Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Upon seeing some failure with initial ssh connections timing out; I narrowed it down to the reverse dns lookup on ssh. I've found many articles articulating how to disable the lookup; but none saying why not to...

I know I am most likely masking one problem (client host not being able to resolve in a timely manner), but I don't think I care about. Is there anything else I should be aware of? (sshd processes in question are internal facing only)

share|improve this question
add comment

1 Answer 1

up vote 3 down vote accepted

There is nothing "wrong" with disabling SSH reverse-DNS lookups -- I know a few people who do it routinely as a "security" measure (if you're not using the DNS server you don't have to worry if what you're getting from it is correct).

The major downside is you won't have hostnames in your SSH logs.
If you're trolling through your SSH logs because you suspect a security breach you should probably be looking up the IPs yourself anyway (from a known good DNS server, or better through an IP-to-ASN lookup), so that's probably not a big problem.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.