From owner-freebsd-security Fri Apr 6 13: 9:29 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.timogen.com (adsl-64-167-116-118.dsl.snfc21.pacbell.net [64.167.116.118]) by hub.freebsd.org (Postfix) with ESMTP id 9C6AD37B422 for ; Fri, 6 Apr 2001 13:09:15 -0700 (PDT) (envelope-from john@timogen.com) Received: from timogen.com (pc204 [192.168.100.204]) by mail.timogen.com (8.8.8/8.8.3) with ESMTP id LAA08206; Fri, 6 Apr 2001 11:15:00 -0700 Message-ID: <3ACE231F.664FA8D9@timogen.com> Date: Fri, 06 Apr 2001 13:12:15 -0700 From: John Calderon X-Mailer: Mozilla 4.75 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: anderson@centtech.com Cc: Guy Poizat , George.Giles@mcmail.vanderbilt.edu, security@FreeBSD.ORG Subject: Re: SSH login delay References: <5.0.2.1.0.20010328113829.01ac0d30@pop.partsonline.fr> <3AC4A923.87D7F20C@centtech.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org also there are some serious delays with large sites > 60000 and also if you start ssh out of inetd. john Eric Anderson wrote: > Actually, we had the same problem.. run the patches to openssh on the > server side (and client side if you can) and it should fix it.. > > Guy Poizat wrote: > > > > At 16:03 27/03/2001, you wrote: > > >Does any one know what causes the long delay between entering the password > > >to ssh and the actual logging in of the shell prompt ? > > > > > >Sometimes it takes more than a minute when I know it is not network speed ? > > > > > >This behavior makes me suspicious. > > > > > >This is observed on the latest release of FreeBSD. > > > > Perhaps it has somethin' to deal with DNS lookup failure (timeout->delay) ? > > Can all of your hosts get a reply for a DNS query about each others ? > > > > I got that kind of problem and solved it by ading a BIND serving for my > > NATed hosts. > > > > -- > > Guy Poizat > > poizat@partsonline.fr > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > > with "unsubscribe freebsd-security" in the body of the message > > -- > ------------------------------------------------------------------------------- > Eric Anderson anderson@centtech.com > Centaur Technology (512) 418-5792 > To see a need and wait to be asked, is to already refuse. > ------------------------------------------------------------------------------- > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message