> In the case of OpenSSH, the support has existed for over two and half
> years.  See revision 1.77 of ssh/servconf.c[0].

I'm not talking about the tcp keepalive option. I greped through the
whole source of an approx May 03 vanilla release, and it did not find
those new(!) keepalive options anywhere (those options which make ssh
or sshd shove some null bytes over the encrypted channel).

> Well, if we're talking about OpenSSH, you'd be crazy to be running any
> version prior to the existence of the privilege separation
> functionality, which came a good deal of time after the
> ClientAliveInterval support was added.

You missed the point that the last openssh version $vendor has
published for their $distro may be an older one, but it sure does
contain all security fixes of the last version. Vendors are not that
stupid.

Volker

-- 
Volker Kuhlmann                 is possibly list0570 with the domain in header
http://volker.dnsalias.net/             Please do not CC list postings to me.

Reply via email to