summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorstevesk <stevesk@openbsd.org>2001-08-29 23:02:21 +0000
committerstevesk <stevesk@openbsd.org>2001-08-29 23:02:21 +0000
commit3ec4d79b5faa5bf881f82d50a725781650fce36e (patch)
tree3942371af26c888664001a99994250a91845b929
parentFix buffer oflow reading from queue file. While we are at it, crank (diff)
downloadwireguard-openbsd-3ec4d79b5faa5bf881f82d50a725781650fce36e.tar.xz
wireguard-openbsd-3ec4d79b5faa5bf881f82d50a725781650fce36e.zip
add text about -u0 preventing DNS requests; ok markus@
-rw-r--r--usr.bin/ssh/sshd.814
1 files changed, 13 insertions, 1 deletions
diff --git a/usr.bin/ssh/sshd.8 b/usr.bin/ssh/sshd.8
index e7f158a91c6..e000ec6501a 100644
--- a/usr.bin/ssh/sshd.8
+++ b/usr.bin/ssh/sshd.8
@@ -34,7 +34,7 @@
.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
.\"
-.\" $OpenBSD: sshd.8,v 1.143 2001/08/22 16:30:02 stevesk Exp $
+.\" $OpenBSD: sshd.8,v 1.144 2001/08/29 23:02:21 stevesk Exp $
.Dd September 25, 1999
.Dt SSHD 8
.Os
@@ -268,6 +268,18 @@ indicates that only dotted decimal addresses
should be put into the
.Pa utmp
file.
+.Fl u0
+is also be used to prevent
+.Nm
+from making DNS requests unless the authentication
+mechanism or configuration requires it.
+Authentication mechanisms that may require DNS include
+.Cm RhostsAuthentication ,
+.Cm RhostsRSAAuthentication ,
+.Cm HostbasedAuthentication
+and using a
+.Cm from="pattern-list"
+option in a key file.
.It Fl D
When this option is specified
.Nm