Client cannot login using SSH anymore

Hi all,

I have a problem where a client has been logging in to my RH9 server
for some time now using SSH, now they cannot. Here is an extract from
my /etc/hosts.allow

ALL: LOCAL
ALL: 127.0.0.1
ALL: 192.168.0.0/255.255.255.0
sshd: .prem.tmns.net.au, .internode.on.net, 144.138.213.112
sendmail: ALL except .kr, .tw, .es
popper: ALL except .kr, .tw , .es
imapd: ALL

This is one of the errors from /var/log/secure

Oct 22 10:02:37 server sshd[28785]: warning: /etc/hosts.allow, line 6:
can't verify hostname:
getaddrinfo(wopr-n-144-139-187-154.prem.tmns.net.au, AF_INET) failed

Can anyone enlighten me to what is going on, thanks in advance.

Richard.


Rick

"Rick" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) om

> I have a problem where a client has been logging in to my RH9 server
> for some time now using SSH, now they cannot. Here is an extract from
> my /etc/hosts.allow
> ALL: LOCAL
> ALL: 127.0.0.1
> ALL: 192.168.0.0/255.255.255.0
> sshd: .prem.tmns.net.au, .internode.on.net, 144.138.213.112
> sendmail: ALL except .kr, .tw, .es
> popper: ALL except .kr, .tw , .es
> imapd: ALL
> This is one of the errors from /var/log/secure
> Oct 22 10:02:37 server sshd[28785]: warning: /etc/hosts.allow, line 6:
> can't verify hostname:
> getaddrinfo(wopr-n-144-139-187-154.prem.tmns.net.au, AF_INET) failed
> Can anyone enlighten me to what is going on, thanks in advance.

Looks like their DNS doesn't reverse resolve:

$ nslookup -sil 144.139.187.154

Non-authoritative answer:
154.187.139.144.in-addr.arpa name =
wopr-n-144-139-187-154.prem.tmns.net.au.

Authoritative answers can be found from:
139.144.in-addr.arpa nameserver = sy-dns02.tmns.net.au.
139.144.in-addr.arpa nameserver = sy-dns01.tmns.net.au.

$ nslookup -sil wopr-n-144-139-187-154.prem.tmns.net.au
sy-dns02.tmns.net.au

** server can't find wopr-n-144-139-187-154.prem.tmns.net.au: NXDOMAIN

--
use hotmail com for any email replies



-----= Posted via Newsfeeds.Com, Uncensored Usenet News =-----
http://www.newsfeeds.com - The #1 Newsgroup Service in the World!
-----== Over 100,000 Newsgroups - 19 Different Servers! =-----

Rick wrote on 22.10.2003 10:23:


> Hi all,
>
> I have a problem where a client has been logging in to my RH9 server
> for some time now using SSH, now they cannot. Here is an extract from
> my /etc/hosts.allow
>
> ALL: LOCAL
> ALL: 127.0.0.1
> ALL: 192.168.0.0/255.255.255.0
> sshd: .prem.tmns.net.au, .internode.on.net, 144.138.213.112
> sendmail: ALL except .kr, .tw, .es
> popper: ALL except .kr, .tw , .es
> imapd: ALL
>
> This is one of the errors from /var/log/secure
>
> Oct 22 10:02:37 server sshd[28785]: warning: /etc/hosts.allow, line 6:
> can't verify hostname:
> getaddrinfo(wopr-n-144-139-187-154.prem.tmns.net.au, AF_INET) failed
>
> Can anyone enlighten me to what is going on, thanks in advance.
>


As the entry states wopr-n-144-139-187-154.prem.tmns.net.au has no
reverse DNS entry.
Try putting the machine's IP (144.139.187.154) into hosts.allow.


Walter

(E-Mail Removed) (Rick) writes:

]Hi all,

]I have a problem where a client has been logging in to my RH9 server
]for some time now using SSH, now they cannot. Here is an extract from
]my /etc/hosts.allow

]ALL: LOCAL
]ALL: 127.0.0.1
]ALL: 192.168.0.0/255.255.255.0
]sshd: .prem.tmns.net.au, .internode.on.net, 144.138.213.112
]sendmail: ALL except .kr, .tw, .es
]popper: ALL except .kr, .tw , .es
]imapd: ALL

]This is one of the errors from /var/log/secure

]Oct 22 10:02:37 server sshd[28785]: warning: /etc/hosts.allow, line 6:
]can't verify hostname:
]getaddrinfo(wopr-n-144-139-187-154.prem.tmns.net.au, AF_INET) failed

Well, this appears to be an attempt to do a lookup of the
address and it failed. It fails for me as well. This name does not
appear to be in any public DNS table. Perhaps discuss it with whoever is
in charge of prem.tmns.net.au.



]Can anyone enlighten me to what is going on, thanks in advance.

]Richard.

nslookup -sil host_ip