Re: IP Lease



Tom Linden wrote:
This is somewhat OT.

From home I use PuTTY SSH on an XP laptop through a wireless router attached to
Comcast cable to access the VMS cluster. If I go to another window for a while
and return to the VMS session the connection gets closed, so I tried opening
another window and ran a script which just loops endlessly
$ start:
$ sho time
$ wait 00:01
$ goto start

but it only keeps that window alive, so I guess that the two sessions have
different IPs. Don't suppose there is any way of doing this?


Not much to go on here, but this looks more like a keepalive setting somewhere, or some sort of a terminal or session timeout with a firewall or with your OpenVMS cluster. (And some OpenVMS boxes around do still run terminal timeout programs; idle-process killers, etc.)

Sessions do not typically have IP addresses. Your cable modem likely has an IP address, and probably one assigned by DHCP from your ISP here assuming you do not have static address(es) assigned by your ISP. Your laptop likely also has an IP address -- probably a private Class C address assigned from your cable model, or from your firewall, via DHCP.

The target OpenVMS box also likely has a static address. (Yes, you can use dynamic DNS...)

An ISP is unlikely to overtly blow off sessions, but it's certainly feasible for a host system or a firewall knock them off. (That written, there are reports and examples of ISPs implementing all manner of bizarre things.)

IP leases are also automatically renewed, and any self-respecting and functional DHCP client will know how and when to renew an IP lease. On Microsoft Windows, ipconfig/all will display the IP address and the lease and other details, IIRC.

Check whatever logs you have access to on your firewall, and on the target system and its firewall.

Do look to establish a VPN over the connection. Locally, I tunnel everything over Mac OS X SSH (http://64.223.189.234/node/134), when I'm up to this sort of connectivity. Various ssh clients have an option for TCPKeepAlive, for instance. Donno about PuTTY. There are also firewalls that can support VPNs, basically bridging your laptop or potentially your local network into the target network.

You will also want to look at trying something other than Windows itsef, as Windows has been known to blow off idle connections all by itself. We chased one example with FTP sessions getting nuked by a Windows timer some time ago. Try the connection with a Linux or Mac OS X or OpenVMS box as the client, for instance.

Also see http://64.223.189.234/node/275 for an introduction to operating OpenVMS within IP networks and particularly with firewalls.

--
www.HoffmanLabs.com
Services for OpenVMS
.



Relevant Pages

  • Re: Guide to secure installtion of IIS 5
    ... don't forget a well-configured firewall. ... Do not put the computer onto the network or the Internet until after the ... Follow the instructions for hardening Windows and IIS at ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.inetserver.iis.security)
  • Re: Is secedit.exe left by a hacker?
    ... > tested on port 445. ... > I have a Linksys router that I use as a firewall to my ... Secedit.exe is the name of a legitimate Windows file, ... investigate the files on your computer - antivirus with the latest updates ...
    (microsoft.public.win2000.security)
  • Re: Is secedit.exe left by a hacker?
    ... >> tested on port 445. ... >> I have a Linksys router that I use as a firewall to my ... >investigate the files on your computer - antivirus with ... >windows and everything else. ...
    (microsoft.public.win2000.security)
  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: password protection
    ... and cable] and should really consider Windows 2000 / XP. ... sure you're also running antivirus and firewall, ... Internet] to bypass this security. ...
    (microsoft.public.security)