Re: timeout

[Tucker Bradford]

That doesn't work. The way I interpret the results of the previous 
series of tests, we don't actually have a session timeout at all. There 
is something else going on here, but I don't know what it is. It might 
be a fragmentation  timeout. I am stumped. Anyway, I tried the 
ClientAliveInterval for kicks, and the problem persists. Thanks for the 
idea though.
-=Tucker

Damien Miller wrote:
Tucker Bradford wrote:
I'm experiencing a very annoying session timeout issue. Its most 
often noticed when sshing to a host behind the firewall from off 
site. It doesn't seem to happen when the connection is initiated from 
another internal network, but that could be due to some 
bi-directional pass rules.
In any case, a ssh connection from outside to the DMZ will timeout 
after 5-10 minutes if idle.

You can use ServerAliveInterval in ~/.ssh/config (or ClientAliveInterval
in /etc/ssh/sshd_config) to set up application-level keepalive packets
in ssh. These will keep the connection open through firewalls with short
timeouts.
-d

--
==========================
Tucker Bradford
IT Manager, SETI Institute
[EMAIL PROTECTED]
(650) 960-4560
==========================

begin:vcard
fn:Tucker Bradford
n:Bradford;Tucker
org:SETI Instituted;Information Technology
adr:;;515 N. Whisman Road;Mountain View;CA;94043;USA
email;internet:[EMAIL PROTECTED]
title:IT Manager
tel;work:650-960-4560
x-mozilla-html:TRUE
url:http://www.set.org
version:2.1
end:vcard