[PATCH]: Heartbeat/Watchdog Patch

[mouring at etoh.eviladmin.org]

On Mon, 9 Apr 2001, Hideaki Goto wrote:

> Dear Developers,
>
> I've released a patch against openssh-2.5.2p2.
> The patch adds heartbeat (keepalive) function to ssh(1),
> and watchdog timeout function to sshd(8). The watchdog
> timeout is intended to terminate user's processes
> as soon as possible after the link has been lost.
>
>   http://www.ecip.tohoku.ac.jp/~hgot/sources/openssh-watchdog.html
>
> The combination of the heartbeat and the watchdog timeout
> is very useful for detecting link down over unreliable
> connections, especially Wireless Networks.
> We are using this patch in our wireless gateway.
>
You use SSH_MSG_IGNORE.  A lot of F-Secure clients will ignore the
the message:

[..snip from compat.c]
                { "^1\\.2\\.1[89]",     SSH_BUG_IGNOREMSG },
                { "^1\\.2\\.2[012]",    SSH_BUG_IGNOREMSG },
                { "^1\\.3\\.2",         SSH_BUG_IGNOREMSG },    /* f-secure */
[..]

You need to work around theses clients.

- Ben