From owner-freebsd-questions  Fri Feb  1  3:43:49 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx2.melsa.net.id (mx2.melsa.net.id [202.138.224.13])
	by hub.freebsd.org (Postfix) with ESMTP id 718B337B405
	for <questions@freebsd.org>; Fri,  1 Feb 2002 03:43:43 -0800 (PST)
Received: from ns2.melsa.net.id (ns2.melsa.net.id [202.138.224.4])
	by mx2.melsa.net.id (8.11.3/8.11.3) with ESMTP id g11Bhcf61389
	for <questions@freebsd.org>; Fri, 1 Feb 2002 18:43:38 +0700 (JAVT)
Received: from pop3.melsa.net.id (pop3.melsa.net.id [202.138.224.11])
	by ns2.melsa.net.id (8.11.3/8.11.3) with ESMTP id g11BhcF26407
	for <questions@freebsd.org>; Fri, 1 Feb 2002 18:43:38 +0700 (JAVT)
Date: Fri, 1 Feb 2002 18:43:38 +0700 (JAVT)
From: Eko Suwarsono <ekoz@melsa.net.id>
To: questions@freebsd.org
Subject: ssh disconnect
Message-ID: <Pine.BSF.4.05.10202011827050.25273-100000@ns2.melsa.net.id>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG


Halo,
I'm always get time out when i am connecting with ssh to other host. I
think, this is because my ipfw configuration. I try to increase
net.inet.ip.fw.dyn_short_lifetime to 1500 but it doesn't help.

This is my ipfw configuration for ssh connection :

add 01000 check-state
add 02000 allow log tcp from xxx.xxx.xxx.xxx to any 22 out xmit rl0 setup
keep-state

if i change the configuration to :

add 02000 allow log tcp from xxx.xxx.xxx.xxx to any 22 out xmit rl0

then, i can't ssh anymore. Any suggestions ?

TIA
ekoz


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message