sshd complains: POSSIBLE BREAK-IN ATTEMPT

[Josef Wolf]

Really no ideas with this problem?

On Tue, Sep 11, 2007 at 11:21:39PM +0200, Josef Wolf wrote:
> Hello,
> 
> When I try to connect from one of my hosts to a recently installed
> feisty, the connection hangs for about 5 seconds.  After this delay, the
> connection is establised, but I get following warning in auth.log:
> 
>    reverse mapping checking getaddrinfo for raven.wolf.local failed - POSSIBLE BREAK-IN ATTEMPT!
> 
> "dig raven.wolf.local" correctly resolves the given host to 192.168.1.12
> and "dig -x 192.168.1.12" correctly gives raven.wolf.local.
> 
> What is going wrong here?  What does the warning trying to say to me?
> I have never seen such a problem with my debian (sarge) boxes.
> 
> Below I attached the relevant debug output from "sshd -dddd".
> 
> Any ideas what is screwed up wrong here?
> 
> debug1: userauth-request for user me service ssh-connection method none
> debug1: attempt 0 failures 0
> debug3: mm_getpwnamallow entering
> debug3: mm_request_send entering: type 7
> debug3: monitor_read: checking request 7
> debug3: mm_answer_pwnamallow
> debug3: auth_shadow_acctexpired: today 13767 sp_expire -1 days left -13768
> debug3: account expiration disabled
> debug3: Normalising mapped IPv4 in IPv6 address
> debug3: Trying to reverse map address 192.168.1.12.
> debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM
> debug3: mm_request_receive_expect entering: type 8
> debug3: mm_request_receive entering
> reverse mapping checking getaddrinfo for raven.wolf.local failed - POSSIBLE BREAK-IN ATTEMPT!
> debug3: Normalising mapped IPv4 in IPv6 address
> debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
> debug3: mm_request_send entering: type 8
> debug2: monitor_read: 7 used once, disabling now
> debug3: mm_request_receive entering
> debug2: input_userauth_request: setting up authctxt for me
> debug3: mm_inform_authserv entering
> debug3: mm_request_send entering: type 3