RE: it this is ssh issue ?
- From: "Gareth Llewellyn" <gareth.llewellyn@xxxxxxxxxxxx>
- Date: Tue, 22 May 2007 10:29:09 +0100
Well the PTR record for 66.181.224.56 reports host-66-181-224-56.jwu.edu
however there are no corresponding A Records for that.
Its getting paranoid because it 'thinks' that someone *might* be
spoofing one side of the DNS (I,e presenting a fake hostname etc)
-----Original Message-----
From: redhat-list-bounces@xxxxxxxxxx
[mailto:redhat-list-bounces@xxxxxxxxxx] On Behalf Of Dineshwar Kumar
Sent: 22 May 2007 10:22
To: Redhat-Help
Subject: it this is ssh issue ?
Hi all,
i got this entry on my server log, do anyone have idea about it. is this
is
ssh issue or DNS related problem? i try a lot in our lab but unable to
get
this error agian. I my sshd_config file UseDNS option is enable, but it
won't any help
May 15 10:08:57 pub01 sshd[14316]: Accepted publickey for jwuser from
66.181.224.56 port 35375 ssh2
May 15 10:08:58 pub01 sshd[14316]: reverse mapping checking getaddrinfo
for
host-66-181-224-56.jwu.edu failed - POSSIBLE BREAKIN ATTEMPT!
May 15 10:10:02 pub01 sshd[14430]: Accepted publickey for jwuser from
66.181.224.56 port 35530 ssh2
May 15 10:10:02 pub01 sshd[14430]: reverse mapping checking getaddrinfo
for
host-66-181-224-56.jwu.edu failed - POSSIBLE BREAKIN ATTEMPT!
With Thanks,
--
Dineshwar Kumar
New Delhi
9891188600
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list
- Follow-Ups:
- RE: it this is ssh issue ?
- From: Gareth Llewellyn
- RE: it this is ssh issue ?
- References:
- it this is ssh issue ?
- From: Dineshwar Kumar
- it this is ssh issue ?
- Prev by Date: RE: it this is ssh issue ?
- Next by Date: Re: it this is ssh issue ?
- Previous by thread: Re: it this is ssh issue ?
- Next by thread: RE: it this is ssh issue ?
- Index(es):
Relevant Pages
- Re: Odd ssh attacks?
... port 57194 ssh2 ... The first thing to do is to set ssh so users
have to use a key rather ... IT Services Division, Kilburn Building, Oxford Road, Manchester
M13 9PL. ... (Ubuntu) - SSH protocol2 without a password
... Have read 'ssh without a password' and apparently the problem lingers. ... #
similar for protocol version 2 ... server listening on 0.0.0.0 Port 22 ...
failed publickey for root from 192.168.0.1 port 32769 ssh2 ... (comp.security.ssh) - Re: sshd question
... Three days ago my Linux box stopped ... piotrs from 201.63.24.60 port
46229 ssh2 ... Couple of things on securing ssh. ... (comp.os.linux.networking) - Re: Event ID: 5504
... User Datagram Protocol, Src Port: 1273, Dst Port: domain ... Authority RRs:
0 ... and if its an issue with the Windows DNS ... > assuming (none of us have
asked your config yet) that you have all your ... (microsoft.public.win2000.dns) - RE: strange traffic on UDP port 53
... Replies to DNS queries should be coming FROM port 53, ... > found
a similar problem with packets being stopped by our firewall. ... The destination IP is
our mail server (not ... (Incidents)