From owner-freebsd-stable@FreeBSD.ORG  Mon Sep 22 08:39:59 2003
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id C16A716A4E1
	for <stable@freebsd.org>; Mon, 22 Sep 2003 08:39:59 -0700 (PDT)
Received: from mailhost.firstcallgroup.co.uk (dilbert.firstcallgroup.co.uk
	[194.200.93.142])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 36A8C43FE3
	for <stable@freebsd.org>; Mon, 22 Sep 2003 08:39:59 -0700 (PDT)
	(envelope-from pfrench@firstcallgroup.co.uk)
Received: from pfrench by mailhost.firstcallgroup.co.uk with local (Exim 4.12)
	id 1A1Sn8-0008Ss-00; Mon, 22 Sep 2003 16:39:58 +0100
To: gavin.atkinson@ury.york.ac.uk, stable@freebsd.org
In-Reply-To: <001101c3811f$00e25cb0$05e22090@csrv.ad.york.ac.uk>
Message-Id: <E1A1Sn8-0008Ss-00@mailhost.firstcallgroup.co.uk>
From: Pete French <pfrench@firstcallgroup.co.uk>
Date: Mon, 22 Sep 2003 16:39:58 +0100
Subject: RE: Very slow SSh since upgrading machines to RELENG_4_8
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Sep 2003 15:39:59 -0000

> This sounds suspiciously like DNS timing out. I seem to remember this is
> due to the fact the default config of sshd now enables privilege
> seperation. sshd chroots into /var/empty and therefore can't access
> /etc/hosts, /etc/nsswitch.conf, /etc/resolv.conf etc.

O.K., that sounds like its the problems - though doesnt explain why the
timeout only occurrs between machines on the same subnet, rather than
those on differing subnets. I'll give it a go. Possibly the split
horizon DNS should be my best option, though its not something I;ve
ever done before and am thus slightly reticent...

cheers,

-pcf.