Hi,

I am facing ssh connection issue to our remote servers over VPN. Connection getting timout after few hours with following message

Read from remote host x.x.x.x: Connection reset by peer
Connection to x.x.x.x closed.

When connected from putty error message reads with popup

Putty Fatal error
Network Error:Software caused connection abort.

Did many configuration check on TCP keealive (both on source and target machine,

set 'Enable TCP Keepalive' in Putty, 'seconds between keepalives' set to different values.

Added entry in /etc/ssh/sshd_configuration as
ClientAliveInterval 300 on remote server.

Set in /etc/ssh/ssh_config as TCPKeepAlive yes on the machine from where remote machine is connected.

But no luck. Any guess why this is happening??

Nothing is blocking on at firewall and no rule is set like connection should be dropped after certain idle time.

The only way I found to keep connections alive reliably was to set up tunnels with 'autossh' (it will restart connections if necessary). Since you use PuTTY you're using ClippyOS. Maybe it can be compiled under Cygwin but I don't know that, or maybe you could install it on an adjacent GNU/Linux box and use that for connecting to remote systems.

i have putty keep sessions open for days at a time with the keepalive on. make sure that you're on the newest version, which had a few tweaks, but also load up wireshark and actually watch the keepalive packets hitting the machine, or their lack of.

i have putty keep sessions open for days at a time with the keepalive on.
Sure, but where those on flakey connections?

where did a dodgy connection come into the equation?

where did a dodgy connection come into the equation?
Because that's all I can think of causing it if you already fiddled with all the keepalive controls?

Thanks for the reply. I am using latest putty version elease 0.60.
Can run ethereal on machine from where ssh connection is made to remote servers and it's showing keepalive packets flooding. But I can't run etheral on remote server. Do you think that something is blocking at remote site??

if you can log in at all then there should be no possible way to block keepalives unless their lack of payload or somethign is observed by a firewall or such, which as a rule of thumb i would really doubt.