Re: possible breakin atempt

From: Martin (mndr_at_snafu.de)
Date: 02/23/05


Date: Wed, 23 Feb 2005 12:07:25 +0100

EmJey wrote:
> EmJey <joram@despammed.com> wrote:
>
> What is this error that i have in system.log when I try ssh
> user@127.0.0.1?
>
> ssh 192.168.1.10
> Address 192.168.1.10 maps to localhost, but this does not map back to
> the address - POSSIBLE BREAKIN ATTEMPT!
>
> Thanks
> EmJey

Your sshd tries to resolve your reverse pointer record. Try one of these:
- sshd_config: UseDNS No. That option is unsave anyway.
- Check your in-addr.arpa zonefile in your DNS.
- Check /etc/hosts