This is not an SSH support list.  SSH uses OpenSSL libraries, but
that's the extent of it.

My conjecture (and this is only my conjecture): you may be running TCP
wrappers, or you may have host-based access blocking disabled.  In any
case, it's at least used for logging purposes (since names are easier
than numbers to communicate).

The question that I'd ask, though, is "do you know which component
would do it?  Is it perhaps a PAM in your system that is queried by
the sshd to perform host-based blocking?"

-Kyle H

On Wed, Apr 28, 2010 at 9:40 AM, barx <[email protected]> wrote:
>
> Hello
>
> When sshd has received the username of a linux user from a SSH client, it
> look likes it send a PTR request on the client's IP.
>
> for example, if 192.168.56.106 start a connection on a sshd server running
> on 192.168.56.1, this machine will send a PTR request on
> 105.56.168.192.in-addr.arpa just after the user name has been received.
>
> My question is simple: what is the point of doing this request ? I
> understand that sshd is trying to know if the client has a domain name, but
> why ?
>
> thank you
> --
> View this message in context: 
> http://old.nabble.com/Why-sshd-makes-a-PTR-dns-request-after-receiving-user%27s-name---tp28391111p28391111.html
> Sent from the OpenSSL - User mailing list archive at Nabble.com.
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [email protected]
> Automated List Manager                           [email protected]
>
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]

Reply via email to