SSH-connections hanging (IP-filter related?)

From: Rob De Langhe (rob.delanghe@telindus.be)
Date: Tue Dec 09 2003 - 13:14:54 EST


Hi,
 
since a few weeks when I upgraded to OpenSSH v3.7.1p2 (on OpenSSL 0.9.7c),
and it seems that since then I keep getting problems with SSH connections to
distant servers which keep hanging :
 
I batch a lot of commands from a central server, which does SSH-connections
to remote servers to invoke commands on there. When that remote command
completes, I expect that remote SSHD to close the connection, so that the
client-SSH on the central server can terminate.
But this doesn't happen : the remote commands complete entirely, and only
the parent "sshd" program remains in the proc table without childs. The
connection from the central server is still ESTABLISHED, and a "truss" on
the SSHD program shows a "poll()" that's hanging.
Sure on the connecting side (the central server), the "ssh" client is still
waiting for the remote end to close the connection. And so my batch jobs
hang...
 
We run IP-Filter everywhere, and I noticed a few posts on the Internet that
might indicate relationship of this SSH-problem with the fact that IP-filter
is controlling the communications.
 
The version of IPF is 3.4.30, with a lot of rules which I do not include
(yet) since I donow if they are relevant (until someone confirms).
 
Any hints/tips ?
 
TIA
 
Rob
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:27:39 EDT