[CLUE-Tech] ssh session freezing

Dave Anselmi anselmi at americanisp.net
Fri Sep 28 21:10:48 MDT 2001


"Todd A. Gibson" wrote:

> * Every 2-5 minutes: the connection freezes.

Since you don't mention your setup on either end of the connection, I guess you
think it's a modem problem.  So looking at the directions for NAT (DNAT in
iptables language), there are 3 timeouts for TCP connections: idle (no data
sent), negotiation (connection setup and teardown), and fragmentation
(out-of-order fragment life).  The defaults are 24 hours, 60 seconds, and 60
seconds.  So perhaps increasing the negotiation or fragment timeouts would help
(I'd guess fragments are the problem, but who knows?)

The command is 'set nat timeout tcp <type> <time in seconds>'.

How long is the while loop in the workaround you mentioned?

If that doesn't help, I'd look at your client or server setup.  Assuming you're
using a recent openssh on both ends, perhaps there is some other filtering
going on.

HTH,
Dave





More information about the clue-tech mailing list