From owner-freebsd-questions@FreeBSD.ORG Mon Jun 6 02:32:37 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 76DEB16A41C for ; Mon, 6 Jun 2005 02:32:37 +0000 (GMT) (envelope-from jonc@chen.org.nz) Received: from chen.org.nz (chen.org.nz [210.54.19.51]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1CC3B43D5E for ; Mon, 6 Jun 2005 02:32:36 +0000 (GMT) (envelope-from jonc@chen.org.nz) Received: by chen.org.nz (Postfix, from userid 1000) id 0CD355642E; Mon, 6 Jun 2005 14:32:35 +1200 (NZST) Date: Mon, 6 Jun 2005 14:32:35 +1200 From: Jonathan Chen To: Robert Marella Message-ID: <20050606023235.GA81334@osiris.chen.org.nz> References: <5EEBE9C3C61D1142994C6B620C51E847110B80@depot.weblinkmo.com> <17059.37867.174248.688500@jerusalem.litteratus.org> <42A3A5F4.8090807@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <42A3A5F4.8090807@gmail.com> User-Agent: Mutt/1.4.2.1i Cc: freebsd-questions@freebsd.org Subject: Re: ssh delays 40 seconds X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jun 2005 02:32:37 -0000 On Sun, Jun 05, 2005 at 03:25:08PM -1000, Robert Marella wrote: > Robert Huff wrote: > >Richard J. Valenta writes: > > > > > >>I had this problem in the past, and it was due to DNS problems where my > >>IP from the client machine was unable to be resolved... but I think it > >>took longer than 40 seconds. I mentioned this in this list before, a > >>search of the list may help. > > > > > > Affirmed for the general case. "30 second delay, then normal > >network activity" _screams_ DNS misconfiguration, usually but not > >always in the client side. > > > > > > Robert Huff > > Forgive me if I am dense. According to the readout of "ssh -vvv gateway" > the connection is made immediately. Does that not indicate that it knew > where to go? It's not the forward case that's the problem. The sshd daemon on the server side attempts to find out where the connection is from by doing a reverse-lookup. If the incoming IP hasn't got a DNS entry, the failing DNS ip-lookup will time out in ~30s. Cheers. -- Jonathan Chen ---------------------------------------------------------------------- "I don't want to achive immortality through my works.. I want to achieve it through not dying" - Woody Allen