5
votes
1answer
153 views

delay to get password prompt when ssh'ing to a public server

i have a server (debian 7) setup in my university with public ip. when I ssh into the system (from outside the campus), I get a weird delay of 5-10 seconds before I get the password prompt. Why is ...
4
votes
3answers
164 views

How do I generate SSHFP records?

I need to setup SSHFP records in the DNS for my host. I have done some searching but I haven't found any good example. What are SSHFP records? What does SSHFP records look like? How do I create ...
0
votes
3answers
147 views

Debian cannot SSH to OS X by hostname (Windows OK)

I've seen some questions asking why xxx can't connect to MyMacName.local, which answer regarding Avahi as a requirement. I don't think I am in the same category as I can successfully connect to a ...
1
vote
1answer
147 views

Always look up non-FQDN domains as .example.com?

When I connect to the company OpenVPN they don't push their DNS to my computer, which means I have to type the FQDN for the hosts I e.g. SSH and HTTP to. Question Is it possible to configure my ...
7
votes
2answers
1k views

Configuring ssh fingerprints on dns to replace known_hosts fails

The SSHFP records were generated on the ssh server as follows and then added to the zone in bind: $ ssh-keygen -r www.test.us. www.test.us. IN SSHFP 1 1 ad04dfaf343a93beeb939eed1612168f7eadbed7 ...
18
votes
4answers
16k views

What is the point of sshd “UseDNS” option?

I know what it does, but i don't know why. What attack(s) does it prevent ? Is it relevant for all kind of authentication methods ? (hostbased, password, publickey, keyboard-interactive ...)
1
vote
2answers
649 views

OpenWrt ssh host identification with dyndns

If i ssh to my remote OpenWrt router ["via DynDNS"] I get the message @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ Ok, i delete the old line in ~/.ssh/known_hosts, add the new one ...