[Discuss] hosts.allow and reverse lookup

Peter Scott Peter at PSDT.com
Mon Jan 8 16:38:14 PST 2007


Hullo.  Where should I look to fix this problem?  Googling hasn't 
gotten me anywhere.

My hosts.allow has

	sshd: .foo.example.com

(munging client domain).  I ssh in from bar.foo.example.com and get 
rejected, with a message in /var/log/secure that says

	refused connect from bar.foo.example.com (<IP>)

Clearly it is doing the reverse lookup okay, so what's the problem?  I 
This used to work.  The machine is behind a firewall; I just changed 
the firewall and that is the host seen as being the nameserver for the 
machine in question (according to resolv.conf), so I suspect some 
problem with the name resolution forwarding, but every investigation I 
make of gethostbyname and gethostbyaddr turns up correct results.  If I 
allow by explicit IP then I get in (firewall forwards port 22 to this 
host).  I'm running FC5.
-- 
Peter Scott
Pacific Systems Design Technologies
http://www.perldebugged.com/
http://www.perlmedic.com/



More information about the Discuss mailing list