On 29 Dec 2013, at 16:48, Nicolai wrote: >> >> There is no reason for ssh to "use DNS" except in the client to resolve >> server addresses. > > SSH tunnels (with proxied DNS to avoid leaks) need UseDNS on the server. Why? UseDNS looks up the peer's DNS records. If anything, I think you would want that switched off (precisely to avoid the server looking up the in-addr.arpa of the peer). -- Alex Bligh