Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Karl Hiramoto <karl@hiramoto.org>
To: Carl Michal <michal@physics.ubc.ca>
Cc: netfilter@vger.kernel.org
Subject: Re: ssh connections stalling
Date: Fri, 23 Oct 2009 12:29:51 +0200	[thread overview]
Message-ID: <200910231229.51847.karl@hiramoto.org> (raw)
In-Reply-To: <alpine.LNX.2.00.0910221327250.21366@spider.phas.ubc.ca>


Could you send your syslog rules that match your LOG   rules from firehol, 
That might explain what is being dropped.

Does your connection stall when your doing something or just when idle?
If your idle you could try and modify your sshd config TCPKeepAlive option.  
It could be the kernel timed out the state of your connection. 

Another thing you could try is making your SSH ports more permissive with 
something like: 
iptables -I INPUT -p tcp --dport 22 -j ACCEPT

To accept ssh destined TCP traffic regardless of state. 

--
Karl

  parent reply	other threads:[~2009-10-23 10:29 UTC|newest]

Thread overview: 19+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-10-22 18:45 ssh connections stalling Carl Michal
2009-10-22 20:24 ` Karl Hiramoto
2009-10-22 20:36   ` Carl Michal
2009-10-23  7:10     ` Rob Sterenborg
2009-10-23 10:29     ` Karl Hiramoto [this message]
2009-10-22 23:31   ` Carl Michal
2009-10-23  8:05 ` Mart Frauenlob
2009-10-23 17:32   ` Carl Michal
2009-10-23 18:10     ` Jozsef Kadlecsik
2009-10-23 18:49       ` Carl Michal
2009-10-23 19:57       ` Carl Michal
2009-10-23 21:42         ` Jozsef Kadlecsik
2009-10-23 22:22           ` Carl Michal
2009-10-23 23:58             ` Steven Kath
2009-10-24  6:44             ` Carl Michal
2009-10-24  7:21               ` Payam Chychi
2009-10-24 17:24               ` Jozsef Kadlecsik
2009-10-24 20:58                 ` Carl Michal
2009-10-26  4:37                 ` Carl Michal

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=200910231229.51847.karl@hiramoto.org \
    --to=karl@hiramoto.org \
    --cc=michal@physics.ubc.ca \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox