[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Meaning of: www sshd[11208]: warning: /etc/hosts.deny, line 103: can't verify hostname



INRE [cobalt-users] Meaning of: www sshd[11208]: warning: /etc/hosts.deny, 
line 103: can't verify hostname:
> Just got the following in my log check file, can anyone explain what's
> happening:
>
> Security Violations
> =-=-=-=-=-=-=-=-=-=
>
> Feb  5 13:54:50 www sshd[11208]: warning: /etc/hosts.deny, line 103:
> can't verify hostname: gethostbyname(64-58-161-121.cbi.cox-oc.net)
> failed
> Feb  5 13:54:51 www sshd[11208]: Did not receive identification string
> from 64.58.161.121
> Feb  5 13:54:55 www sshd[11210]: warning: /etc/hosts.deny, line 103:
> can't verify hostname: gethostbyname(64-58-161-121.cbi.cox-oc.net)
> failed
> Feb  5 13:54:55 www sshd[11210]: Did not receive identification string
> from 64.58.161.121
>

Charles,

  It means that reverse DNS is not working on that IP/hostname:

<TEST>
root: host 64.58.161.121
121.161.58.64.IN-ADDR.ARPA domain name pointer 64-58-161-121.cbi.cox-oc.net

root: host 64-58-161-121.cbi.cox-oc.net
Host not found.
</TEST>

EG: the IP maps to the name, but the name does not map back to the IP.


-- 
Larry Smith
SysAd ECSIS.NET
sysad@xxxxxxxxx