Operating System - HP-UX
1832803 Members
3537 Online
110045 Solutions
New Discussion

Re: Session Killed by Firewall

 
David Alejo
Occasional Advisor

Session Killed by Firewall

Good morning,

I have a problem with a firewall. I'm executing a ksh script through a remote session but we have got a Firewall. This firewall kills any sessions whom is 7000 seconds inactive. The problem is I execute this script but it delays more than 7000.

Anyone knows how I can keep my session alive?, If I execute a echo, It could run?

Thanks a lot.

David.
7 REPLIES 7
U.SivaKumar_2
Honored Contributor

Re: Session Killed by Firewall

hi,
Using echo is a right solution. Is it possible to run your script in background ?.

regards,
U.SivaKumar
Innovations are made when conventions are broken
Stefan Farrelly
Honored Contributor

Re: Session Killed by Firewall


You could use echo, or a ping, or run the script on the remote server using nohup so even if the firewall kills your session the script will continue to run.
Im from Palmerston North, New Zealand, but somehow ended up in London...
Bill Hassell
Honored Contributor

Re: Session Killed by Firewall

Is the firewall killing any session more than 7000 seconds? You can verify this by running a simple script that logs into a remote machine and pings back to your servers every frew seconds. Repeat until more than 7000 seconds elapse. If that works, then you can start a background process in you script to perform the pings, run your normal session and when that session is done, kill the background process.


Bill Hassell, sysadmin
Steven Sim Kok Leong
Honored Contributor

Re: Session Killed by Firewall

Hi,

Yes, echo statements in your script will work just fine to prevent the idle timeout. This works because the echo output is transmitted across the network through the firewall from your HP-UX server to your client PC where it is displayed.

As a result, your session is never idle as long as the period between echo statements is < 7000 secs.

Hope this helps. Regards.

Steven Sim Kok Leong
David Alejo
Occasional Advisor

Re: Session Killed by Firewall

I prefer don't execute my scripts in Background, if I execute a Echo or a ping I can avoid the firewall existent in the server side but I don't know if I can avoid the firewall whom is working in my side (the server is in other city).
U.SivaKumar_2
Honored Contributor

Re: Session Killed by Firewall

hi,
Have you tried using rlogin and executing the script ?. Any difference ?.
Also try remsh also.

regards,
U.SivaKumar
Innovations are made when conventions are broken
Steven Sim Kok Leong
Honored Contributor

Re: Session Killed by Firewall

Hi,

It is important to know the difference between "session connection time exceeded" and "idle timeout".

For "session connection time exceeded", the firewall will cut off your connection regardless of whether your connection is idling or not. It limits the total duration of a session.

For "idle timeout", if both the firewalls are implementing "idle timeout", then your session should NOT be cut off as long as the period between your echo statements are less than the "idle timeout" durations implemented on both the firewalls and also less than the tcp_keepalive_interval configured on the HP-UX server.

Hope this helps. Regards.

Steven Sim Kok Leong