Got this weird error message the other day.

This message can be caused by a couple of things but in my case it was someone typing in “ALL: PARANOID” in the /etc/hosts.deny file. Commenting the line out will prevent the SSH daemon from rejecting a connection for the IP address not matching the IP address the host had previously.

Basically, “ALL: PARANOID” should never be used when clients have dynamic IP addresses.