Weird SFTP problem

I recently setup a new SUSE box for the purposes of acting as an ftp/sftp server. It’s currently setup to run ProFTPD 1.3.3.rc3 and mod_sftp/0.9.7.

The server has two internal network interfaces eth0 and eth1. eth0 is purely for internal use to accept ftp and ssh. eth1 is outward facing and receives connections from the WAN via SFTP over port 22.

The problem I am facing is that after half hour to an hour eth1 stops accepting connections whenever there is no SSH connection present on eth0. I can’t figure out why this is happening.

ProFTPD is setup as follows:
SocketBindTight directive is on, default server and port are commented out.

<VirtualHost 10.0.132.101>
Port 21
</VirtualHost>

<VirtualHost 10.0.132.100>
<IfModule mod_sftp.c>
SFTPLog /var/log/proftpd-sftp.log
SFTPEngine on
SFTPHostKey /etc/ssh/ssh_host_rsa_key
SFTPHostKey /etc/ssh/ssh_host_dsa_key
</IfModule>
</VirtualHost>

When the external interface is unreachable the proftpd and proftpd-sftp logs show no record of any connection attempt. I have noticed however if I leave eth0 down eth1 stays contactable without problem. Can anyone give me some pointers on what I can check to find out why this may be happening.

If you have sshd running have you disabled ssh or moved the port somewhere else for eth1? Because both attempt to listen on port 22 if neither is modified.

Brief sshd_config dump:

#Port 22
#Protocol 2,1
Protocol 2
#AddressFamily any
ListenAddress 10.0.132.101
#ListenAddress 10.0.132.100

I’m hoping that’s enough to prevent it glomming onto the eth1 interface. So in theory… yes

One thing to note. When it’s working the output of route -n is:

Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.0.132.0 0.0.0.0 255.255.254.0 U 0 0 0 eth1
10.0.132.0 0.0.0.0 255.255.254.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
10.0.0.0 10.0.132.1 255.0.0.0 UG 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 10.0.132.1 0.0.0.0 UG 0 0 0 eth0

When it’s broken it becomes:

Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.0.132.0 0.0.0.0 255.255.254.0 U 0 0 0 eth0
10.0.132.0 0.0.0.0 255.255.254.0 U 0 0 0 eth1
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
10.0.0.0 10.0.132.1 255.0.0.0 UG 0 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
0.0.0.0 10.0.132.1 0.0.0.0 UG 0 0 0 eth1

Any ideas why this would be changing?