PDA

View Full Version : SSHD Oh yea another question or possible an answer


soup4you2
April 30th, 2003, 18:48
ok i'm sure we all have either experienced or heard about the ssh slow as snot login problems.. well i've finally been able to track it down.. (seems i dont like waiting 5 min for a password prompt)

if you have a sysctl value of

net.inet.tcp.blackhole=2

it makes it really slow./. why is this and what can be done w/ out loosing the blackhole?

elmore
May 1st, 2003, 16:29
I've never had that problem on my boxes that have the blackhole sysctl variables set.

|MiNi0n|
May 1st, 2003, 16:50
The usual reason for the delayed password prompt is DNS.

soup4you2
May 1st, 2003, 17:08
The usual reason for the delayed password prompt is DNS.

nope not DNS if i'm on my other pc and i ssh in to the direct ip (both internal or external) it still delays. it does it w/ the UDP blackhole also

Strog
May 1st, 2003, 17:09
I used to use one of those floppy based firewalls and you had add your machine to the hosts file or it would just sit there for the longest time.

|MiNi0n|
May 1st, 2003, 17:20
nope not DNS if i'm on my other pc and i ssh in to the direct ip (both internal or external) it still delays. it does it w/ the UDP blackhole also

Yup, DNS. It's like strog suggests, if the host you're connecting to can't properly do a reverse lookup on you it'll stall til it times out and then finally give you the password prompt. Whether or not this is what's happening to you I dunno... I was merely suggesting that the above is the most common reason for the delay.

Strog
May 1st, 2003, 17:47
I was connecting via IP on that setup.

soup4you2
May 1st, 2003, 18:15
tried it w/ out the entry in hosts.. thought it might have gotten fucky if in the ipf rules i have it going to the hostname in my hosts file (restricting the flow) but that wasnt it.

:( pooh...