SSH reverse lookup

[slavkom]

Sep 7 22:04:29 localhost xinetd[432]: START: ssh pid=3089 from=192.168.0.5
Sep 7 22:04:30 localhost sshd[3089]: reverse mapping checking getaddrinfo for morbius.home.lan failed – POSSIBLE BREAKIN ATTEMPT!
Sep 7 22:04:30 localhost sshd[3089]: Accepted password for mslavko from 192.168.0.5 port 49874 ssh2

This reverse mapping check always fails on my internal LAN. My DNS is working for everything else and I am able to connect. I was just wondering why this happens and how I can fix it…

Mike

[slavkom]

You can pretty safely ignore this, but if you want to make it go away…

edit /etc/xinetd.d/ssh and remove the “IPv6” flag. that’s in that file.

I do believe that this will prevent IPv6 ssh logins, but if you were using those I don’t think you’d get the errors.

That did the trick! I tend to get somewhat anal about logs One reason is someone has been pounding my server trying to log on via ftp & ssh for the last two weeks…so I’m in the process of tweaking my security settings.

Thanks…

[Author]

Posts