ssh timeouts & ipfw dyn_ack_lifetime

2000-03-31 Thread Keith Ray
I am having a problem with ssh sessions from my windows box to my freebsd box timing out after a number of idle minutes. SecureCRT still shows a valid connection until I try to type some keys, and then after a minute it says "connecton reset". I believe I have isolated the problem to the ipfw

Re: ssh timeouts & ipfw dyn_ack_lifetime

2000-03-31 Thread Luigi Rizzo
As Larry Baird was suggesting in a private email, one way to handle this problem would be to have the firewall issue keepalives to refresh the state. Unfortunately the connection can be alive without any traffic flowing, and you cannot rely on keepalives on both sides of the connection. On the o

Re: ssh timeouts & ipfw dyn_ack_lifetime

2000-03-31 Thread Keith Ray
At 01:16 PM 3/31/00 -0600, you wrote: >I am having a problem with ssh sessions from my windows box to my freebsd >box timing out after a number of idle minutes. SecureCRT still shows a >valid connection until I try to type some keys, and then after a minute it >says "connecton reset". I belie

Re: ssh timeouts & ipfw dyn_ack_lifetime

2000-03-31 Thread Luigi Rizzo
> I believe I may have found a solution. If I set net.inet.tcp.keepidle < > net.inet.ip.fw.dyn_ack_lifetime, this appears to work. The defaults for yes, though this assumes thay you can set the keepalive interval on at least one end, and you know the lifetime of dynamic rules on the firewall,