Re: [gentoo-server] SSH, updates and serial port switches

[Ben Munat]

You can also restart ssh from webmin... had to do that on at least one 
occasion.

b



Joey wrote:
> John Barton wrote:
>
>>
>>>
>>> I don't think that will work in this case. The master SSH daemon
>>> doesn't die. It is the new ones that are launched when a connection
>>> is made that are looking for  old libraries that causes the problem,
>>> AFAIK.
>>>
>> monit has the ability to "speak" certain protocols, ssh being one of
>> them, so it might still help. If a successful connection is never
>> made, then monit should be able to tell and restart the dameon anyway.
>> It has a lot more functionality then just checking to make sure a port
>> is open or the master process is running...
>
>
> John Barton wrote:
>
>>
>>>
>>> I don't think that will work in this case. The master SSH daemon
>>> doesn't die. It is the new ones that are launched when a connection
>>> is made that are looking for  old libraries that causes the problem,
>>> AFAIK.
>>>
>> monit has the ability to "speak" certain protocols, ssh being one of
>> them, so it might still help. If a successful connection is never
>> made, then monit should be able to tell and restart the dameon anyway.
>> It has a lot more functionality then just checking to make sure a port
>> is open or the master process is running...
>
>
> I too occasionally experience losing ssh connection, so I was wondering
> if anybody have tried this idea;
> keeping a separate copy of statically compiled SSHd  activated by
> portknock?
> The purpose is to have a backup ssh that will work even if  updates
> causes the main ssh to
> malfunction.
>
> The problem with using utilities  to auto-restart crashing daemon  is
> that in case the crash was
> caused by a miss in an attempted attack or exploit, the cracker gets
> unlimited retries.
> Besides auto-restart won't help if the problem is with the library.
>
> -Joey
>