Reverse map delay on OpenSSH 3.4 on FreeBSD

From: Aaron Baugher (abaugher@esc.pike.il.us)
Date: 06/27/02 

From: Aaron Baugher <abaugher@esc.pike.il.us>
Date: 27 Jun 2002 11:16:35 -0500

I've just installed OpenSSH 3.4 on five FreeBSD systems (4.5-RELEASE)
from the port tree. Four of them are working fine, but when I try to
ssh into the fifth one, it pauses for 30 seconds or so before giving
me a password prompt and letting me login. I turned on debugging in
sshd, and found this line came after the pause:

  Could not reverse map address 205.205.205.205. (IP munged.)

However, I can nslookup the IP just fine, and other programs that do
reverse lookups are working fine. I've also tried these options in
sshd_config:

VerifyReverseMapping no
ReverseMappingCheck no

and run sshd with -u0, with no improvement. I'm using IP rules in
/etc/hosts.allow to control access. I'm not using any RHosts stuff,
but I do have RSAAuthentication on, and I need it for other clients.

Any suggestions?

Thanks, 

-- 
Aaron
abaugher@esc.pike.il.us

Relevant Pages

  • sshd should not use TCP_NODELAY
    ... ssh has been annoying me with little pauses. ... packets after the cutoff that get through, so the required number of duplicate ... The data are sent in tinygrams because sshd sets TCP_NODELAY on the network ...
    (freebsd-current)
  • Reverse map delay on OpenSSH 3.4 on FreeBSD
    ... ssh into the fifth one, it pauses for 30 seconds or so before giving ... Could not reverse map address 205.205.205.205. ... and run sshd with -u0, ...
    (comp.security.ssh)
  • Re: Disable name canonicalization for OpenSSH GSSAPI
    ... The issue I'm having is with a new server ... I'm unable to setup the correct reverse ... When I attempt to connect to this host with SSH, ...
    (comp.protocols.kerberos)
  • Re: reverse mapping -- POSSIBLE BREAK-IN ATTEMPT
    ... Set it on both client and server machine. ... I> I am doing ssh from one host A, which I control, to another host B, ... I> This seems to be a simple issue of host B having a wrong reverse IP ...
    (comp.security.ssh)
  • Re: Reverse SSH tunneling
    ... > I'm trying to set up reverse ssh tunneling between two boxes, ... > I've found ssh -R, but i'm wondering if there's a better way to do ... It depends on what your are reverse forwarding. ... Also use the -N option on the first ssh, ...
    (Fedora)