wolfoftheair wrote:
>
> The question that I'd ask, though, is "do you know which component
> would do it? Is it perhaps a PAM in your system that is queried by
> the sshd to perform host-based blocking?"
>
I don't know which component do it exactly. Is there a way other than strace
to know it
Hello
When sshd has received the username of a linux user from a SSH client, it
look likes it send a PTR request on the client's IP.
for example, if 192.168.56.106 start a connection on a sshd server running
on 192.168.56.1, this machine will send a PTR request on
105.56.168.192.in-addr.arpa jus