LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 02-05-2016, 10:30 AM   #1
kabars_edge
Member
 
Registered: Apr 2006
Location: Silver Spring, MD
Distribution: Debian
Posts: 40

Rep: Reputation: 8
SSH quits responding from requests outside local subnet.


I've been beating my head against an issue for a while and cannot figure it out, so I'm hoping I can crowdsource an answer.

I have a server running Debian Wheezy (7.8). This machine responds to SSH without issue from other machines internally and externally when brought up. However, after a period of time, somewhere between 15 and 90 minutes, it just quits responding to SSH requests from outside the subnet. All I have to do to make it reachable via SSH is to SSH from another server on the same subnet, then it starts responding to external requests again. This server is on a Comcast business cable connection using one of their Netgear business class routers. I've actually tried everything from changing IP addresses to ports, and the behavior continues with this machine only. I have 3 other Debian servers sitting on this connection and none of them display this behavior.

Any thoughts, ideas, suggestions would be greatly appreciated.

/etc/network/interfaces

Code:
# The primary network interface
allow-hotplug eth0
iface eth0 inet static
	address 10.1.10.11
	netmask 255.255.255.0
	network 10.1.10.0
	broadcast 10.1.10.255
	gateway 10.1.10.1
	# dns-* options are implemented by the resolvconf package, if installed
	dns-nameservers 10.1.10.1
/sbin/ifconfig

Code:
eth0      Link encap:Ethernet  HWaddr 00:e0:81:bc:87:b8  
          inet addr:10.1.10.11  Bcast:10.1.10.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:82401 errors:0 dropped:0 overruns:0 frame:0
          TX packets:20122 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:57270807 (54.6 MiB)  TX bytes:1909057 (1.8 MiB)
          Interrupt:46 Base address:0x6000
 
Old 02-05-2016, 12:58 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
Some things I'm missing here from your end point:
- what does "All I have to do to make it reachable via SSH is to SSH from another server on the same subnet" mean? What do you actually do?
- checking /var/log/messages and /var/log/secure or equivalent for clues,
- listing cron jobs,
- listing any defensive measures like fail2ban,
- ssh daemon in debug mode to see debug output,
- ssh daemon on another port to see if its port-specific,
- remote tcptraceroute to end point TCP/22 to see where the trace stops,
- firewall "-j LOG" rules to verify access.
 
Old 02-05-2016, 03:34 PM   #3
kabars_edge
Member
 
Registered: Apr 2006
Location: Silver Spring, MD
Distribution: Debian
Posts: 40

Original Poster
Rep: Reputation: 8
Quote:
Some things I'm missing here from your end point:
- what does "All I have to do to make it reachable via SSH is to SSH from another server on the same subnet" mean? What do you actually do?
I literally just SSH into the misbehaving box from any other machine on it's local subnet, as soon as I create an SSH connection, it starts working from external IP addresses, I don't even have to authenticate.

Quote:
- checking /var/log/messages and /var/log/secure or equivalent for clues,
No entries whatsoever related. I can be running a tail on the auth.log, messages, user.log, and syslog and see nothing until I log in from the local subnet. This makes me think it may be a networking problem with the Comcast router.

Quote:
- listing cron jobs,
No cron jobs.

Quote:
- listing any defensive measures like fail2ban,
None currently. I even uninstalled IPTables to be sure.

Quote:
- ssh daemon in debug mode to see debug output,
This I did, I see nothing until I connect from within the subnet, which then causes it to work perfectly.

Quote:
- ssh daemon on another port to see if its port-specific,
I've tried different ports/IPs as I said in my original post.

Quote:
- remote tcptraceroute to end point TCP/22 to see where the trace stops,
Good idea, I had not thought of TCPtraceroute, will perform and report back.

Quote:
- firewall "-j LOG" rules to verify access.
I removed all firewall/security early in the process to ensure that wasn't what was causing the problem.

Thanks for the thoughts. Next time I run into the problem, I will try the TCPtraceroute and post the results here. Unfortunately, I have to leave my home and makeshift data center to make this happen.

Last edited by kabars_edge; 02-05-2016 at 03:35 PM. Reason: Bad syntax on quote.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
BIND randomly stopped responding to IPv6 link-local requests psycroptic Linux - Server 0 09-29-2014 05:45 PM
Apache stops responding to HTTP requests every few days GrdLock Linux - Server 3 12-29-2010 05:47 PM
[SOLVED] play on linux frontend quits responding then wants me to force quit linux/unix87 Linux - Newbie 1 10-29-2010 07:12 AM
How to Accept SMTP Requests for Subnet Only nytcrwlr70 Linux - Security 4 07-07-2007 01:21 AM
CUPS not responding to que requests simbolo Linux - Software 5 03-19-2004 03:22 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 02:20 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration