On Monday, October 5, 2020 8:24:09 PM PDT Robert Edmonds wrote:
> Paul Vixie wrote:
> > ssh gets hinky when i connect from a server whose PTR is "servfail"
> > (dnssec
> > "bogus")
> 
> Unless you're using host-based authentication or the from= option with a
> hostname pattern in an authorized_keys file, you can set "UseDNS no" in
> the sshd config file, or upgrade to OpenSSH 6.8p1 or later where "UseDNS
> no" is the default.

it's this way on purpose, not only a default. port knockers need PTR's here.

-- 
Vixie @FSI
_______________________________________________
dns-operations mailing list
[email protected]
https://lists.dns-oarc.net/mailman/listinfo/dns-operations

Reply via email to