secureCRT 3.3 -> openssh v3.7pl (checkpoint firewall)

[Damien Miller]

Lou wrote:
> Client - secureCRT 3.3 outside the firewall (Checkpoint)
> Server - openssh v3.7 on an aix51 rs6k inside the fw
> 
> The firewall lets in the first packet but blocks the second with the
> message: ssh 1.x not allowed.  The connection gets reset. Here is the
> trace from the client:

Your firewall is insane - it is mis-detecting the protocol version in
use, despite the unambiguous version string:

> [SSH LOCAL ONLY] : RECV : Remote Identifier = "SSH-2.0-OpenSSH_3.7p1"

Your problem lies at the firewall. Check your configuration or hassle
Checkpoint for a fix.

-d