OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: [Security Discuss] trouble with sshd
From: Chris Henderson (christhe-hendersons.org)
Date: Tue Oct 10 2000 - 13:12:00 CDT


I think by default ssh wants you to have both a forward and a reverse dns
lookup to prevent dns spoofing when connecting. The following error message
from an earlier email seems to indicate this. He might want to try setting
up an internal zone map for dns on that server. Doesn't look like a PAM
problem to me.

"Oct 9 19:02:58 inside sshd[16570]: Could not reverse map address
192.168.0.10."

> > >If I'm not completely wrong, sshd checks that the incoming IP has a
> > >dns name and if not it will close the connection. Why it let's you
> > >log in at all, i don't know.
> >
> > So is there no way to use ssh if you're on a computer that has no dns
name?
>
> You should be able to use ssh on a machine without a dns name... ssh
> should use the IP address if it can't resolve a domain name AFAIK.