Computer Tips - I get: Address IP-address maps to Domain-Name, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Date: 2012may8
OS: Linux
Product: scp, ssh, openssh-clients
Q. I get: Address <IP-address> maps to <Domain-Name>, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
When I try to scp or ssh to a certain IP-address.
What should I make of this?
A. ssh and ssh usually work so flawlessly for moving data about we
sometimes forget they are also about security.
Literally this error means that ssh did a reverse lookup on that that IP-address
and got <Domain-Name>. Then it did a regular lookup on <Domain-Name>
but got an IP-address different than the original IP-address.
OK, but what does mean practically? This is ssh being paranoid -- which is
fine that's its job. But if you were given an IP-address and told
that was where you could scp some files normally I would not worry about this
error.
The "fingerprint changed" error is more of a red flag.