From owner-freebsd-questions Thu Nov 1 4:13:36 2001 Delivered-To: freebsd-questions@freebsd.org Received: from axl.seasidesoftware.co.za (axl.seasidesoftware.co.za [196.31.7.201]) by hub.freebsd.org (Postfix) with ESMTP id 6F1B337B407; Thu, 1 Nov 2001 04:13:31 -0800 (PST) Received: from sheldonh (helo=axl.seasidesoftware.co.za) by axl.seasidesoftware.co.za with local-esmtp (Exim 3.33 #1) id 15zGjz-000JqA-00; Thu, 01 Nov 2001 14:14:35 +0200 From: Sheldon Hearn To: freebsd-questions@FreeBSD.org, ru@FreeBSD.org Subject: Re: Protocol-specific dynamic IPFW rule lifetimes? In-reply-to: Your message of "Thu, 01 Nov 2001 13:49:26 +0200." <76018.1004615366@axl.seasidesoftware.co.za> Date: Thu, 01 Nov 2001 14:14:35 +0200 Message-ID: <76269.1004616875@axl.seasidesoftware.co.za> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Thu, 01 Nov 2001 13:49:26 +0200, Sheldon Hearn wrote: > > I'm happy with the defaults for HTTP, SMTP and others. However, I'd > > like the dynamic rules used to service SSH, pcAnywhere and Microsoft > > Terminal Services to live _much_ longer. > > Just before people shoot the question down, I _do_ know about OpenSSH's > ClientAliveInterval and ClientAliveCountMax. Also, I've noticed that my SSH sessions time out after just 20 seconds of inactivity. Howcome they're not triggering fw.dyn_ack_lifetime, which is the default 300? Here are the relevant rules: add fwd 216.123.49.33 tcp from 216.123.49.36 22 to any established ... add allow tcp from any to 216.123.49.32/28 22 setup keep-state Ciao, Sheldon. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message