Hello!

Anybody know why sshd drops idle connections when I have "KeepAlive yes" 
in /etc/ssh/sshd_config and I have restarted the sshd process?

Best regards,
- Morten Green Hermansen, Fanitas

.... forgot to say that I am on a Solaris 9 installation, sorry!

- Morten Green Hermansen, Fanitas

Morten Green Hermansen <mortengh@fanitas.com> wrote:
> Hello!

> Anybody know why sshd drops idle connections when I have "KeepAlive yes" 
> in /etc/ssh/sshd_config and I have restarted the sshd process?

Why do you think that it's sshd that's doing the dropping? 

It's far more likely to be a NAT/firewall device between client and
server.

-- 
Darren Dunham                                           ddunham@taos.com
Senior Technical Consultant         TAOS            http://www.taos.com/
Got some Dr Pepper?                           San Francisco, CA bay area
         < This line left intentionally blank to confuse you. >

On Tue, 10 Aug 2004 16:04:59 +0000, Darren Dunham wrote:

> Morten Green Hermansen <mortengh@fanitas.com> wrote:
>> Hello!
> 
>> Anybody know why sshd drops idle connections when I have "KeepAlive yes" 
>> in /etc/ssh/sshd_config and I have restarted the sshd process?
> 
> Why do you think that it's sshd that's doing the dropping? 
> 
> It's far more likely to be a NAT/firewall device between client and
> server.

I have been logged into an OpenBSD server from my Ultra-1 for the last 8
days with no disconnect and there are firewalls at both ends plus a NAT
ahead of the Ultra.

Note that the OP did not specify on which system he set "KeepAlive yes".

Dave Uhring <daveuhring@yahoo.com> wrote:
> On Tue, 10 Aug 2004 16:04:59 +0000, Darren Dunham wrote:

>> Morten Green Hermansen <mortengh@fanitas.com> wrote:
>>> Hello!
>> 
>>> Anybody know why sshd drops idle connections when I have "KeepAlive yes" 
>>> in /etc/ssh/sshd_config and I have restarted the sshd process?
>> 
>> Why do you think that it's sshd that's doing the dropping? 
>> 
>> It's far more likely to be a NAT/firewall device between client and
>> server.

> I have been logged into an OpenBSD server from my Ultra-1 for the last 8
> days with no disconnect and there are firewalls at both ends plus a NAT
> ahead of the Ultra.

Certainly you can set up NAT/firewall boxes that allow idle connections
to persist, but they are usually to blame when they do not.

By default, neither Solaris nor SSH will drop an idle connection.

-- 
Darren Dunham                                           ddunham@taos.com
Senior Technical Consultant         TAOS            http://www.taos.com/
Got some Dr Pepper?                           San Francisco, CA bay area
         < This line left intentionally blank to confuse you. >