Re: SSH login very slow

From: Kimmo Koivisto (kimmo.koivisto_at_surfeu.fi)
Date: 06/28/04 

Date: Mon, 28 Jun 2004 22:25:55 +0300

GVK wrote:

> Hello all,
> I'm a newbee system administrator to an intranet server running sshd,
> httpd and mysql server. SSH login to this server is slooooooow.
> It takes upto 1 minute to login after entering the password. Same
> problem when logging in with my private/public key.
> Server runs on Fedora Core 2 - complete install. Is is something
> concerned to the network itself or something to do with my sshd_config?

I'd say that the problem is reverse DNS. Does your FC2 box and client
machine have correct DNS-settings? Does reverse DNS work (is it possible to
find name your IP address)?

Check the reverse DNS with dig:
# dig -x 192.168.2.2 (where 192.168.2.2 is the IP address of your client
machine. Also do the same check to the FC2 box)

You should see machine name in the ANSWER section.

If the reverse DNS query is not working, contact your ISP to correct the DNS
or add your client machine to the /etc/hosts file (to your FC2 box):

192.168.2.2 myclient.somedomain.fin myclient

you can add your FC2 box to the hosts file too:
192.168.2.1 myfc2box.somedomain.fin myfc2box

, you should use the same name as defined in /etc/sysconfig/network and
check that commands
hostname
and
hostname -f
work and return the correct name.

Best Regards
Kimmo Koivisto

Relevant Pages

  • Re: Comcast Email Problems
    ... Our ISP needs to have reverse dns entries ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... Please run command "ipconfig /all" on the server ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot email to Gmail accounts
    ... All looks well, and yeah, the headers still had google's rdns resolving to smtp.robertsonmfg.com so the rDNS change you requested had not propogated to google's cached version. ... And because google used the cached lookup and the email wasn't rejected, it doesn't explain why it worked for my acocunt and not your other gmail accounts. ... The problem does not seem to be your server in any way. ... Regarding the answer to your reverse DNS question, no, ...
    (microsoft.public.windows.server.sbs)
  • Re: Comcast Email Problems
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... understand the difference between our dns and reverse dns. ... the public IP address and public FQDN of your server box ...
    (microsoft.public.windows.server.sbs)
  • Re: You do not have permission to send to this recipient.
    ... You can enter the fqdn of whatever your public mx record is in the Fully ... Perform reverse dns lookup on incoming messages: ... Because it doesnt see my server when reversed, ... The ISP confirms that they have a reverse dns record set. ...
    (microsoft.public.exchange2000.general)
  • Re: Cant mail to a certain domain
    ... the right server. ... reverse DNS record is incorrect. ... This message was created automatically by mail delivery software. ... One or more of your mailservers is claiming to be a host ...
    (microsoft.public.windows.server.sbs)