From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [IPv6:::1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4c8kST04Ztz2yxC for ; Sun, 24 Aug 2025 06:25:29 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R11" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4c8kSP3DVvz2xLt for ; Sun, 24 Aug 2025 06:25:25 +0000 (UTC) Received: from regulus.brecht-schule.hamburg (regulus.brecht-schule.hamburg [84.46.83.131]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange x25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "regulus.brecht-schule.hamburg", Issuer "R11" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4c8kSN2649z130 for ; Sun, 24 Aug 2025 06:25:24 +0000 (UTC) Authentication-Results: mail01.ipfire.org; dkim=pass header.d=brecht-schule.hamburg header.s=202101ed25519 header.b=GysbqEy6; dkim=pass header.d=brecht-schule.hamburg header.s=202101rsa header.b=UdBva8PB; dmarc=pass (policy=reject) header.from=brecht-schule.hamburg; spf=pass (mail01.ipfire.org: domain of dietzmann@brecht-schule.hamburg designates 84.46.83.131 as permitted sender) smtp.mailfrom=dietzmann@brecht-schule.hamburg ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=lists.ipfire.org; s=202003rsa; t=1756016724; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=f8UFPsINmKQsl6R1dYpat0M1p2sHnCGqhsyhFkS92AQ=; b=u/BKksBsvDzyUBJATahhcCFZY/SmiZtxjSmQk0QoC7EjqUvYD3BZexboZoPrI8Nu8e00We 8JL/oa3vqS48gyGBEoyeUCJZuhsTgS0w9A379tif829g4IdzAMCJc9KSEIG9xNQgX9aW15 KYGHN6bmbnS1fnPDThLUsG1lMcBxPX0nErVzBJ3GOByEcAlKdMLf5JAakLpdNTuYM/RynY IvPeZ2ENwQQ5cwI3rPhU9L0KC1SEeB77hGtkQzIuV3l4McPQ+gEaNr9H3uQ/RH9IYYOCJb ulQEIl0X0Xw1SH0Brh2pGmjQquYNmrsiZbUFN3dMUkQfX3FWmoCZ8Olb7Y6BwQ== ARC-Authentication-Results: i=1; mail01.ipfire.org; dkim=pass header.d=brecht-schule.hamburg header.s=202101ed25519 header.b=GysbqEy6; dkim=pass header.d=brecht-schule.hamburg header.s=202101rsa header.b=UdBva8PB; dmarc=pass (policy=reject) header.from=brecht-schule.hamburg; spf=pass (mail01.ipfire.org: domain of dietzmann@brecht-schule.hamburg designates 84.46.83.131 as permitted sender) smtp.mailfrom=dietzmann@brecht-schule.hamburg ARC-Seal: i=1; s=202003rsa; d=lists.ipfire.org; t=1756016724; a=rsa-sha256; cv=none; b=X55cnv7gd/F2zltwy7qnhlJG+8FVrUUnPWNKXuB3umnHoqbtHQMeAPKYK+nAP2D/qYqt9k u0ltwxbHddtLhLzMRGIzto1rYbY4jl1DDdWxiQZL0SQNo2i72CgaIsBCHvDD9k5bHEAw8h auyzfZZ1cEgBsyTeGMMpw2snvWM/5CKMPIMLmMg8dsNSklm4RxTUXhrZmiaMRqG2tezwHk 63s10yUP1iIjiG0Vb2CyuWg1JkgedbbAVSBloJzxkScK3uwgKFwZW4G4IMqYDCg+mGdq1k moS5rmG4iXdq7gEt3v4cGB0ekt1Wrt+CZlvvo3PlZ0I1qf6ch3FJbosHQPQcwg== Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by regulus.brecht-schule.hamburg (Postfix) with ESMTPSA id 4c8kSM1PZlzgYcM; Sun, 24 Aug 2025 08:25:23 +0200 (CEST) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=brecht-schule.hamburg; s=202101ed25519; t=1756016723; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=f8UFPsINmKQsl6R1dYpat0M1p2sHnCGqhsyhFkS92AQ=; b=GysbqEy6hAhIYPP76mbgovOfNJO3YuuA+hm2OQwzk1hkvVbX2LBh17H5Qwjnz4eqvVsLgN