← Back to branch summary

~vcs-imports/ipfire/ipfire-2.x

« back to all changes in this revision

Viewing changes to lfs/stress

  • Committer: Peter Müller
  • Date: 2022-04-23 14:27:56 UTC
  • mto: This revision was merged to the branch mainline in revision 9750.
  • Revision ID: git-v1:7a981d94cb2c3e48ecaf07c506c8353a2c839d79
SSH: do not send spoofable TCP keep alive messages

By default, both SSH server and client rely on TCP-based keep alive
messages to detect broken sessions, which can be spoofed rather easily
in order to keep a broken session opened (and vice versa).

Since we rely on SSH-based keep alive messages, which are not vulnerable
to this kind of tampering, there is no need to double-check connections
via TCP keep alive as well.

This patch thereof disables using TCP keep alive for both SSH client and
server scenario. For usability reasons, a timeout of 5 minutes (10
seconds * 30 keep alive messages = 300 seconds) will be used for both
client and server configuration, as 60 seconds were found to be too
short for unstable connectivity scenarios.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>

Show diffs side-by-side

added added

removed removed

Lines of Context:
lfs/stress
1
1
###############################################################################
2
 
#                                                                             #
3
 
# IPFire.org - A linux based firewall                                         #
4
 
# Copyright (C) 2007-2023  IPFire Team  <info@ipfire.org>                     #
5
 
#                                                                             #
6
 
# This program is free software: you can redistribute it and/or modify        #
7
 
# it under the terms of the GNU General Public License as published by        #
8
 
# the Free Software Foundation, either version 3 of the License, or           #
9
 
# (at your option) any later version.                                         #
10
 
#                                                                             #
11
 
# This program is distributed in the hope that it will be useful,             #
12
 
# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
13
 
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
14
 
# GNU General Public License for more details.                                #
15
 
#                                                                             #
16
 
# You should have received a copy of the GNU General Public License           #
17
 
# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
18
 
#                                                                             #
 
2
# IPFire.org    - An Open Source Firewall Solution                            #
 
3
# Copyright (C) 2007-2018  IPFire Team  <info@ipfire.org>                     #
19
4
###############################################################################
20
5
 
21
6
###############################################################################
26
11
 
27
12
SUMMARY    = Tool to load and stress a computer
28
13
 
29
 
VER        = 1.0.7
 
14
VER        = 1.0.4
30
15
 
31
16
THISAPP    = stress-$(VER)
32
 
DL_FILE    = $(THISAPP).tar.bz2
 
17
DL_FILE    = $(THISAPP).tar.gz
33
18
DL_FROM    = $(URL_IPFIRE)
34
19
DIR_APP    = $(DIR_SRC)/$(THISAPP)
35
20
TARGET     = $(DIR_INFO)/$(THISAPP)
36
21
PROG       = stress
37
 
PAK_VER    = 3
 
22
PAK_VER    = 1
38
23
 
39
24
DEPS       =
40
25
 
48
33
 
49
34
$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
50
35
 
51
 
$(DL_FILE)_BLAKE2 = c425134be47715ea5d50c56eea20f211f79feecccc73823f38c3a0f3fc1ee612ee6b6fcd07045f888ce6f1cb762a7ae42fe9003b91fe43451eabae17d918bdfc
 
36
$(DL_FILE)_BLAKE2 = dcda33bec9b2228e93b6e9e33fc6238554b04036bd7478df6580f54557d639ab4a28fb820766f386e7d3d6338452dae7ee4b649554df2313bea80dfbb23653cf
52
37
 
53
38
install : $(TARGET)
54
39
 
80
65
 
81
66
$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
82
67
        @$(PREBUILD)
83
 
        @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE)
84
 
        cd $(DIR_APP) && ./autogen.sh
 
68
        @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
85
69
        cd $(DIR_APP) && ./configure --prefix=/usr
86
70
        cd $(DIR_APP) && make $(MAKETUNING)
87
71
        cd $(DIR_APP) && make install