhost.us's password:
Permission denied, please try again.
blackbeard@myhost.us's password:
Permission denied (publickey,password).
Couldn't read packet: Connection reset by peer

 

[dlavigne]

Looks like you're being sent to the wrong system... If you remove .ssh/known_hosts on the client, does the fingerprint the server displays match the fingerprint of the system you intend to connect to?

 

[brando56894]

Silly me, I was using the wrong port. I was looking through the fingerprints and noticed that one said port 3000 and another one said 3001, once I tried the user blackbeard on port 3001 it let me in without issue. Thanks for the help!