[22.1.1_3] - ssh/scp Problems

[R1mSG]

Hey,

we have three firewalls here that are connected to each other with a VLAN. Each firewall has a MultiWAN configuration. One firewall is the main firewall. The two secondary firewalls have as default gateway the VLAN to the "master" firewall and as fallback connection a normal internet connection via a FritzBox.

Since the update to 22.1.1_3 we have problems with ssh connections to this two firewalls. But if we use the main firewall as jumphost, this problems does not exist.

These problems look like this:
When trying to download a file via scp (over the FritzBox WAN) from the "two" firewalls, the download stops in the middle. But uploading files to the firewall via scp works.
Likewise, if you connect via SSH and want to output a larger file with cat/tail, the connection breaks. Open via vim/less or even tcpdump output works without aborts.

Outputs of ssh/scp:
SCP:
   YYY:~# scp root@XXX:/conf/config.xml .
   config.xml                                                                                     
                                                                                   
   0%    0     0.0KB/s   --:-- ETAConnection to XXX closed by remote
   host. lost connection
   
SCP -vvv:
   debug3: send packet: type 1
   debug1: channel 0: free: client-session, nchannels 1
   debug3: channel 0: status: The following connections are open:
     #0 client-session (t4 r0 i0/0 o0/0 fd 4/5 cc -1)

   debug1: fd 0 clearing O_NONBLOCK
   debug1: fd 1 clearing O_NONBLOCK
   Connection to XXX closed by remote host.
   Transferred: sent 2844, received 19476 bytes, in 0.2 seconds
   Bytes per second: sent 11404.7, received 78100.9
   debug1: Exit status -1

SSH -vvv:
   debug1: channel 0: free: client-session, nchannels 1
   debug3: channel 0: status: The following connections are open:
     #0 client-session (t4 r0 i0/0 o0/0 fd 4/5 cc -1)

   Connection to XXX closed by remote host.
   Connection to XXX closed.
   Transferred: sent 3492, received 13244 bytes, in 6.7 seconds
   Bytes per second: sent 519.7, received 1971.0
   debug1: Exit status -1
   

We dont know if this could be a Problem with our MultiWAN configuration or anything else.

Is this problem known, or does anyone know something similar and can help us out here?


---

Hardware:
OPNsense 22.1.1_3-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1m 14 Dec 2021