| Author |
Message |
haus
Joined: 03 Mar 2010
Posts: 81
|
| Posted: Thu Jul 07, 2011 8:46 pm Post subject: Router firmware upgrade, then PuTTY warnings? |
|
|
I run an SSH tunnel through my Linode from home. Tonight I upgraded the firmware on my router, and immediately afterward when I went to connect to my Linode with PuTTY, I got a warning that my key fingerprint had changed. From Android, ConnectBot says this might be a man-in-the-middle attack (similar warning).
I'm guessing (emphasis on guessing) that this relates somehow to my router firmware upgrade, just given the timing, but on the other hand, why would that have any effect on the Linode's RSA key fingerprint? It doesn't make sense to me other than the fact that the router does sit "in the middle" of this connection. When I connect to my Linode using a device off my LAN (my smartphone), I get no warning, and the key as reported by "ssh localhost" is different than the one reported when I connect from my LAN.
In short, how worried should I be? I suppose I have some reading to do before I understand this, but I'm hoping someone can shed some insight. |
|
| Back to top |
|
haus
Joined: 03 Mar 2010
Posts: 81
|
| Posted: Fri Jul 08, 2011 5:35 pm Post subject: |
|
|
| Edit: solved, this was a firewall rule on my router that was redirecting traffic to an internal IP address, so that explains why the RSA fingerprint changed - it was indeed a different machine. |
|
| Back to top |
|
rsk
Joined: 24 Nov 2009
Posts: 306
|
| Posted: Sat Jul 09, 2011 4:44 am Post subject: |
|
|
o_O
"Internal IP address" as in another machine on your LAN, or as in some crazy man-in-the-middle thing in the new router firmware itself? |
|
| Back to top |
|
haus
Joined: 03 Mar 2010
Posts: 81
|
| Posted: Sat Jul 09, 2011 4:45 pm Post subject: |
|
|
| machine on my lan, listening on the same port. due to the router setting being incorrect it was redirecting me to that machine. fixing the setting solved the issue. it related to the firmware update as that never happened before. |
|
| Back to top |
|
rsk
Joined: 24 Nov 2009
Posts: 306
|
| Posted: Sat Jul 09, 2011 10:23 pm Post subject: |
|
|
Okay, thanks.
brain# sysctl paranoia.conspiracy.enabled=0
:wink: |
|
| Back to top |
|
| |
