{"version":"2.1.229","anchor":"sandbox-proxy-explains-itself-to-unauthenticated-clients","canonical_anchor":"sandbox-proxy-explains-itself-to-unauthenticated-clients","heading":"Sandbox proxy explains itself to unauthenticated clients","tier":"notice","area":"Sandbox","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.229\/e\/sandbox-proxy-explains-itself-to-unauthenticated-clients","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.229","markdown":"### Sandbox proxy explains itself to unauthenticated clients\n\nThe sandbox proxy now tells refused connections why, including SSH ones, instead of dropping them.\n\n**What**\n\nWhen the sandbox proxy requires an auth token, a client that offers no authentication method now gets an explanation rather than a silently dropped connection. On port 22 the proxy writes an SSH-shaped banner and disconnect message saying why the connection was refused, including the policy reason when the destination is on the deny list.\n\n**Evidence**\n\n`This proxy requires authentication, and this client did not offer an authentication method, so the connection was refused.`\n\n- Area: Sandbox\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5"}