From owner-freebsd-questions@FreeBSD.ORG Wed Mar 5 16:22:22 2014 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 26B75844 for ; Wed, 5 Mar 2014 16:22:22 +0000 (UTC) Received: from smarthost1.sentex.ca (smarthost1.sentex.ca [IPv6:2607:f3e0:0:1::12]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id CA7C2D9B for ; Wed, 5 Mar 2014 16:22:21 +0000 (UTC) Received: from [IPv6:2607:f3e0:0:4:f025:8813:7603:7e4a] (saphire3.sentex.ca [IPv6:2607:f3e0:0:4:f025:8813:7603:7e4a]) by smarthost1.sentex.ca (8.14.7/8.14.7) with ESMTP id s25GMLfe026305; Wed, 5 Mar 2014 11:22:21 -0500 (EST) (envelope-from mike@sentex.net) Message-ID: <53174F3B.1080403@sentex.net> Date: Wed, 05 Mar 2014 11:22:19 -0500 From: Mike Tancsa Organization: Sentex Communications User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.3.0 MIME-Version: 1.0 To: Brett Glass , questions@freebsd.org Subject: Re: SSH Protocol 2 between 9.x and 10.0 fails References: <201403050528.WAA21620@mail.lariat.net> In-Reply-To: <201403050528.WAA21620@mail.lariat.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.74 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Mar 2014 16:22:22 -0000 On 3/4/2014 11:54 PM, Brett Glass wrote: > Everyone: > > I'm making my first FreeBSD 10.0 server, and have been trying to use scp > to copy files onto it from a machine running 9.1. However, for some > reason, transfers only work if I specify the "-1" option on the command > line. The same is true of interactive SSH sessions; I can't log into > either machine from the other with SSH Protocol 2. Has anyone else > noticed this incompatibility? Here's an excerpt from the "verbose" > output from a failed scp session in which I attempted a file transfer > from the 9.1 server to the 10.0 server: > > debug1: identity file /root/.ssh/id_rsa type -1 > debug1: identity file /root/.ssh/id_rsa-cert type -1 > debug1: identity file /root/.ssh/id_dsa type -1 > debug1: identity file /root/.ssh/id_dsa-cert type -1 > debug1: identity file /root/.ssh/id_ecdsa type -1 > debug1: identity file /root/.ssh/id_ecdsa-cert type -1 > debug1: Remote protocol version 1.99, remote software version > OpenSSH_6.4_hpn13v11 FreeBSD-20131111 > debug1: match: OpenSSH_6.4_hpn13v11 FreeBSD-20131111 pat OpenSSH* > debug1: Enabling compatibility mode for protocol 2.0 > debug1: Local version string SSH-2.0-OpenSSH_5.8p2 FreeBSD-20110503 > debug1: SSH2_MSG_KEXINIT sent > > ...and then the transaction freezes until it times out. I dont have a 9.1 box to test with, but 9.2 to 10 works fine for me. The next line should be debug1: match: OpenSSH_6.4_hpn13v11 FreeBSD-20131111 pat OpenSSH* debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received Are you sure its not something else ? Do you have pf on the remote box ? perhaps a missing keep state rule ? P-MTU issue ? Try a tcpdump to see if packets are being missed or re-transmitted ? ---Mike -- ------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike@sentex.net Providing Internet services since 1994 www.sentex.net Cambridge, Ontario Canada http://www.tancsa.com/