Re: [suse-security] long delays after ssh update?

Heya all,

I upgraded the ssh package on a SuSE 6.1 server this morning, and since then we're seeing long (like, 10 minutes or so) delays when some users try to connect.

In all cases things were working fine with the previous package - same client software's being used - and there were no such delays before.

My only guess is it might be some pause to do with ident attempts on people behind firewalls, but that's just a hunch.

That's correct.

Any suggestions for something I can do to stop this happening? It's really frustrating, but I obviously don't want to revert back to the older package.

Yes. But it's a hack. Insert a rule on the server that filters (actively rejects) outgoing connection attempts to the auth port. Like this: ipchains -I output -d 0/0 auth -p tcp -j REJECT Also, to keep delays down, have the ssh server use the closest DNS server there is.

Thanks, John.

Roman. -- - - | Roman Drahtmüller // "Caution: Cape does | SuSE GmbH - Security Phone: // not enable user to fly." | Nürnberg, Germany +49-911-740530 // (Batman Costume warning label) | - -