Re: SSH hanging

You can try traceroute with a large packet size.

But, if you keep your MTU small, it will degrade your performance for
all other connections.

Just use this:
iptables --table filter -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
iptables --table filter -A INPUT -p icmp --icmp-type echo-reply -j ACCEPT
iptables --table filter -A INPUT -p icmp --icmp-type
destination-unreachable -j ACCEPT
iptables --table filter -A INPUT -p icmp --icmp-type source-quench -j ACCEPT
iptables --table filter -A INPUT -p icmp --icmp-type
ttl-zero-during-transit -j ACCEPT

The only real optional ones are echo-request and echo-reply.  All the
rest is required for
proper TCP/UDP controls/responses.

On Mon, 20 Sep 2004 06:22:18 -0700 (PDT), Johnson Jeba Asir
<squidjohnson@yahoo.com> wrote:
> Helo all,
>
>           Sorry for the very late reply. After setting
> the MTU to 1350, the connection was fine for a couple
> of days. So far i'm allowing ICMP ports 0,8 alone.
> Since this issue is very important, i've changed my
> entier settup. Once the things are fine then, I'll
> update my firewall with ICMP request handling and
> revert it back. Now I need a way to find out which
> link is having lesser MTU problem. Is there is any way
> to find it out?
>
> TIA
> John

-- 
END OF LINE
       -MCP