From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 2DE08138943 for ; Sat, 9 Feb 2013 18:22:56 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 357E421C03F; Sat, 9 Feb 2013 18:22:47 +0000 (UTC) Received: from out5-smtp.messagingengine.com (out5-smtp.messagingengine.com [66.111.4.29]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id A1EDEE059C for ; Sat, 9 Feb 2013 18:22:45 +0000 (UTC) Received: from compute5.internal (compute5.nyi.mail.srv.osa [10.202.2.45]) by gateway1.nyi.mail.srv.osa (Postfix) with ESMTP id 3B09320D95 for ; Sat, 9 Feb 2013 13:22:45 -0500 (EST) Received: from frontend1.nyi.mail.srv.osa ([10.202.2.160]) by compute5.internal (MEProxy); Sat, 09 Feb 2013 13:22:45 -0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=binarywings.net; h=message-id:date:from:mime-version:to:subject:content-type; s= mesmtp; bh=QELfv+NNqzJAGrH/ymZfcok5hdQ=; b=A7YV7ADP3jn5gV/EHh6C7 BsRMVEfcnJPokVm/lIA4sO/L+qp1/JhXDezh/rmeZfCC+uUeoL+0P9+L5FQ3R51V n0/u/1KzW4uYeAiTMLCAD3tz8L0Ow9uQzGdCfz+h4zFvJ4yfjK/awk22+D/WdTf1 cIeWM5+LCEOHN6b9gqQ5+o= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=message-id:date:from:mime-version:to :subject:content-type; s=smtpout; bh=QELfv+NNqzJAGrH/ymZfcok5hdQ =; b=StaquW84sWvVI3BWZW4Hwv/uoQQkTygyet7qHBLujQbVqu3lHn9BadMquXG FFIhb2LS+ryq5yKQ2PVSsmCYiUSKdLWxnOi6Y+aZJ1TsTfTzFkWWWbCMDDBCk+Qi xr4MMAPrRJGIhpCWEyjLdUjKSCIQ+sksSDv2qnXf3jzdMkbM= X-Sasl-enc: bCVtlGlOJ/+D40PY2gl+1+PXpxdyfygYo36/19q7hQ0S 1360434164 Received: from [192.168.5.18] (unknown [83.169.5.6]) by mail.messagingengine.com (Postfix) with ESMTPA id 7F8BF8E08E7 for ; Sat, 9 Feb 2013 13:22:44 -0500 (EST) Message-ID: <511693EE.1060606@binarywings.net> Date: Sat, 09 Feb 2013 19:22:38 +0100 From: Florian Philipp User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130202 Thunderbird/17.0.2 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: Gentoo User List Subject: [gentoo-user] SSH UseDNS without IPv6? X-Enigmail-Version: 1.5 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="----enig2MHWGJWBTVTRFDQUDEUOJ" X-Archives-Salt: 90d63516-1a2c-4ef0-b7ec-0274d3fff282 X-Archives-Hash: 387ea873e7940689c2726ab24fcdd8f8 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) ------enig2MHWGJWBTVTRFDQUDEUOJ Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: quoted-printable Hi list! I have an issue with SSH. It's a variation of the old "Set 'UseDNS no' to avoid delays with faulty DNS records" theme. Following setup: 1. I have a server with IPv6 compiled into the SSH daemon but no actual IPv6 network interface. 2. The SSH client has no IPv6, neither compiled nor active. 3. The DNS server doesn't serve or support AAAA records. Apparently it drops all such requests. All other records for IP and reverse lookup are correct. Now I'm experiencing the classic, very long delay when connecting to the server via SSH because it does DNS lookups. When I look at wireshark dumps, I see correctly served A and reverse lookups but the server also insists on doing AAAA requests which time out. I tried limiting the sshd "AddressFamily" to inet (aka IPv4) but this didn't change anything. Is there another workaround or do I really have to deactivate DNS lookups? Thanks in advance! Florian Philipp ------enig2MHWGJWBTVTRFDQUDEUOJ Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlEWk/IACgkQqs4uOUlOuU8+NwCfQbU+KaBT2ns9khzuyLdIbDZ3 u7sAnjB4TMMOe8V4AQMx9EFKmuwver27 =UrY0 -----END PGP SIGNATURE----- ------enig2MHWGJWBTVTRFDQUDEUOJ--