Linux HOWTO : Disable Reverse Name Resolution Security Procedure at SSH Client End

harmandeep

VirTuaLiZaTioN Freak
Disciple
Setup follows as :-

(1) legititmate internet connections logged in to server as Break In Attempts

Then follow below text :-

Guys, as suggested above ion (1) is to configure SSHD config. so as to prevent above msgs to incurr in SSHD Server /var/log/secure (or the one configured).

Now same sort of MSG PROMPT are also generated on SSH Client,

which can be are viewable using -v option and also without -v option, depicted below ...

SSH Client :-

[root@rhel-52-01]# ssh root@49.201.15.213 -p 12547 -v {Output Excerpt}

reverse mapping checking getaddrinfo for static-213.15.201.49.tataidc.co.in failed - POSSIBLE BREAK-IN ATTEMPT!



SSHD Daemon (Server)
: SSHD /var/log/secure EXCERPT:-

Sep 14 02:15:34 rhel-52-01 sshd[27925]: reverse mapping checking getaddrinfo for static-078.244.156.182.tataidc.co.in failed - POSSIBLE BREAK-IN ATTEMPT!

Now for SSHD, UseDNS directive does the job of not attempting Reverse name

resolution for verifying INCOMING SSH Client DNS Authenticity.( as said above)

Now, is there any option to configure SSH Client component( @ the Client END ),so it doesn't attempts REVERSE name Resolution ( as seen in ABOVE TRUNCATED Output of ssh -v ) ???

Regards
 
Back
Top