From nobody Wed Mar  1 10:35:17 2023
X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4PRVxW3T0Mz3vhm0
	for <freebsd-net@mlmmj.nyi.freebsd.org>; Wed,  1 Mar 2023 10:35:27 +0000 (UTC)
	(envelope-from yuri@FreeBSD.org)
Received: from shell1.rawbw.com (shell1.rawbw.com [198.144.192.42])
	by mx1.freebsd.org (Postfix) with ESMTP id 4PRVxV3p7fz4MMq
	for <freebsd-net@freebsd.org>; Wed,  1 Mar 2023 10:35:26 +0000 (UTC)
	(envelope-from yuri@FreeBSD.org)
Authentication-Results: mx1.freebsd.org;
	dkim=none;
	spf=softfail (mx1.freebsd.org: 198.144.192.42 is neither permitted nor denied by domain of yuri@FreeBSD.org) smtp.mailfrom=yuri@FreeBSD.org;
	dmarc=none
Received: from [192.168.5.3] (c-73-162-96-20.hsd1.ca.comcast.net [73.162.96.20])
	(authenticated bits=0)
	by shell1.rawbw.com (8.15.1/8.15.1) with ESMTPSA id 321AZJCa066718
	(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO)
	for <freebsd-net@freebsd.org>; Wed, 1 Mar 2023 02:35:19 -0800 (PST)
	(envelope-from yuri@FreeBSD.org)
X-Authentication-Warning: shell1.rawbw.com: Host c-73-162-96-20.hsd1.ca.comcast.net [73.162.96.20] claimed to be [192.168.5.3]
Message-ID: <baf5faa3-3c03-fb9e-4196-bd26c2fc622e@tsoft.com>
Date: Wed, 1 Mar 2023 02:35:17 -0800
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-net
List-Help: <mailto:freebsd-net+help@freebsd.org>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Subscribe: <mailto:freebsd-net+subscribe@freebsd.org>
List-Unsubscribe: <mailto:freebsd-net+unsubscribe@freebsd.org>
Sender: owner-freebsd-net@freebsd.org
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:102.0) Gecko/20100101
 Thunderbird/102.5.0
Content-Language: en-US
To: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>
From: Yuri <yuri@FreeBSD.org>
Subject: sshd doesn't disconnect for 30+ minutes after the TCP connection is
 closed ungracefully
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Spamd-Result: default: False [0.50 / 15.00];
	VIOLATED_DIRECT_SPF(3.50)[];
	NEURAL_HAM_MEDIUM(-1.00)[-1.000];
	NEURAL_HAM_LONG(-1.00)[-1.000];
	NEURAL_HAM_SHORT(-1.00)[-0.996];
	RCVD_NO_TLS_LAST(0.10)[];
	MIME_GOOD(-0.10)[text/plain];
	R_DKIM_NA(0.00)[];
	ASN(0.00)[asn:7961, ipnet:198.144.192.0/19, country:US];
	FROM_EQ_ENVFROM(0.00)[];
	TO_DN_EQ_ADDR_ALL(0.00)[];
	MIME_TRACE(0.00)[0:+];
	MLMMJ_DEST(0.00)[freebsd-net@freebsd.org];
	DMARC_NA(0.00)[freebsd.org];
	ARC_NA(0.00)[];
	RCPT_COUNT_ONE(0.00)[1];
	FROM_HAS_DN(0.00)[];
	FREEFALL_USER(0.00)[yuri];
	RCVD_VIA_SMTP_AUTH(0.00)[];
	RCVD_COUNT_TWO(0.00)[2];
	TO_MATCH_ENVRCPT_ALL(0.00)[];
	HAS_XAW(0.00)[];
	PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org];
	R_SPF_SOFTFAIL(0.00)[~all:c];
	TO_DOM_EQ_FROM_DOM(0.00)[]
X-Rspamd-Queue-Id: 4PRVxV3p7fz4MMq
X-Spamd-Bar: /
X-ThisMailContainsUnwantedMimeParts: N

Windows system connects to FreeBSD through ssh and then this connection 
dies because of WiFi or VPN issues.

FreeBSD still has the sshd process alive for this connection for 30+ 
minutes.

TCP keepalive is enabled on the FreeBSD host:

$ sysctl net.inet.tcp.always_keepalive
net.inet.tcp.always_keepalive: 1

Shouldn't TCP keepalive kill this sshd process after 3-4 minutes because 
this connection isn't alive?


Yuri