3
votes
1answer
31 views

How do I generate SSHFP records?

I need to setup SSHFP records in the DNS for my host. I have done some searching but I haven't found any good example. What are SSHFP records? What does SSHFP records look like? How do I create ...
0
votes
3answers
102 views

Debian cannot SSH to OS X by hostname (Windows OK)

I've seen some questions asking why xxx can't connect to MyMacName.local, which answer regarding Avahi as a requirement. I don't think I am in the same category as I can successfully connect to a ...
1
vote
1answer
105 views

Always look up non-FQDN domains as .example.com?

When I connect to the company OpenVPN they don't push their DNS to my computer, which means I have to type the FQDN for the hosts I e.g. SSH and HTTP to. Question Is it possible to configure my ...
6
votes
2answers
983 views

Configuring ssh fingerprints on dns to replace known_hosts fails

The SSHFP records were generated on the ssh server as follows and then added to the zone in bind: $ ssh-keygen -r www.test.us. www.test.us. IN SSHFP 1 1 ad04dfaf343a93beeb939eed1612168f7eadbed7 ...
14
votes
4answers
13k views

What is the point of sshd “UseDNS” option?

I know what it does, but i don't know why. What attack(s) does it prevent ? Is it relevant for all kind of authentication methods ? (hostbased, password, publickey, keyboard-interactive ...)
1
vote
2answers
621 views

OpenWrt ssh host identification with dyndns

If i ssh to my remote OpenWrt router ["via DynDNS"] I get the message @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ Ok, i delete the old line in ~/.ssh/known_hosts, add the new one ...