known_hosts and multiple hosts through a NAT router
Daniel Kopetzky
djk at super.org
Sun Dec 11 03:14:04 EST 2005
The .ssh/known_hosts table cannot handle reaching different sshd
servers behind a NAT router. The machines are selected by having
the SSHDs respond to differnt ports.
A second request would be to allow known_hosts checking solely on
the dns name, wildcarding the IP address. This would be useful
to avoid continuously warning the user every time you connect
to a machine with a changing IP address (e.g. dynamic-ip DSL home machine).
Without that you can fall for DNS typo squatters (e.g my
fingers found ****.hoemip.net rather than homeip.net and
I didn't even notice because I was used to the noise warning
that a laptop's IP address had changed.
More information about the openssh-unix-dev
mailing list