Re: SSHD + reverse IP Mapping

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



From: "Ow Mun Heng" <ow.mun.heng@xxxxxxx>
> > From: jdow [mailto:jdow@xxxxxxxxxxxxx]
> > 
> > 
> > Sometime you log in from the company 192.168.0.0 block and you notice
> > the WAN link is listed as your address compare the last digits in the
> > address. Sometimes they might be mapped 1:1 to each other. Regardless,
> > perform a "host" on your 192 address. That will return an address. Is
> > that address within the 192.168.0.0 network or is it within the WAN
> > network? What do you get when you use "host" on the dotted 
> > quad address
> > you get back and see what happens.
> 
> Okay.. let's say on my personal desktop (win2k), I do a 
> 
> Pinging pc1.com [192.168.0.156] with 32 bytes of data
> Reply from 192.168.0.156: bytes=32 time<10ms TTL=128
> 
> ping pc-wan-link.com [192.168.0.156] with 32 bytes of data
> Reply from 192.168.0.156: bytes=32 time<10ms TTL=128
> 
> See.. Same IP, diff Hostname

This is a very normal effect. There are canonical names and aliases
in DNS servers. There are various reasons for doing this, too. It's
a "not a worry at all."

> [shrike@shrike log]$ host 192.168.0.156
> 156.0.168.192.in-addr.arpa domain name pointer pc-wan-link.com.

OK, this is one interface with two addresses. The pc-wan-link.com is
the canonical (real) address. The other one is an alias for convenience.
(If it reads "pc1.com", though, it is setup very badly unless your
address is REALLY 216.157.4.105. I hope that was simply for illustration.
Otherwise you are banned from the pc1.com domain, probably no great loss.
It's current owner has it up for sale.)

> > Any manner of interesting things can be going on here. One possibility
> > is aliased addresses. Another is an invisible proxy server.
> 
> So.. I think there's a screwup in corporate IT. DNS server has been
> configured hard-coded mappings of pc hostnames to IPs they dynamically
> assign.?????

See above. It's purely an aliasing thing. I have a machine setup with
both multiple names for the same IP address and multiple IP addresses
for the same NIC.

> > Of course, the simple thing might be to call corporate IT and see if
> > they can explain what you see.
> >
> I doubt they'll be bothered.

I doubt it, too, if they REALLY call your machine pc1.com as an alias.
They are setup "technically" very badly. That would indicate their
being freewheeling screwups.

> is there a way to get ssh to put in the IP add instead of the hostname? 
> since 1 Ip resolves to 2 hostnames.

All I can say here is "RTFM". I don't know of one. There might be one.

{^_^}


-- 
Shrike-list mailing list
Shrike-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/shrike-list

[Index of Archives]     [Fedora Users]     [Centos Users]     [Kernel Development]     [Red Hat Install]     [Red Hat Watch]     [Red Hat Development]     [Red Hat Phoebe Beta]     [Yosemite Forum]     [Fedora Discussion]     [Gimp]     [Stuff]     [Yosemite News]

  Powered by Linux