Re: how to get rid of sshd needing DNS ?

From: Thomas Wolf (tw_at_wsf.at)
Date: 04/27/04


Date: Tue, 27 Apr 2004 22:48:07 +0200

Timo Felbinger wrote:

>
>
> On Mon, 26 Apr 2004, Thomas Wolf wrote:
>
>> Hi,
>>
>> This one is driving me crazy.
>> I dont want my sshd to lookup the client's IP.
>> Turned off VerifyReverseMapping, running sshd with -n0,
>> not using all the items listed in the manpage that
>> could cause a lookup but no luck. Any hints ?
>> BTW, this is on FreeBSD 4.9-RELEASE-p4.
>>
>
> Is your sshd compiled --with-tcp-wrappers? If so, you may want to
> try --without-tcp-wrappers.
>

Thanks for the hint. My main problem was solved by Darren's suggestion
(see other post). I could try xxx-tcp-wrappers only for 3.8p1 (messing with
the Makefiles in the FreeBSD base-distribution is not my strength) and there
was no difference whether I compiled with or without tcp-wrappers.

Thomas



Relevant Pages

  • Re: how to get rid of sshd needing DNS ?
    ... > This one is driving me crazy. ... > I dont want my sshd to lookup the client's IP. ...
    (comp.security.ssh)
  • Re: sshd. "UseDNS no" ignored?
    ... "UseDNS no" only prevents sshd from performing a validation ... of the client's reverse lookup. ... that it will not put hostnames into the utmp structure ...
    (freebsd-stable)
  • Re: Named Recordsets from SProcs?
    ... Yeah. ... i dont generally do unfiltered SELECT *'s except on things like lookup ... tables where its just a small set of ID/TEXT combinations. ...
    (microsoft.public.sqlserver.programming)
  • Re: Named Recordsets from SProcs?
    ... Yeah. ... i dont generally do unfiltered SELECT *'s except on things like lookup ... tables where its just a small set of ID/TEXT combinations. ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: ssh initial connects SLOW
    ... attempted *logging* of the hostname of the connecting site, ... information ot 0 does, in fact, block the lookup. ... documented in the sshd manpage. ... would have been easy to modify the code to check for the UseDNS ...
    (comp.security.ssh)