On Mon, Nov 12, 2001 at 08:08:31AM -0500, Burke, Thomas G. wrote:
> What the heck are these messages trying to tell me?
> 
> Nov 10 14:12:30 tomii sshd[8408]: warning: /etc/hosts.allow, line 8: host
> name/name mismatch:
> powerstation.tomii.dnsalias.com != tomii.dnsalias.com
> Nov 10 15:05:07 tomii sshd[8529]: warning: /etc/hosts.allow, line 8: host
> name/name mismatch:

I believe it is tcpwrappers saying there is a mismatch between the IP
address and the hostname. I think what it does is check DNS for the IP
of the reported hostname. Then do a lookup on that IP, and see if it
reverses back to the same hostname. Which fails here:

[hal@feenix tmp]$ host powerstation.tomii.dnsalias.com
powerstation.tomii.dnsalias.com. is an alias for tomii.dnsalias.com.
tomii.dnsalias.com. has address 65.187.98.9

[hal@feenix tmp]$ host 65.187.98.9
Host 9.98.187.65.in-addr.arpa. not found: 2(SERVFAIL)

I *think* that's what's happening. The idea being to prevent some kind
of DNS spoofing. 

-- 
Hal Burgiss
 



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to