host.allow problem
Hi, When using ssh to connect to another computer the software seems to add to the IP address ::ffff: e.g. ::ffff:131.42.12.233 not just 131.42.12.233. This causes the connection to be rejected by the remote hosts.allow because there is a mismatch of IP address!= name . The remote hosts.allow has the statements ALL : UNKNOWN : DENY ALL : PARANOID : DENY The simplest fix is to remove the UNKNOW and PARANOID checks, which is not secure. I will appreciate any help. TIA Shoshana Rosenthal srosnethal@cfa.harvard.edu
The ::ffff: comes from IPv6 akaik, so if you dont need IPv6 yet (most of us probably don't) simply disable it. That should fix your problem. HTH, Erwin --- Shoshana Rosenthal wrote:
Hi,
When using ssh to connect to another computer the software seems to add to the IP address ::ffff: e.g. ::ffff:131.42.12.233 not just 131.42.12.233. This causes the connection to be rejected by the remote hosts.allow because there is a mismatch of IP address!= name . The remote hosts.allow has the statements ALL : UNKNOWN : DENY ALL : PARANOID : DENY
The simplest fix is to remove the UNKNOW and PARANOID checks, which is not secure.
I will appreciate any help.
TIA Shoshana Rosenthal srosnethal@cfa.harvard.edu
I have had problems like this on some machines but not others. For some reason ipv6 seems to mess things up sometimes. The simplest solution I found was to use the -4 switch on either the ssh or sshd command to force it to use ipv4 protocol. Or use the config file equivalents. Bob On Mon, 24 Jun 2002, Shoshana Rosenthal wrote:
Hi,
When using ssh to connect to another computer the software seems to add to the IP address ::ffff: e.g. ::ffff:131.42.12.233 not just 131.42.12.233. This causes the connection to be rejected by the remote hosts.allow because there is a mismatch of IP address!= name . The remote hosts.allow has the statements ALL : UNKNOWN : DENY ALL : PARANOID : DENY
The simplest fix is to remove the UNKNOW and PARANOID checks, which is not secure.
I will appreciate any help.
TIA Shoshana Rosenthal srosnethal@cfa.harvard.edu
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com Security-related bug reports go to security@suse.de, not here
============================================================== Bob Vickers R.Vickers@cs.rhul.ac.uk Dept of Computer Science, Royal Holloway, University of London WWW: http://www.cs.rhul.ac.uk/home/bobv Phone: +44 1784 443691
participants (3)
-
Bob Vickers -
Erwin Zierler - stubainet.at -
Shoshana Rosenthal