sshd config parser

Darren Tucker dtucker at
Wed Apr 5 15:12:40 EST 2006

Jefferson Ogata wrote:
>>> 2. How does "Host" with wildcards interact with DNS? E.g. will "Host
>>> 192.168.0.*" match 192.168.0.evil.domain?
>> It would, which is why...
> Oh, my. Don't you think this is going to lead to unexpected results? I'm
> a bit concerned that people won't realize that DNS is an issue...

The whole idea of having a "Address" and "Host" as distinct entities is
that if you want to match an address you use "Address" and if you want
to match a hostname you use "Host".

> Could sshd default not to use inverse DNS in Host matches unless another
> config directive were enabled?

That would be "UseDNS", no?

Darren Tucker (dtucker at
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.

More information about the openssh-unix-dev mailing list