<div dir="ltr">Please follow these steps:<br><br>1. I will highly suggest to launch wireshark when you try to ssh. If you see a RST, I won't be surprised at all. You may see a RST that comes from your ip. Don't be surprised. <br>
<br>2. You must understand the following thing: they have clients rank A and clients rank D. from the farm it is possible to ssh (client rank A). from work/home directly you are client rank D. Take in consideration that you ssh to usa. you waste their bandwidth. <br>
<br>3. try to ssh to the usa server from other server that doesn't use 012. <br><br>4. try to ssh to a server in israel and compare. <br><br>5. Try to run the following command tcptraceroute -v <the ip you want> 22 and see where it gets stuck (timing). <br>
<br>6. I smell a Deep Packet Inspection. I will be very happy to be proved wrong. <br><br><br><div class="gmail_quote">On Tue, Apr 28, 2009 at 12:37 PM, Rami Addady <span dir="ltr"><<a href="mailto:rami@active.co.il">rami@active.co.il</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi,<div class="im"><br>
<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Can you provide the server logs? (The connected site)<br>
</blockquote>
<br></div>
There are no new entry in /var/log/secure<div class="im"><br>
<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
ou can also try and run it with '-v' to add verbosity there too.<br>
</blockquote>
<br>
<br></div>
The -v output can be found in my first post<br>
<br>
<br>
Thank,<br>
<br>
<br>
Rami<br>
<br>
<br>
<br>
Noam Meltzer wrote:<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="im">
Can you provide the server logs? (The connected site)<br>
It can easily shed light on the subject.<br>
On RHEL the log file in interest is /var/log/secure.<br>
<br>
- Noam<br>
<br></div><div><div></div><div class="h5">
On Tue, Apr 28, 2009 at 11:10 AM, Rami Addady <<a href="mailto:rami@active.co.il" target="_blank">rami@active.co.il</a> <mailto:<a href="mailto:rami@active.co.il" target="_blank">rami@active.co.il</a>>> wrote:<br>
<br>
Hi,<br>
<br>
<br>
I have weird problem , staring this morning I can't ssh to a<br>
server in US, from some computers that connect to the Internet<br>
using 012 cabels.<br>
<br>
But if I'm ssh to server in 012 farm and then from it to the US<br>
server is work fine!<br>
<br>
I called 012 technical support but they didn't help me.<br>
<br>
<br>
It's not a FW issue because the ssh session start.<br>
<br>
When I try to ssh it start and after some time fail , here is<br>
debug session.<br>
<br>
<br>
ssh -v -l user 111.111.111.111<br>
<br>
<br>
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003<br>
<br>
debug1: Reading configuration data /etc/ssh/ssh_config<br>
debug1: Applying options for *<br>
debug1: Connecting to ... port 22.<br>
debug1: Connection established.<br>
debug1: identity file /home/user/.ssh/identity type -1<br>
debug1: identity file /home/user/.ssh/id_rsa type -1<br>
debug1: identity file /home/user/.ssh/id_dsa type -1<br>
debug1: Remote protocol version 2.0, remote software version<br>
OpenSSH_4.3<br>
debug1: match: OpenSSH_4.3 pat OpenSSH*<br>
debug1: Enabling compatibility mode for protocol 2.0<br>
debug1: Local version string SSH-2.0-OpenSSH_3.9p1<br>
debug1: SSH2_MSG_KEXINIT sent<br>
debug1: SSH2_MSG_KEXINIT received<br>
debug1: kex: server->client aes128-cbc hmac-md5 none<br>
debug1: kex: client->server aes128-cbc hmac-md5 none<br>
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent<br>
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP<br>
<br>
... after few minutes...<br>
<br>
Connection closed by 111.111.111.111<br>
<br>
<br>
Any idea what wrong<br>
<br>
<br>
Rami<br>
<br>
<br>
<br>
_______________________________________________<br>
Linux-il mailing list<br></div></div>
<a href="mailto:Linux-il@cs.huji.ac.il" target="_blank">Linux-il@cs.huji.ac.il</a> <mailto:<a href="mailto:Linux-il@cs.huji.ac.il" target="_blank">Linux-il@cs.huji.ac.il</a>><div class="im"><br>
<a href="http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il" target="_blank">http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il</a><br>
<br>
<br>
</div></blockquote><div><div></div><div class="h5">
<br>
_______________________________________________<br>
Linux-il mailing list<br>
<a href="mailto:Linux-il@cs.huji.ac.il" target="_blank">Linux-il@cs.huji.ac.il</a><br>
<a href="http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il" target="_blank">http://mailman.cs.huji.ac.il/mailman/listinfo/linux-il</a><br>
</div></div></blockquote></div><br></div>