Re: Known hosts file and host with multiple SSH ports

From: Nico Kadel-Garcia (nkadel_at_comcast.net)
Date: 07/26/05 

Date: Tue, 26 Jul 2005 07:53:02 -0400

"Jochen Wiedmann" <jochen.wiedmann@gmail.com> wrote in message
news:e75283b1.0507252202.58a45d7e@posting.google.com...
> Hi,
>
> I have an IP address with multiple SSH servers running on several
> ports. (The reasons is that the SSH servers are in fact running on
> other machines, it is simply that the firewall provides access on a
> single IP address.)
>
> This works fine, in general, with one exception: Whenever I switch
> from one port to the other, then the SSH client claims, that the
> servers key has changed, because the known hosts file contains the
> entry, which was created while accessing the other port.
>
> Are there any suggestions, other than editing the known hosts file,
> whenever required?

Give them the same host key because they're pretending to be the same
machine, or give them different hostnames for external access. Do you have
control of your DNS?

Relevant Pages

  • Known hosts file and host with multiple SSH ports
    ... I have an IP address with multiple SSH servers running on several ... which was created while accessing the other port. ... Are there any suggestions, other than editing the known hosts file, ...
    (comp.security.ssh)
  • Re: Two NICs. two SSH servers
    ... two SSH servers, each bound to a different NIC and on a different port? ... The ListenAddress parameter in your config file defines which address ...
    (comp.security.ssh)
  • Re: Sockets, port and loop-back ?
    ... But URLs allow you to specify the port as well as the IP address ... the web server, You can configure this server (that listens on only ... and a router at 123.123.123.123 that masquerades Your subnet ... and You want to have ssh servers on both that are ...
    (comp.os.linux.networking)
  • Re: shutting down dictionary attacks
    ... It would also be useful to run the daemon on a different port than 22. ... This will probably throw 90% of the people scanning for ssh servers ...
    (SSH)