Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
ssh sessions timeout and abort
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
swingkyd
Guru
Guru


Joined: 13 Jan 2005
Posts: 334

PostPosted: Tue Oct 24, 2006 3:38 pm    Post subject: ssh sessions timeout and abort Reply with quote

I am attempting to ssh into my laptop at home. however, if I can get on (usually it just says the session times out), I can log on and within about 20 seconds, the session always sends a "Network error: Software caused a connection to abort" (using putty.exe). Now, previously this has not been a problem.
I have recently done an emerge -e system && emerge -e world to fully upgrade my GCC to 4.1.1.

There was one time while compiling that the system had a HARD lock up or freeze and required a power cycle to get it working again.

I have about 20 seconds before the system crashes and takes a few minutes to get ssh to respond again.


Can anyone help me learn how to troubleshoot this problem?
Thanks!
Could this have to do with me changing my sshd_config or ssh_config settings to allow x forwarding?

I changed the following lines:
Code:
 in sshd_config
X11Forwarding yes

Code:
in ssh_config
   ForwardAgent yes
   ForwardX11 yes
Back to top
View user's profile Send private message
swingkyd
Guru
Guru


Joined: 13 Jan 2005
Posts: 334

PostPosted: Tue Oct 24, 2006 4:34 pm    Post subject: possible attacks Reply with quote

okay...BAD stuff is happening!!!
Code:
Oct 24 07:21:13 [sshd] Invalid user liberty from 69.26.172.146
Oct 24 07:21:13 [sshd] reverse mapping checking getaddrinfo for unknown.xeex.net
 failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 24 07:21:14 [sshd] Invalid user alan from 69.26.172.146
Oct 24 07:21:14 [sshd] reverse mapping checking getaddrinfo for unknown.xeex.net
 failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 24 07:21:15 [sshd] Invalid user wilfe from 69.26.172.146
Oct 24 07:21:15 [sshd] reverse mapping checking getaddrinfo for unknown.xeex.net
 failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 24 07:21:16 [sshd] Invalid user ruthy from 69.26.172.146
Oct 24 07:21:16 [sshd] reverse mapping checking getaddrinfo for unknown.xeex.net
 failed - POSSIBLE BREAK-IN ATTEMPT!
Oct 24 07:21:18 [sshd] Invalid user oriana from 69.26.172.146
Oct 24 07:21:18 [sshd] reverse mapping checking getaddrinfo for unknown.xeex.net


What is going on? How can I stop this?
Back to top
View user's profile Send private message
swingkyd
Guru
Guru


Joined: 13 Jan 2005
Posts: 334

PostPosted: Tue Oct 24, 2006 5:51 pm    Post subject: Reply with quote

okay, these attempts seem to have stopped. However, the system still kicks me off SSH about 20 seconds after logging in.
I cannot think of why this would be happening. Any ideas?

Thanks.
Should I just turn the computer off until I get home and can try to play with it in person? what can I do to figure out what is going on? thanks.
Back to top
View user's profile Send private message
swingkyd
Guru
Guru


Joined: 13 Jan 2005
Posts: 334

PostPosted: Wed Oct 25, 2006 1:11 am    Post subject: Reply with quote

okay, it apears to be a router problem. I can ssh into my computer from within my router's domain 192.168.1.* and everything is stable.
BUT, if I ssh to the external IP address that is routed to my computer's ssh port 22, I get the flakey behaviour discussed above.
Any idea how to fix it? I just recently updated my router's firmware: it's a D-Link DI-524
Has anyone else had any trouble like this?
Back to top
View user's profile Send private message
joroy
n00b
n00b


Joined: 05 Dec 2003
Posts: 6

PostPosted: Thu Oct 26, 2006 6:36 pm    Post subject: Reply with quote

swingkyd wrote:
okay, it apears to be a router problem. I can ssh into my computer from within my router's domain 192.168.1.* and everything is stable.
BUT, if I ssh to the external IP address that is routed to my computer's ssh port 22, I get the flakey behaviour discussed above.
Any idea how to fix it? I just recently updated my router's firmware: it's a D-Link DI-524
Has anyone else had any trouble like this?


