Re: RSA host keys problems with 2 different openssh servers on the samebox

From: Darren Tucker (dtucker_at_zip.com.au)
Date: 10/17/03

  • Next message: olaf weiser: "Re: connection closed by foreign host"
    Date: Fri, 17 Oct 2003 10:40:05 +1000
    To: Martin Sarsale <msarsale@buenosaires.gov.ar>
    
    

    Martin Sarsale wrote:
    > We've a firewall box with one ssh running on X.X.X.X:22 and an
    > iptables forward rule redirecting connections on port 10022 to the ssh
    > server on another machine (Y.Y.Y.Y:22).
    [snip key mismatch errors]
    > I guess that it should save the port along with the ip for each RSA host key.

    That's currently an open enhancement request. You can also use
    "HostKeyAlias" in your config file, eg

    Host privatehost
            Hostname X.X.X.X
            Port 10022
            HostKeyAlias privatehost

    -- 
    Darren Tucker (dtucker at zip.com.au)
    GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
        Good judgement comes with experience. Unfortunately, the experience
    usually comes from bad judgement.
    

  • Next message: olaf weiser: "Re: connection closed by foreign host"

    Relevant Pages

    • Re: Security basics
      ... so you don't need ssh running on your box because there is no ... Then I believe you need sshd running on your box to allow the incoming ... So shut down sshd (thus closing port 22). ... forwarding on it for incoming port 22 traffic. ...
      (Fedora)
    • Re: OT: password crackers
      ... This is extremely common on any externally accessible computer with ... ssh running on the default port. ... forward queries from port 234 to port 22 on your computer. ...
      (Ubuntu)
    • Re: Remote Port Mapping
      ... [about controlling the bind address of port forwards] ... >destined to be supported by OpenSSH in the future - I haven't seen a ... Good judgement comes with experience. ...
      (comp.security.ssh)
    • Re: PuTTY with Cable Modem
      ... >I am unable to access a specific IP address and port number using SSH with ... >PuTTY 0.53b over a Telewest Broadband cable modem. ... Good judgement comes with experience. ...
      (comp.security.ssh)
    • Re: Anyone ever seen this?
      ... I've attempted to restart the daemon, even on a different port. ... which platform you're running it. ... Good judgement comes with experience. ...
      (comp.security.ssh)