SSH connections refused with "Not allowed at this time" after LoginGraceTime timeout on Red Hat Enterprise Linux (OpenSSH per-source Penalties)
Issue
-
SSH client connections to a Red Hat Enterprise Linux server intermittently fail with a banner rejection instead of proceeding through normal key exchange. Client-side verbose output (ssh -vvv) shows:
debug1: kex_exchange_identification: banner line 0: Not allowed at this time kex_exchange_identification: read: Connection reset by peer Connection reset by <server> port 22
Environment
- Red Hat Enterprise Linux 10
- Red Hat Enterprise Linux 9 (when using OpenSSH v9.9p1-6.el9_8 or later)
- openssh-server 9.8 or later (ships by default on RHEL 10)v9.9p1-6.el9_8
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
