<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: SSH loves rDNS</title>
	<atom:link href="http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/feed/" rel="self" type="application/rss+xml" />
	<link>http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/</link>
	<description></description>
	<pubDate>Wed, 19 Nov 2008 11:39:51 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.3</generator>
		<item>
		<title>By: greendood</title>
		<link>http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/#comment-284</link>
		<dc:creator>greendood</dc:creator>
		<pubDate>Tue, 13 May 2008 20:06:45 +0000</pubDate>
		<guid isPermaLink="false">http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/#comment-284</guid>
		<description>Hi there.

I am having a similar problem , but I can not authenticate at all. What takes my attention is the fact that I actually can establish a connection. Here is the output of ssh:

user@user-laptop:~$ ssh user@myserver.org -p 80 -vvv
OpenSSH_4.7p1 Debian-8ubuntu1, OpenSSL 0.9.8g 19 Oct 2007
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to greendood.homelinux.org [X.Y.Z.56] port 80.
debug1: Connection established.
debug1: identity file /home/user/.ssh/identity type -1
debug3: Not a RSA1 key file /home/user/.ssh/id_rsa.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug2: key_type_from_name: unknown key type '-----END'
debug3: key_read: missing keytype
debug1: identity file /home/user/.ssh/id_rsa type 1
debug1: identity file /home/user/.ssh/id_dsa type -1
ssh_exchange_identification: Connection closed by remote host

If you have paid enough attention, you can come to the conclusion that I am trying to pierce some firewall (I am using port 80).
This command works in another network ,with a public IP, but not here, inside the firewall. 
 My question is, Could it be the reverse DNS issue? if this is the case, what is the correct option in sshd_config :  "ReverseMappingCheck no" or "UseDNS no" ? Could it be another thing I'm missing about the firewall? (which I think is not the problem, 'cos it actually can make the connection)

I have disabled password login, due to some attacs :p. 

Any ideas?</description>
		<content:encoded><![CDATA[<p>Hi there.</p>
<p>I am having a similar problem , but I can not authenticate at all. What takes my attention is the fact that I actually can establish a connection. Here is the output of ssh:</p>
<p>user@user-laptop:~$ ssh <a href="mailto:user@myserver.org">user@myserver.org</a> -p 80 -vvv<br />
OpenSSH_4.7p1 Debian-8ubuntu1, OpenSSL 0.9.8g 19 Oct 2007<br />
debug1: Reading configuration data /etc/ssh/ssh_config<br />
debug1: Applying options for *<br />
debug2: ssh_connect: needpriv 0<br />
debug1: Connecting to greendood.homelinux.org [X.Y.Z.56] port 80.<br />
debug1: Connection established.<br />
debug1: identity file /home/user/.ssh/identity type -1<br />
debug3: Not a RSA1 key file /home/user/.ssh/id_rsa.<br />
debug2: key_type_from_name: unknown key type &#8216;&#8212;&#8211;BEGIN&#8217;<br />
debug3: key_read: missing keytype<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug3: key_read: missing whitespace<br />
debug2: key_type_from_name: unknown key type &#8216;&#8212;&#8211;END&#8217;<br />
debug3: key_read: missing keytype<br />
debug1: identity file /home/user/.ssh/id_rsa type 1<br />
debug1: identity file /home/user/.ssh/id_dsa type -1<br />
ssh_exchange_identification: Connection closed by remote host</p>
<p>If you have paid enough attention, you can come to the conclusion that I am trying to pierce some firewall (I am using port 80).<br />
This command works in another network ,with a public IP, but not here, inside the firewall.<br />
 My question is, Could it be the reverse DNS issue? if this is the case, what is the correct option in sshd_config :  &#8220;ReverseMappingCheck no&#8221; or &#8220;UseDNS no&#8221; ? Could it be another thing I&#8217;m missing about the firewall? (which I think is not the problem, &#8216;cos it actually can make the connection)</p>
<p>I have disabled password login, due to some attacs :p. </p>
<p>Any ideas?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jonathan</title>
		<link>http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/#comment-12</link>
		<dc:creator>Jonathan</dc:creator>
		<pubDate>Sat, 08 Mar 2008 21:11:32 +0000</pubDate>
		<guid isPermaLink="false">http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/#comment-12</guid>
		<description>you could put the config file in ~/.ssh/</description>
		<content:encoded><![CDATA[<p>you could put the config file in ~/.ssh/</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jacob</title>
		<link>http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/#comment-8</link>
		<dc:creator>Jacob</dc:creator>
		<pubDate>Thu, 06 Mar 2008 00:42:14 +0000</pubDate>
		<guid isPermaLink="false">http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/#comment-8</guid>
		<description>Adrian:

Yes, but if you don't have access to the sshd_config file, it doesn't work too well.</description>
		<content:encoded><![CDATA[<p>Adrian:</p>
<p>Yes, but if you don&#8217;t have access to the sshd_config file, it doesn&#8217;t work too well.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Adrian Fita</title>
		<link>http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/#comment-7</link>
		<dc:creator>Adrian Fita</dc:creator>
		<pubDate>Thu, 06 Mar 2008 00:08:37 +0000</pubDate>
		<guid isPermaLink="false">http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/#comment-7</guid>
		<description>Or you can edit /etc/ssh/sshd_config and add "UseDNS no" to disable reverse DNS lookups ;).</description>
		<content:encoded><![CDATA[<p>Or you can edit /etc/ssh/sshd_config and add &#8220;UseDNS no&#8221; to disable reverse DNS lookups ;).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jeff Schroeder</title>
		<link>http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/#comment-6</link>
		<dc:creator>Jeff Schroeder</dc:creator>
		<pubDate>Wed, 05 Mar 2008 15:03:52 +0000</pubDate>
		<guid isPermaLink="false">http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/#comment-6</guid>
		<description>And even better, edit /etc/ssh/ssh_config... find the lines regarding GSSAPI (kerberos authentication) and comment them out.

Then you will notice your ssh connections go much faster. It is easier to comment out 2 lines in your ssh_config than to call your ISP, but whatever works for you :)</description>
		<content:encoded><![CDATA[<p>And even better, edit /etc/ssh/ssh_config&#8230; find the lines regarding GSSAPI (kerberos authentication) and comment them out.</p>
<p>Then you will notice your ssh connections go much faster. It is easier to comment out 2 lines in your ssh_config than to call your ISP, but whatever works for you <img src='http://jacob.peddicord.net/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: bob</title>
		<link>http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/#comment-5</link>
		<dc:creator>bob</dc:creator>
		<pubDate>Wed, 05 Mar 2008 03:34:19 +0000</pubDate>
		<guid isPermaLink="false">http://jacob.peddicord.net/blog/2008/03/04/ssh-loves-rdns/#comment-5</guid>
		<description>or:   ssh -oHostName= login@ip</description>
		<content:encoded><![CDATA[<p>or:   ssh -oHostName= login@ip</p>
]]></content:encoded>
	</item>
</channel>
</rss>
