You'll noticeTier: how much it should matter to you
3Useful: my rating, 1 to 5
2Signal: worth watching, 1 to 5
SandboxArea: what it touches
ImprovementsKind: in v2.1.229,
ImprovementsSection of the release
What
When the sandbox proxy requires an auth token, a client that offers no authentication method now gets an explanation rather than a silently dropped connection. On port 22 the proxy writes an SSH-shaped banner and disconnect message saying why the connection was refused, including the policy reason when the destination is on the deny list.
Evidence
This proxy requires authentication, and this client did not offer an authentication method, so the connection was refused.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
