[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#387376: ssh: Can't have different host keys for different ports but same address (NAT)



On Thu, Sep 14, 2006 at 01:40:25AM +0200, Helge Hafting wrote:
> Unfortunately, ssh always check the hostkey against the IP
> address only, and so it thinks there is a man-in-the-middle
> attack when I try the second pc instead of the first.

Have you tried setting the HostKeyAlias option in ~/.ssh/config?  This 
should allow the use of separate hostkeys for each logical combination.  
Here's an example of the ~/.ssh/config entries:

   Host natbox1
     HostName realserver.example.com
     Port 2201
     HostKeyAlias natbox1

   Host natbox2
     HostName realserver.example.com
     Port 2202
     HostKeyAlias natbox2

Attachment: signature.asc
Description: Digital signature


Reply to: