Comment by dfeojm-zlib | Hacker News Reader

Top New Best Ask Show Jobs

Comment by dfeojm-zlib | Hacker News Reader

1. /etc/ssh/sshd_config: UseDNS no

2. If haveged isn't perfect enough, setup a hw TRNG (i.e., EntropyKey, BitBabbler, InfiniteNoise) and EGD or EntropyBroker.

https://everipedia.org/wiki/lang_en/Comparison_of_hardware_r...

http://egd.sourceforge.net

https://www.vanheusden.com/entropybroker

3. It maybe something else.

> UseDNS no

Is not sufficient by itself to never have any part of the ssh connection and authentication not use DNS.

See https://unix.stackexchange.com/questions/56941/what-is-the-p... and https://serverfault.com/questions/576293/sshd-tries-reverse-...

And "UseDNS no" is the default anyway.

Reply on news.ycombinator.com