Re: openssh-3.7.1p2 "Nasty PTR record"

From: Richard E. Silverman (res_at_qoxp.net)
Date: 09/26/03 

Date: 25 Sep 2003 22:22:06 -0400

> Sep 26 09:44:23 starship sshd[24746]: Accepted password for fred
> from 192.168.1.5 port 32772 ssh2
> Sep 26 09:44:23 starship sshd[24746]: Nasty PTR record
> "ufo.gpv.co.nz" is set up for 192.168.1.5, ignoring

This check was added to address the following quirk of OpenSSH:

http://www.kb.cert.org/vuls/id/978316

It looks like the getaddrinfo() function on your platform (you don't say
what that is) does not behave as the OpenSSH authors expect, and as is
documented on other platforms. That message shouldn't be possible, since
it should only be printed if the name appearing in quotes (here
"ufo.gpv.co.nz") is a domain name which looks like an IP address in
dotted-quad notation. It looks as if getaddrinfo() is returning 0 even if
the AI_NUMERICHOST hint is set and the given domain name is *not*
numeric. 

-- 
  Richard Silverman
  res@qoxp.net

Relevant Pages

  • Re: openssh-3.7.1p2 "Nasty PTR record"
    ... This check was added to address the following quirk of OpenSSH: ... It looks like the getaddrinfo() function on your platform (you don't say ...
    (comp.security.ssh)
  • Re: openssh-3.7.1p2 "Nasty PTR record"
    ... > This check was added to address the following quirk of OpenSSH: ... > It looks like the getaddrinfo() function on your platform (you don't say ...
    (comp.security.ssh)
  • Re: openssh-3.7.1p2 "Nasty PTR record"
    ... > This check was added to address the following quirk of OpenSSH: ... > It looks like the getaddrinfo() function on your platform (you don't say ...
    (comp.security.ssh)
  • Re: openssh-3.7.1p2 "Nasty PTR record"
    ... >>It looks like the getaddrinfo() function on your platform (you don't say ... >>what that is) does not behave as the OpenSSH authors expect, ...
    (comp.security.ssh)
  • Re: openssh-3.7.1p2 "Nasty PTR record"
    ... >>It looks like the getaddrinfo() function on your platform (you don't say ... >>what that is) does not behave as the OpenSSH authors expect, ...
    (comp.security.ssh)