From owner-freebsd-hackers@FreeBSD.ORG  Tue Apr 19 21:27:27 2005
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id D2BF216A4CE; Tue, 19 Apr 2005 21:27:27 +0000 (GMT)
Received: from grant.org (grant.org [206.190.173.18])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 4D16643D55; Tue, 19 Apr 2005 21:27:27 +0000 (GMT)
	(envelope-from Devon@Jovi.Net)
Received: from grant.org (localhost [127.0.0.1])
	by grant.org (8.12.11/8.12.11) with ESMTP id j3JLRDMF055799
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Tue, 19 Apr 2005 17:27:13 -0400 (EDT)
	(envelope-from Devon@Jovi.Net)
Received: (from devon@localhost)
	by grant.org (8.12.11/8.12.11/Submit) id j3JLR9Oq055796;
	Tue, 19 Apr 2005 17:27:09 -0400 (EDT)
	(envelope-from Devon@Jovi.Net)
Date: Tue, 19 Apr 2005 17:27:09 -0400 (EDT)
Message-Id: <200504192127.j3JLR9Oq055796@grant.org>
X-Authentication-Warning: grant.org: devon set sender to Devon@Jovi.Net using
	-f
From: Devon Sean McCullough <FreeBSD-2005@Jovi.Net>
To: <security-advisories@freebsd.org>, <freebsd-hackers@freebsd.org>
X-Spam-Status: No, score=-5.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 
	autolearn=ham version=3.0.2
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on grant.org
X-Virus-Scanned: by amavisd-new
X-Mailman-Approved-At: Wed, 20 Apr 2005 12:01:55 +0000
cc: Steven Hartland <killing@BarrysWorld.com>
Subject: sshd dieing? after applying FreeBSD-SA-03:12.openssh
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Apr 2005 21:27:27 -0000

On Wed, 17 Sep 2003 00:02:33 +0100 Steven Hartland asked this question
but no answer was posted.  The trouble is likely no client reverse DNS
either because it is missing or slow.  Adding the client to /etc/hosts
on the server seems at first to do nothing but after a minute or so it
stops hanging and asks for a password.  Could be a coincidence though.

To recap:
$ ssh -v me@my-freebsd-5.1-RELEASE-box
OpenSSH_3.4p1+CAN-2004-0175, SSH protocols 1.5/2.0, OpenSSL 0x0090609f
...
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.6.1p1 FreeBSD-20030423
debug1: match: OpenSSH_3.6.1p1 FreeBSD-20030423 pat OpenSSH*
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.4p1+CAN-2004-0175
...
debug1: got SSH2_MSG_SERVICE_ACCEPT
<---Here the client hangs until timeout.

To debug: kill the server process and run # sshd -ddde
...
debug3: Trying to reverse map address ...
<---Here the server hangs until timeout.