RE: IPFW disconnections and resets

2005-04-30 Thread Michael Scheidell
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Siddhartha Jain > Sent: Friday, April 29, 2005 8:21 AM > To: freebsd-security@freebsd.org > Subject: Re: IPFW disconnections and resets > > Just out of curiosity, why is

Re: IPFW disconnections and resets

2005-04-30 Thread Remko Lodder
Neo-Vortex wrote: On Sat, 30 Apr 2005, Andrew McNaughton wrote: 1% is way too much. use nohup. eg: SSH dies, asin i get "Connection reset by peer" and my ssh session closes, i can restart it fine though and the rest of the rules are parsed fine, also, i dont get that on the window that im loadi

Re: IPFW disconnections and resets

2005-04-29 Thread Peter C. Lai
On Fri, Apr 29, 2005 at 03:10:47PM +0530, Siddhartha Jain wrote: > Hi, > > I am using IPFW on FreeBSD 4.11 > > I am facing two problems: > - SSH sessions timeout after a while Use stateful connections. (i.e. use a setup rule and a subsequent established rule). -- Peter C. Lai University of Con

Re: IPFW disconnections and resets

2005-04-29 Thread Nagy Istvan
Hi, im playing with the /etc/crontab to reload the rules periodically, while i remotly edit both crontab and ipfw_rules.sh, this solves the problem of lock-out (but i dont know exactly what other problems it might cause...:) sshd_config has a ClientAliveInterval (seconds between trys) and Clie

RE: IPFW disconnections and resets

2005-04-29 Thread Michael Scheidell
> > I use that all the time, maybe 1 out of 100 times it will kill > a ssh session (only one that has irssi open cause of the time > updating it kills it, i have it set to update every second > though, so normally it'd be like 1 out of 500 or so) and even > if it does, it still finishes loadin

Re: IPFW disconnections and resets

2005-04-29 Thread Neo-Vortex
On Sat, 30 Apr 2005, Andrew McNaughton wrote: > 1% is way too much. use nohup. eg: SSH dies, asin i get "Connection reset by peer" and my ssh session closes, i can restart it fine though and the rest of the rules are parsed fine, also, i dont get that on the window that im loading the firewal

Re: IPFW disconnections and resets

2005-04-29 Thread Andrew McNaughton
On Fri, 29 Apr 2005, Neo-Vortex wrote: On Fri, 29 Apr 2005, Siddhartha Jain wrote: Even if I run this script as it is (without running from within another script and redirecting), I don't get disconnected. hehe, probobly different shells or something (i use tcsh) - or mabe luck :) but without it i

Re: IPFW disconnections and resets

2005-04-29 Thread Siddhartha Jain
Michael Scheidell wrote: >>I use that all the time, maybe 1 out of 100 times it will kill >>a ssh session (only one that has irssi open cause of the time >>updating it kills it, i have it set to update every second >>though, so normally it'd be like 1 out of 500 or so) and even >>if it does, it

Re: IPFW disconnections and resets

2005-04-29 Thread Neo-Vortex
On Fri, 29 Apr 2005, Siddhartha Jain wrote: > Even if I run this script as it is (without running from within another > script and redirecting), I don't get disconnected. hehe, probobly different shells or something (i use tcsh) - or mabe luck :) but without it i get disconnected like 99.9% of

Re: IPFW disconnections and resets

2005-04-29 Thread Siddhartha Jain
Neo-Vortex wrote: >>- When I run "/sbin/ipfw -q -f flush" in the rules script all connection >>get reset (and I am thrown out of the box). > > > Yep, standard functionality, easy fix though: > > -- Start file /root/bin/fws -- > #!/bin/sh > fw > /root/fws-out 2>&1 & > -- End File -- > > -- Start

Re: IPFW disconnections and resets

2005-04-29 Thread Neo-Vortex
On Fri, 29 Apr 2005, Siddhartha Jain wrote: > I am facing two problems: > - SSH sessions timeout after a while In PuTTY or whatever other SSH client you use - enable sending of keepalive packets (for PuTTY - under connection settings) (not sure if this is cause of ipfw or what, but the tcp sess