Date: Thu, 13 Nov 2008 22:40:52 +0100 From: Mel <fbsd.questions@rachie.is-a-geek.net> To: freebsd-questions@freebsd.org Cc: Forrest Aldrich <forrie@gmail.com> Subject: Re: SSH timeouts from remote connections on 7.1beta Message-ID: <200811132240.54269.fbsd.questions@rachie.is-a-geek.net> In-Reply-To: <491C9C44.90406@gmail.com> References: <491C9C44.90406@gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thursday 13 November 2008 22:29:40 Forrest Aldrich wrote:
> This is a recent phenomenon.
>
> I use a Mac client (iTerm) to connect to all my hosts internally. Same
> network. My connections to the FreeBSD-7.1.x system continually timeout
> when idle, and I have to re-connect (thankfully, I use "screen"). It's
> becoming annoying, and though I've set TcpKeepAlive, it still happens.
ServerAliveInterval client side is what you're looking for.
=46rom ssh_config(5):
ServerAliveCountMax
Sets the number of server alive messages (see below) which may=
be
sent without ssh(1) receiving any messages back from the serve=
r.
If this threshold is reached while server alive messages are
being sent, ssh will disconnect from the server, terminating t=
he
session. It is important to note that the use of server alive
messages is very different from TCPKeepAlive (below). The ser=
ver
alive messages are sent through the encrypted channel and ther=
e-
fore will not be spoofable. The TCP keepalive option enabled =
by
TCPKeepAlive is spoofable. The server alive mechanism is valu-
able when the client or server depend on knowing when a connec-
tion has become inactive.
The default value is 3. If, for example, ServerAliveInterval
(see below) is set to 15 and ServerAliveCountMax is left at the
default, if the server becomes unresponsive, ssh will disconne=
ct
after approximately 45 seconds. This option applies to protoc=
ol
version 2 only.
ServerAliveInterval
Sets a timeout interval in seconds after which if no data has
been received from the server, ssh(1) will send a message thro=
ugh
the encrypted channel to request a response from the server. =
The
default is 0, indicating that these messages will not be sent =
to
the server. This option applies to protocol version 2 only.
=2D-=20
Mel
Problem with today's modular software: they start with the modules
and never get to the software part.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200811132240.54269.fbsd.questions>