I have a similar problem since a few days.
I cannot say the problem is at every 20 secondes, but the connection is very unstable.

I always have the message "Read from remote host xxx.xxx.xxx: Connection reset by peer
Connection to xxx.xxx.xxx closed.

I have to wait a couple a minutes before I can reconnect to the server.

The problem appear since my last update so I suspect that one of these package have a problem

app-arch/cabextract-1.1
app-arch/gzip-1.3.5-r9
app-arch/mt-st-0.7-r1
app-arch/zip-2.31-r1
app-crypt/gnupg-1.4.5-r2
app-portage/portage-utils-0.1.20
app-shells/bash-3.1_p17
dev-java/blackdown-jre-1.4.2.03-r13
dev-java/java-config-1.3.7
dev-java/java-config-2.0.30
dev-java/java-config-wrapper-0.12-r1
dev-java/sun-jdk-1.5.0.08
dev-lang/python-2.4.3-r4
dev-libs/libtasn1-0.3.5
dev-libs/lzo-2.02-r1
dev-libs/nspr-4.6.3
dev-libs/nss-3.11.3
dev-libs/openssl-0.9.8d
dev-perl/HTML-Parser-3.55
dev-perl/HTML-Tree-3.21
dev-perl/IO-Socket-SSL-0.99.9
dev-perl/Net-DNS-0.58
dev-perl/Net-IP-1.25
dev-python/numpy-1.0_rc1
dev-util/subversion-1.3.2-r3
net-firewall/iptables-1.3.5-r4
net-ftp/proftpd-1.3.0-r2
net-libs/gnutls-1.4.4-r1
net-libs/libwww-5.4.0-r6
net-misc/neon-0.26.1-r1
net-misc/netkit-rsh-0.17-r7
net-misc/openssh-4.3_p2-r5
perl-core/digest-base-1.15
perl-core/Test-Simple-0.64
perl-core/Time-HiRes-1.90
sys-apps/baselayout-1.12.5-r2
sys-apps/busybox-1.2.1
sys-apps/coldplug-20040920-r1
sys-apps/eject-2.1.5
sys-apps/groff-1.19.2-r1
sys-apps/help2man-1.36.4
sys-apps/man-pages-2.39
sys-apps/portage-2.1.1-r1
sys-apps/sed-4.1.5
sys-devel/binutils-config-1.9-r2
sys-devel/bison-2.2
sys-devel/gcc-config-1.3.13-r4
sys-devel/gettext-0.15
sys-devel/gnuconfig-20060702
sys-devel/make-3.81
sys-libs/cracklib-2.8.9-r1
sys-libs/db-4.2.52_p4-r2
sys-libs/libutempter-1.1.4.1
sys-libs/ncurses-5.5-r3
sys-libs/timezone-data-2006n
virtual/jdk-1.5.0
virtual/jre-1.5.0
virtual/opengl-7.0
virtual/perl-digest-base-1.15
virtual/perl-Test-Simple-0.64
virtual/perl-Time-HiRes-1.90

If I solve the problem I let you know!
Back to top
View user's profile Send private message
swingkyd
Guru
Guru


Joined: 13 Jan 2005
Posts: 334

PostPosted: Thu Oct 26, 2006 7:08 pm    Post subject: Reply with quote

joroy,
From within my own network I can ssh into my machine without it happening. It only seems to be when I'm coming in from outside the network. That's why I assumed it was the router as I had recently updated to the 5.10 firmware for the DI-524.

There were some DoS problems with OpenSSH recently but I hope that is not the problem.
http://www.gentoo.org/security/en/glsa/glsa-200609-17.xml
Back to top
View user's profile Send private message
swingkyd
Guru
Guru


Joined: 13 Jan 2005
Posts: 334

PostPosted: Tue May 27, 2008 4:22 pm    Post subject: Reply with quote

I'm sorry for resurrecting this again...but I'm still having the same problem.
Any idea why my connection would be dropped every 20 seconds or so?
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum