[Wylug-help] ssh help

[Philip Wyett]

On Fri, 2009-01-16 at 14:09 +0000, Roger wrote:
> Hi,
> 
> I use Putty to log into my server (upstairs) from my laptop 
> (downstairs).  That works fine, but Logwatch keeps reporting:
> ------------------------------------------------------------------
> Address IP maps to HOST, but this does not map back to the address - 
> POSSIBLE BREAK-IN ATTEMPT!
> ------------------------------------------------------------------
> (where IP is the relevant 192.168.. number and HOST is the relevant host 
> name.)
> 
> In one sense, this doesn't matter at all: I get in and do what I want to 
> - and I know it was me so I can ignore the warning.
> 
> However it would be nice to get rid of it.
> 
> I'm using /etc/hosts to tell Linux (CentOS 5) the name of the host on 
> each IP, but is there a way to get the reverse lookup to work locally as 
> well?
> 
> TIA,
> 
> Roger
> 
> PS I did Google, but was totally swamped by solutions to the opposite 
> problem: NOT keeping out unauthorised attempts.
> 

To stop it doing reverse DNS lookup you could alter the sshd_config
variable:

UseDNS yes

To:

UseDNS no

and see if that does the trick.

Regards

Phil
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://mailman.lug.org.uk/pipermail/wylug-help/attachments/20090116/99709993/attachment.pgp