On 02.02 Bug Hunter wrote:
> 
>  This is an indication that reverse dns does not work for user from ip
> address aa.bb.cc.  try adding that ip address in /etc/hosts. that might
> help.
> 
> On Thu, 1 Feb 2001, Svante Signell wrote:
> 
> > Shall I take this seriously? Which programs to check? Where to look?
> > 
> > Feb  1 20:20:10 computer sshd[864]: WARNING: /etc/ssh/primes does not
> > exist, using old prime
> > Feb  1 20:20:15 computer sshd[864]: reverse mapping checking
> > getaddrinfo for aa.bb.cc failed - POSSIBLE BREAKIN ATTEMPT!
> > Feb  1 20:20:15 compaq sshd[864]: Accepted password for user from
> > xx.yy.zz port 1020 ssh2
> > 
> 

If user is connecting via PPP or DHCP (cable), it is possible that his
ISP has implemented DNS only in one direction (ip->name or name->ip).
See if you can nslookup or host the name and the address.

-- 
J.A. Magallon                                                      $> cd pub
mailto:[EMAIL PROTECTED]                                          $> more beer

Linux werewolf 2.4.1-ac1 #2 SMP Fri Feb 2 00:19:04 CET 2001 i686


Reply via email to