XuNR/o1Le8xg65Bg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=brecht-schule.hamburg; s=202101rsa; t=1756016723; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=f8UFPsINmKQsl6R1dYpat0M1p2sHnCGqhsyhFkS92AQ=; b=UdBva8PBGRywubBXy9OZx79jLeFChhVTK8sB3fuBW32ayWY55/0P1ZCIa48zg6rI1np5js wnp7gQ1BPSesDByz7iuzioTjjxmQtdF/DW62ANw+jxXqKhHR+9EPF76KWtZf245KajAyvp kpJWoW3tTH35KyxoU6Ll0t4MOrhA/SPZQRhQv8SEOTmCERMK375nux2HoXL889oz3EieCs xygmMDdEIfU87QMxFe2v7OIpI7rsXnT2UaZZEwellu3GV/qMWmsiwp3lMS0Am00a7oplzN khiTtRpcdFNbprkKSiUace044Mbgj59Z+zVh6WLgycoAa1SWa45liZMs5pfcBw== Message-ID: <6d9b9a50-4479-422f-a370-540a59fa6959@brecht-schule.hamburg> Date: Sun, 24 Aug 2025 08:25:22 +0200 Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: MIME-Version: 1.0 Content-Language: en-US To: development@lists.ipfire.org Cc: Peer Dietzmann From: Peer Dietzmann Subject: sshd kill all sessions on deamon stop Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Rspamd-Server: mail01.haj.ipfire.org X-Rspamd-Queue-Id: 4c8kSN2649z130 X-Rspamd-Action: no action X-Spamd-Result: default: False [-11.89 / 11.00]; BAYES_HAM(-3.00)[99.99%]; DWL_DNSWL_MED(-2.00)[brecht-schule.hamburg:dkim]; R_DKIM_ALLOW(-1.62)[brecht-schule.hamburg:s=202101ed25519,brecht-schule.hamburg:s=202101rsa]; IP_REPUTATION_HAM(-1.19)[asn: 15943(-0.34), country: DE(0.00), ip: 84.46.83.131(-0.85)]; NEURAL_HAM(-1.00)[-1.000]; SPF_REPUTATION_HAM(-0.88)[-0.88414576011953]; DKIM_REPUTATION(-0.88)[-0.88372114018591]; RCVD_DKIM_ARC_DNSWL_MED(-0.50)[]; DMARC_POLICY_ALLOW(-0.50)[brecht-schule.hamburg,reject]; RCVD_IN_DNSWL_MED(-0.20)[84.46.83.131:from]; R_SPF_ALLOW(-0.20)[+ip4:84.46.83.131]; ONCE_RECEIVED(0.20)[]; MIME_GOOD(-0.10)[text/plain]; MX_GOOD(-0.01)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_COUNT_ONE(0.00)[1]; FUZZY_RATELIMITED(0.00)[rspamd.com]; FROM_EQ_ENVFROM(0.00)[]; ARC_NA(0.00)[]; TO_DN_SOME(0.00)[]; MIME_TRACE(0.00)[0:+]; MID_RHS_MATCH_FROM(0.00)[]; RCPT_COUNT_TWO(0.00)[2]; RECEIVED_HELO_LOCALHOST(0.00)[]; RCVD_TLS_ALL(0.00)[]; DKIM_TRACE(0.00)[brecht-schule.hamburg:+]; MISSING_XM_UA(0.00)[]; ASN(0.00)[asn:15943, ipnet:84.46.0.0/17, country:DE]; RCVD_VIA_SMTP_AUTH(0.00)[]; ARC_SIGNED(0.00)[lists.ipfire.org:s=202003rsa:i=1]; FROM_HAS_DN(0.00)[] Hi All, I discovered, that while rebooting an IPFire instance via SSH my terminal keeps stuck after the broadcast message because IPFire isn't closing all active connection correctly. As it is annoying especially when using SSH in SSH connections because all connections have to be reopened manually, I thought of adding just one line to the init-script that closes all running sessions. Best regards, Peer diff --git a/src/initscripts/system/sshd b/src/initscripts/system/sshd index e5a9931af..e69904c61 100644 --- a/src/initscripts/system/sshd +++ b/src/initscripts/system/sshd @@ -50,6 +50,7 @@ case "$1" in      stop)          boot_mesg "Stopping SSH Server..."          killproc -p "/var/run/sshd.pid" /usr/sbin/sshd || true +        killall sshd-session          ;;      reload)