In our mixed environment, we have an AIX (5.2) host that shows the
following message to outbound ssh:

Address X.X.X.X maps to , but this does not map back to the address -
POSSIBLE BREAKIN ATTEMPT!

Note the blank space after "maps to" ie it can't seem to resolve the
name.
This is regardless of what host you try to connect to. It then prompts
if you want to connect and successfully
does so. If I put the name/IP in /etc/hosts, it makes no difference.
I know it's using the hosts table because I
put in a dummy name to a real IP and while I get the above message, I
will connect to the correct machine.
There is no nsswitch.conf and creating one with hosts,dns makes no
difference. The resolv.conf lists our two
nameservers and interestingly (perhaps unrelated, perhaps not), if
I change the order, turn on logging on the
nameservers, the changeover is ignored. Also perhaps related, perhaps
not the nameserver it's tied to is logging
a query to resolve loopback.fqdn every 5 seconds (even if I add entries
for it in the host table)

I'm not an AIX sysadmin; I don't even play one on tv.
TIA

--
=-=-=-=-=-=-=-=-=-=- generated by /dev/dave -=-=-=-=-=-=-=-=-=-=-=-=
David Stern University of Maryland
Institute for Advanced Computer Studies

Here are some possibilities,

Try on both internet interfaces disable IPv6.
Try to edit /etc/xinetd.d/ssh to remove the IPv6 option.

Good Luck
Arivoli

Dave Stern wrote:
> In our mixed environment, we have an AIX (5.2) host that shows the
> following message to outbound ssh:
>
> Address X.X.X.X maps to , but this does not map back to the address -
> POSSIBLE BREAKIN ATTEMPT!
>
> Note the blank space after "maps to" ie it can't seem to resolve the
> name.
> This is regardless of what host you try to connect to. It then prompts
> if you want to connect and successfully
> does so. If I put the name/IP in /etc/hosts, it makes no difference.
> I know it's using the hosts table because I
> put in a dummy name to a real IP and while I get the above message, I
> will connect to the correct machine.
> There is no nsswitch.conf and creating one with hosts,dns makes no
> difference. The resolv.conf lists our two
> nameservers and interestingly (perhaps unrelated, perhaps not), if
> I change the order, turn on logging on the
> nameservers, the changeover is ignored. Also perhaps related, perhaps
> not the nameserver it's tied to is logging
> a query to resolve loopback.fqdn every 5 seconds (even if I add entries
> for it in the host table)
>
> I'm not an AIX sysadmin; I don't even play one on tv.
> TIA
>
> --
> =-=-=-=-=-=-=-=-=-=- generated by /dev/dave -=-=-=-=-=-=-=-=-=-=-=-=
> David Stern University of Maryland
> Institute for Advanced Computer Studies