Linux

Ask something
Discussion Locked

frozen and kicked out

0 helpful
4 replies

by flyingknees 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Would anyone know why a remote user (coming from across the Internet) would lock up during a telnet/ssh session to a UNIX system and get kicked out? Is that something that is the fault of the UNIX system itself or would be a network connectivity problem? Is it a problem with my firewall dropping connections? I am running Checkpoint FW-1 NG. How can I pinpoint what the exact issue is?

4 replies

by nico baggus

To what extent is the remote IP address fixed...,
I've seen this with some customers who had ADSL
and their IP address was randomly reassigned
between 2 and 8 hours.
Other than freezing and getting kicked out
nothing was noted and after a reconnect they
could work again....
In this case there was no big disruption because
the protocol used allowed reconnect to a session
from a different address (Windows Terminal
Server)

Kind regards,
Nico Baggus

by nico baggus

Remote equipment might be a problem. IT was not
stated that is was after a ling idle time,
therefore I assumed that it was during a live
session. If NAT is involved then a pause for
20-60 minutes might also invoke a freeze
some intermediary device might drop all
information.
The time is depending on the NAT device involved.

Regards,
Nico Baggus

by cpfeiffe

I am not a firewall expert but I did support Solaris servers that TCOMM ran checkpoint on and this was a problem on two different occassions. Once was NAT related (strangely enough they would get connected through NAT, but then get kicked out almost instantly). The second time this was an issue there was a timeout somewhere in the firewall config. You might start looking at the CheckPoint docs or web site.

by flyingknees

sorry didn't clarify, the remote users are not part of my network here. My network is behind a Checkpoint firewall. They are using DSL to access here.
Seems localized now and I'm starting to suspect their Linksys router.

This discussion is closed to new replies.