On Thursday 03 April 2003 12:32 am, Eric House wrote:
> I'm moving myself and a computer running sshd from one household to
> another.  The computer is unchanged.  With it in the first location I
> was able to connect to sshd from my ISP.  In the second I cannot.
>
> The first had a Bering 1.0 router attached to an ATT cable modem.
>
> The second has a Bering uClib 1.1 router attached to a DSL modem
> running pppoe.  This system basically works, including forwarding port
> 8080 to apache running on the same machine as the sshd server.
>
> The firewall seems to be doing its job carrying out this rule:
>
> DNAT   net   loc:192.168.1.2    tcp     ssh
>
> in that the connection attempt is forwarded to the server inside the
> firewall.  The server, however, rejects the attempt with this entry in
> the auth.log:
>
> [sshd] Could not reverse map address <address of my ISP>.
>
> I'd suspect a sshd configuration problem if it weren't for the fact
> that this machine worked perfectly in the other location and is
> unchanged.  Instead I wonder if there's something wrong with my dns
> setup, or with dns on Bering uClib.
>
> Does anyone have any suggestions for fixing this?
>
> BTW, dig -x <address of my ISP> (same address as couldn't be reverse
> mapped) works just fine from the commandline on the machine in
> question.  So basic DNS is working.  Just not for sshd.

Have you entered the ISP ip address in /etc/hosts and/or /etc/hosts.allow?
-- 
~Lynn Avants
Linux Embedded Appliance Firewall Developer
http://leaf.sourceforge.net
http://guitarlynn.homelinux.org:81


-------------------------------------------------------
This SF.net email is sponsored by: ValueWeb: 
Dedicated Hosting for just $79/mo with 500 GB of bandwidth! 
No other company gives more support or power for your dedicated server
http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to