From: Real Cucumber <monkcucumber@yahoo.com>
To: netfilter@lists.netfilter.org
Subject: SSH Connections Lost After 1 minute idle
Date: Tue, 13 Jul 2004 09:51:06 -0700 (PDT) [thread overview]
Message-ID: <20040713165106.65338.qmail@web40710.mail.yahoo.com> (raw)
I have a fedora firewall/router using iptables to
forward incoming SSH packets to an internal server and
it works great....however, only if the user does not
remain idle for 1 minute. If they idle for 1 minute,
the connection "freezes" in the sense that it drops
the connection but its not a proper "connectoin
closed" from the server as if it is a timelimit, but
rather just a connectoin loss like you've unplugged
your cable in the middle of a connection.
If the user is connecting from within the network,
they can remain idle for an unlimited amount of time
without being disconnected. It is only ones
connecting from outside hte network going through the
iptables firewall that have this idle problem.
I am only allowing TCP and UDP for SSH to be
forwarded.
Do I need any ICMP or any other special connection
timeout rules on the iptables side to fix this
problem?
Any help appreciated!
__________________________________
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail
next reply other threads:[~2004-07-13 16:51 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-07-13 16:51 Real Cucumber [this message]
2004-07-13 18:01 ` SSH Connections Lost After 1 minute idle Antony Stone
2004-07-13 20:57 ` Real Cucumber
2004-07-13 21:18 ` Antony Stone
2004-07-13 21:55 ` Dick St.Peters
2004-07-13 22:06 ` Antony Stone
2004-07-13 22:25 ` Real Cucumber
2004-07-13 22:35 ` Antony Stone
2004-07-13 22:48 ` Real Cucumber
2004-07-13 23:11 ` Antony Stone
2004-07-14 11:42 ` Sheldon Hearn
-- strict thread matches above, loose matches on Subject: below --
2004-07-13 22:28 Hudson Delbert J Contr 61 CS/SCBN
2004-07-13 22:58 ` Antony Stone
2004-07-13 23:29 Jason Opperisano
2004-07-14 3:48 ` George Alexandru Dragoi
2004-07-14 13:31 ` P
[not found] <Pine.GSU.4.58.0407131830460.14186@adore.lightlink.com>
2004-07-13 23:32 ` Real Cucumber
2004-07-13 23:49 ` Antony Stone
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040713165106.65338.qmail@web40710.mail.yahoo.com \
--to=monkcucumber@yahoo.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.