Re: [suse-security] host.allow problem

The ::ffff: comes from IPv6 akaik, so if you dont need IPv6 yet (most of us probably don't) simply disable it. That should fix your problem. HTH, Erwin --- Shoshana Rosenthal wrote:

Hi,

When using ssh to connect to another computer the software seems to add to the IP address ::ffff: e.g. ::ffff:131.42.12.233 not just 131.42.12.233. This causes the connection to be rejected by the remote hosts.allow because there is a mismatch of IP address!= name . The remote hosts.allow has the statements ALL : UNKNOWN : DENY ALL : PARANOID : DENY

The simplest fix is to remove the UNKNOW and PARANOID checks, which is not secure.

I will appreciate any help.

TIA Shoshana Rosenthal srosnethal@cfa.harvard.edu