Firewall Issues - ssh_dispatch_run_fatal errors during SSH

Just upgraded to Sequoia and noticed a lot of issues with the firewall while using ssh.


After ssh'ing into a local server on my network, after a few minutes I get this error:


Bad packet length 2489765067.

ssh_dispatch_run_fatal: Connection to 192.168.30.2 port 22: Connection corrupted


I can trigger it by ssh'ing into pretty much any server or computer on my network and then executing a command like:


ping google.com


within 10 - 30 seconds, the connection drops.


Happens with IPv4 and IPv6. Happens with Terminal and iTerm apps.


Disabling the firewall fixes the issue. In this case, my Mac is running statically in my local network and safely behind an upstream firewall. So, it's annoying to have to disable the firewall every time I have to ssh in anywhere, but not the end of the world. Obviously, that isn't a long term fix, however.


Anyone else seeing similar?

Mac Studio

Posted on Sep 17, 2024 6:35 PM

Reply
Question marked as Top-ranking reply

Posted on Oct 6, 2024 6:28 PM

Whilst this is true that Apple cannot fix the problem caused by others, however, this issue should not be ignored. MacOS 15.0.x borks TCP connections. See Little Snitch blog about Sequoia on TCP, Firewall issues https://obdev.at/blog/should-i-upgrade-to-macos-sequoia-now/


Disabling all third-party Network Filters will alleviate the issue temporarily (until, hopefully a fix on 15.1). macOS Firewall set to **block** all incoming connections (with the exception of some internal processes) works for me as well (you can set this to allow all and fine-tune the setting per third-party application).


As for VPN, well, I use Firefox connected to VPN via Windscribe and it works, so far so good. I have yet to run a VPN for all network connections, perhaps I will do this soon to test.


MacOS 15.0 is new, let's give Apple time to fix it -- also hoping that beta testers report this bug. As for us, let's continue filing bug reports, the more, the better, so Apple gets to prioritize it.


For the meantime, if you are from corporate IT, it is your responsibility to evaluate and certify new software before your users are allowed to download and install it. And if a user installs Sequoia, knowing that there is this bug AND if it is mission critical, then get them to revert back to macOS 14. :)


78 replies

Oct 30, 2024 12:01 AM in response to SamWantsYouToChill

Why would we try to ping router couple of times a day? This thread is about SSH dispatch run and things are solved with 10.1 as were with B7. I am ok for two weeks for instance.


It might not be a bad idea you start a new thread with the broader problem you are describing, but please accept this issue is fixed no matter if as side effect or as particular fix. I am convinced Apple has worked on it as there was difference between B6 and 7.


Sorry you have troubles but looks you are crying on bad shoulder.

Oct 30, 2024 12:16 AM in response to xpilotcz

xpilotcz wrote:

Why would we try to ping router couple of times a day?

Because there's a difference between fixing a symptom and fixing a problem entirely. If you don't want to ping your router, don't do it. It's alright. You're not required to do that. You can also unsubscribe from this thread. But you don't need to push others to be like you. A subset of the people here, no matter how small or big, are interested in fixing a problem. You're now becoming part of the problem, and wasting my time responding to you and explaining that you're not required to do anything. Please step aside if you're not interested in helping. No hard feelings. I don't understand why you needed to make your comment. Just move on with your life!

Oct 30, 2024 5:37 AM in response to mikeloiterman

Since I'm the original poster in this thread, I know quite well what the problem is, how to test if it's still there, and what kinds of things cause it to reoccur.


I don't understand why this give and take is even happening. You being the original poster of the issue does not give you any sort of authority. You're just some guy, like anyone of us, who noticed an issue and posted about it (and thank you for that, your efforts are highly appreciated). Sorry, buddy. Again, feel free to unsubscribe from this thread, and continue your wonderful life. I'm jealous you're this lucky, many are not. Now let's focus the discussion on more productive things.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Firewall Issues - ssh_dispatch_run_fatal errors during SSH

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.