Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 8 Jul 2003 13:57:12 -0500
From:      Marc Wiz <marc@wiz.com>
To:        FreeBSD Questions <freebsd-questions@freebsd.org>
Subject:   Re: ssh keepalives
Message-ID:  <20030708185712.GP19130@freshaire.wiz.com>
In-Reply-To: <20030708110837.Q54307@njamn8or.no-ip.org>
References:  <20030708110837.Q54307@njamn8or.no-ip.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Jul 08, 2003 at 11:10:41AM -0700, Viktor Lazlo wrote:
> 
> On Thu, 3 Jul 2003, Philip J. Koenig wrote:
> 
> > One of those firewalls is quite flexible about protocol state
> > timeouts, I can set this on a service-by-service basis. (ie I could
> > increase it for SSH and no other service)
> >
> > Unfortunately the firewall on the other side isn't so accommodating.
> > It has a single timeout setting that affects all traffic that
> > traverses the firewall, and I'd rather not increase that too high.
> 
> If there is no option then run a low-bandwidth application in the
> background to keep the connection alive, or script something to generate
> some activity at frequent enough intervals to do so.

I have noticed that with some firewalls at various places that I
have worked that it is not sufficient to just have the remote end
send data but you have to send data from your side.

Needless to say it is a royal pain.

Marc
-- 
Marc Wiz
marc@wiz.com
Yes, that really is my last name.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030708185712.GP19130>