[ILUG] sshd problem

[Lee Hosty]

On Mon, 19 Apr 2004, Lee Hosty wrote:

> > You should also be looking in /var/log/auth.log to see if you can see
>
> ah. yes. found the problem, I think:
>
> Apr 19 17:47:30 helium sshd[623]: warning: /etc/hosts.allow, line 16:
> can't verify hostname:
> gethostbyname(rfc1918.space.should.not.be.used.on.publicips) failed
> Apr 19 17:47:30 helium sshd[623]: refused connect from 192.168.0.6
>
> As Gavin McCullagh pointed out "something must have changed" :/
>
> It seems /etc/hosts.deny now contains "ALL : PARANOID" which I'm almost
> certain wasn't the case a few weeks ago.

As it happens, it was /etc/hosts that was the problem, along with extra
computers on the WAN - with all except the knoppix box using DHCP.

Is there a standard method of dealing with this? A wildcard in
/etc/hosts.allow I would presume?