Re: ssh host ip/id management for dynamic dns servers

["Karl E. Jorgensen" <karl@jorgensen.org.uk>]

Hi

On Tue, Feb 11, 2014 at 09:53:32AM +1100, Zenaan Harkness wrote:
> With a dyndns type server, each time a new ip address happens, ssh
> login adds a new entry to .known_hosts
> 
> Is there a recommended way to handle this?

Turn off CheckHostIP ?

For the uninitiated, in your ~/.ssh/config file:

Host {{dns-name-of-host}}
     CheckHostIP no

See ssh_config(5) for details - the relevant part is:
     CheckHostIP
             If this flag is set to “yes”, ssh(1) will additionally check the host IP
             address in the known_hosts file.  This allows ssh to detect if a host key
             changed due to DNS spoofing.  If the option is set to “no”, the check
             will not be executed.  The default is “yes”.

Hope this helps

-- 
Karl E. Jorgensen