How to disable the message “reverse mapping checking getaddrinfo for xxx failed - POSSIBLE BREAK-IN...
I have a "OpenSSH_7.2" client connecting to a "OpenSSH_7.3-hpn14v5 FreeBSD-openssh-portable-7.3.p1,1" server hosted on a dynamic IP. The remote server is a NAS4free server.
I tried to apply the suggestions I found online and I added via WebGUI to the NAS4free sshd_config the following lines:
UseDNS no
GSSAPIAuthentication no
The client also has in sshd_config the same lines.
The message is still there. I have no access to the inverse DNS record, so I cannot change it.
I perform "quiet" remote rsync backups and the output is being sent by mail, since it only contains errors and warnings. I get an email every time for errors that are of no use in my case.
How should I solve the problem?
ssh dns openssh
asked Nov 25 '16 at 22:50
FarOFarO
1,2061426
add a comment |
I have a "OpenSSH_7.2" client connecting to a "OpenSSH_7.3-hpn14v5 FreeBSD-openssh-portable-7.3.p1,1" server hosted on a dynamic IP. The remote server is a NAS4free server.
I tried to apply the suggestions I found online and I added via WebGUI to the NAS4free sshd_config the following lines:
UseDNS no
GSSAPIAuthentication no
The client also has in sshd_config the same lines.
The message is still there. I have no access to the inverse DNS record, so I cannot change it.
I perform "quiet" remote rsync backups and the output is being sent by mail, since it only contains errors and warnings. I get an email every time for errors that are of no use in my case.
How should I solve the problem?
ssh dns openssh
asked Nov 25 '16 at 22:50
FarOFarO
1,2061426
add a comment |
I have a "OpenSSH_7.2" client connecting to a "OpenSSH_7.3-hpn14v5 FreeBSD-openssh-portable-7.3.p1,1" server hosted on a dynamic IP. The remote server is a NAS4free server.
I tried to apply the suggestions I found online and I added via WebGUI to the NAS4free sshd_config the following lines:
UseDNS no
GSSAPIAuthentication no
The client also has in sshd_config the same lines.
The message is still there. I have no access to the inverse DNS record, so I cannot change it.
I perform "quiet" remote rsync backups and the output is being sent by mail, since it only contains errors and warnings. I get an email every time for errors that are of no use in my case.
How should I solve the problem?
ssh dns openssh
asked Nov 25 '16 at 22:50
FarOFarO
1,2061426
I have a "OpenSSH_7.2" client connecting to a "OpenSSH_7.3-hpn14v5 FreeBSD-openssh-portable-7.3.p1,1" server hosted on a dynamic IP. The remote server is a NAS4free server.
I tried to apply the suggestions I found online and I added via WebGUI to the NAS4free sshd_config the following lines:
UseDNS no
GSSAPIAuthentication no
The client also has in sshd_config the same lines.
The message is still there. I have no access to the inverse DNS record, so I cannot change it.
I perform "quiet" remote rsync backups and the output is being sent by mail, since it only contains errors and warnings. I get an email every time for errors that are of no use in my case.
How should I solve the problem?
ssh dns openssh
ssh dns openssh
asked Nov 25 '16 at 22:50
FarOFarO
1,2061426
asked Nov 25 '16 at 22:50
FarOFarO
1,2061426
asked Nov 25 '16 at 22:50
FarOFarO
1,2061426
asked Nov 25 '16 at 22:50
FarOFarO
1,2061426
asked Nov 25 '16 at 22:50
FarOFarO
1,2061426
1,2061426
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
The client appears to be calling the DNS check, therefore
UseDNS no
GSSAPIAuthentication no
on the server are useless.
The DNS check in the client has been introduced (apparently) with a GSSAPI patch introduced for compatibility with SunSSH [the file https://github.com/omniti-labs/omnios-build/blob/master/build/openssh/patches/0015-GSS-API-key-exchange-support.patch#L1652 is no more available online
Adding
GSSAPIKeyExchange no
to ssh_config (not sshd_config) solved the issue.
See also: https://www.mail-archive.com/omnios-discuss@lists.omniti.com/msg07240.html
answered Dec 4 '16 at 22:38
FarOFarO
1,2061426
links return 404 or host not found, can you update the links?
– Jasonw
Jan 9 at 1:25
@Jasonw The patch is gone, I cannot find it anymore. If you want you can search for the history of OpenSSH under OmniOS... I updated the link to the mailing list
– FarO
Jan 9 at 13:24
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1149850%2fhow-to-disable-the-message-reverse-mapping-checking-getaddrinfo-for-xxx-failed%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
The client appears to be calling the DNS check, therefore
UseDNS no
GSSAPIAuthentication no
on the server are useless.
The DNS check in the client has been introduced (apparently) with a GSSAPI patch introduced for compatibility with SunSSH [the file https://github.com/omniti-labs/omnios-build/blob/master/build/openssh/patches/0015-GSS-API-key-exchange-support.patch#L1652 is no more available online
Adding
GSSAPIKeyExchange no
to ssh_config (not sshd_config) solved the issue.
See also: https://www.mail-archive.com/omnios-discuss@lists.omniti.com/msg07240.html
answered Dec 4 '16 at 22:38
FarOFarO
1,2061426
links return 404 or host not found, can you update the links?
– Jasonw
Jan 9 at 1:25
@Jasonw The patch is gone, I cannot find it anymore. If you want you can search for the history of OpenSSH under OmniOS... I updated the link to the mailing list
– FarO
Jan 9 at 13:24
add a comment |
The client appears to be calling the DNS check, therefore
UseDNS no
GSSAPIAuthentication no
on the server are useless.
The DNS check in the client has been introduced (apparently) with a GSSAPI patch introduced for compatibility with SunSSH [the file https://github.com/omniti-labs/omnios-build/blob/master/build/openssh/patches/0015-GSS-API-key-exchange-support.patch#L1652 is no more available online
Adding
GSSAPIKeyExchange no
to ssh_config (not sshd_config) solved the issue.
See also: https://www.mail-archive.com/omnios-discuss@lists.omniti.com/msg07240.html
answered Dec 4 '16 at 22:38
FarOFarO
1,2061426
links return 404 or host not found, can you update the links?
– Jasonw
Jan 9 at 1:25
@Jasonw The patch is gone, I cannot find it anymore. If you want you can search for the history of OpenSSH under OmniOS... I updated the link to the mailing list
– FarO
Jan 9 at 13:24
add a comment |
The client appears to be calling the DNS check, therefore
UseDNS no
GSSAPIAuthentication no
on the server are useless.
The DNS check in the client has been introduced (apparently) with a GSSAPI patch introduced for compatibility with SunSSH [the file https://github.com/omniti-labs/omnios-build/blob/master/build/openssh/patches/0015-GSS-API-key-exchange-support.patch#L1652 is no more available online
Adding
GSSAPIKeyExchange no
to ssh_config (not sshd_config) solved the issue.
See also: https://www.mail-archive.com/omnios-discuss@lists.omniti.com/msg07240.html
answered Dec 4 '16 at 22:38
FarOFarO
1,2061426
The client appears to be calling the DNS check, therefore
UseDNS no
GSSAPIAuthentication no
on the server are useless.
The DNS check in the client has been introduced (apparently) with a GSSAPI patch introduced for compatibility with SunSSH [the file https://github.com/omniti-labs/omnios-build/blob/master/build/openssh/patches/0015-GSS-API-key-exchange-support.patch#L1652 is no more available online
Adding
GSSAPIKeyExchange no
to ssh_config (not sshd_config) solved the issue.
See also: https://www.mail-archive.com/omnios-discuss@lists.omniti.com/msg07240.html
answered Dec 4 '16 at 22:38
FarOFarO
1,2061426
edited Jan 9 at 13:24
answered Dec 4 '16 at 22:38
FarOFarO
1,2061426
answered Dec 4 '16 at 22:38
FarOFarO
1,2061426
answered Dec 4 '16 at 22:38
FarOFarO
1,2061426
1,2061426
links return 404 or host not found, can you update the links?
– Jasonw
Jan 9 at 1:25
@Jasonw The patch is gone, I cannot find it anymore. If you want you can search for the history of OpenSSH under OmniOS... I updated the link to the mailing list
– FarO
Jan 9 at 13:24
add a comment |
links return 404 or host not found, can you update the links?
– Jasonw
Jan 9 at 1:25
@Jasonw The patch is gone, I cannot find it anymore. If you want you can search for the history of OpenSSH under OmniOS... I updated the link to the mailing list
– FarO
Jan 9 at 13:24
links return 404 or host not found, can you update the links?
– Jasonw
Jan 9 at 1:25
links return 404 or host not found, can you update the links?
– Jasonw
Jan 9 at 1:25
@Jasonw The patch is gone, I cannot find it anymore. If you want you can search for the history of OpenSSH under OmniOS... I updated the link to the mailing list
– FarO
Jan 9 at 13:24
@Jasonw The patch is gone, I cannot find it anymore. If you want you can search for the history of OpenSSH under OmniOS... I updated the link to the mailing list
– FarO
Jan 9 at 13:24
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1149850%2fhow-to-disable-the-message-reverse-mapping-checking-getaddrinfo-for-xxx-failed%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
