freebsd stable - Mar 2005 - SSH hanging

I am installing PF (packet filter) with authpf on a Prerelease 5.4 and 
OpenSSh_3.8.1p1  

I added in

/etc/sysctl.com ---> net.inet.ip.forwarding=1 

/etc/shell  ---> /usr/sbin/authpf

/etc/pf.conf 

Int= "xl0"
Ext  = "sis0"

scrub in all

# filter
block drop all

pass out quick on $Ext proto tcp from $Int:network flags S/SA \
   modulate state
pass out quick on $Ext proto { udp, icmp } from $Int:network \
   keep state

pass in quick on $Intproto tcp from $Int:network to $Int\
   port ssh flags S/SA keep state

anchor "authpf/*" in on $Int



/etc/authpf/authpf.rules

Int = "xl0"
dns_servers = "{ 10.0.0.33, 66.11.168.194 }"

pass in quick on $Int proto udp from $user_ip to $dns_servers \
   port domain keep state
pass in quick on $Int proto tcp from $user_ip to port { ssh, http, \
   https } flags S/SA keep state



I am getting 

Hello didier, You are authenticated from host "10.0.0.33"

when I connect with ssh but it hangs ... I don't get the prompt

any help will be appreciated


Thanx

Didier



-- 
----------------------------------------------------------------------------
This electronic message contains information from Primus Telecommunications
Canada Inc. ("PRIMUS") , which may be legally privileged and
confidential.
The information is intended to be for the use of the individual(s) or entity
named above. If you are not the intended recipient, be aware that any
disclosure, copying, distribution or use of the contents of this information
is prohibited. If you have received this electronic message in error, please
notify us by telephone or e-mail (to the number or address above)
immediately. Any views, opinions or advice expressed in this electronic
message are not necessarily the views, opinions or advice of PRIMUS.
It is the responsibility of the recipient to ensure that
any attachments are virus free and PRIMUS bears no responsibility
for any loss or damage arising in any way from the use
thereof.The term "PRIMUS" includes its affiliates.
----------------------------------------------------------------------------
Pour la version en français de ce message, veuillez voir
 http://www.primustel.ca/fr/legal/cs.htm
----------------------------------------------------------------------------

On Sat, Mar 26, 2005 at 08:47:50PM -0500, Didier Rwitura
wrote:
> I am getting 
> 
> Hello didier, You are authenticated from host "10.0.0.33"
> 
> when I connect with ssh but it hangs ... I don't get the prompt
> 
> any help will be appreciated
Try running the ssh daemon in debug mode, and run the ssh clientin
debug mode; that will at least help you clue in as to what specific
stage it's hanging in.
> 
> 
> Thanx
> 
> Didier
> 
-- 
Brian Reichert				<reichert@numachi.com>
55 Crystal Ave. #286			Daytime number: (603) 434-6842
Derry NH 03038-1725 USA			BSD admin/developer at large

Sorry for replying late ...

On Saturday 26 March 2005 01:25, Didier Rwitura wrote:
> /etc/shell  ---> /usr/sbin/authpf
<...>
> I am getting
>
> Hello didier, You are authenticated from host "10.0.0.33"
>
> when I connect with ssh but it hangs ... I don't get the prompt
This is intentional.  authpf is not an interactive shell, it is simply for 
authentication purposes.  The codeportion in question:
|         while (1) {
|                 printf("\r\nHello %s, ", luser);
|                 printf("You are authenticated from host
\"%s\"\r\n", ipsrc);
|                 setproctitle("%s@%s", luser, ipsrc);
|                 print_message(PATH_MESSAGE);
|                 while (1) {
|                         sleep(10);
|                         if (want_death)
|                                 do_death(1);
|                 }
|         }


-- 
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url :
http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20050327/0f2a5df0/attachment.bin