sshd down randomly, back up after ~10 mins?

This is a discussion on sshd down randomly, back up after ~10 mins? within the IPFilter forums, part of the System Security and Security Related category; Hello, Apologies if incorrect place to post (netbsd-help?). I have sshd running on NetBSD GATEWAY 2.0 NetBSD 2....


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 07-09-2005
Amadeus Stevenson
 
Posts: n/a
Default sshd down randomly, back up after ~10 mins?

Hello,

Apologies if incorrect place to post (netbsd-help?).

I have sshd running on

NetBSD GATEWAY 2.0 NetBSD 2.0 (RALTQ) #0: Sun Feb 6 22:27:10 GMT 2005
amadeus@GATEWAY:/usr/src/sys/arch/i386/compile/RALTQ i386

with ipf rule

pass in quick on rtk0 proto tcp from any to rtk0/32 port = 22 flags S
keep state keep frags

Every once in a while, in a way which I can't reproduce my ssh
sessions lock-up and I am then disconnected. I cannot reconnect via
sshd. However httpd continues to function "normally".

If I nmap the machine remotely it shows the sshd port as "filtered"
ie. the sshd is not responding. Normally it is "open". httpd is open
at all times.

I changed LogLevel DEBUG in sshd_config and the following corresponds
in authlog:

Jul 9 22:12:06 GATEWAY sshd[27212]: Read error from remote host
my.ip.address: Connection timed out

Otherwise there are no entries in /var/log/messages or /var/authlog.

The pid remains the same before and after this happens, so sshd is not
restarted.

ssh comes alive again after ~5/10 minutes.

Does anyone know why this would happen?

Or better still: how can I debug more?

I have a default-block-all on the machine, but ipmon doesn't show any
blocked packets when I regain access and check.

Any ideas would be appreciated.

This didn't always seem to happen...

Amadeus

Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 05:36 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0