2.11.1.1.4. POSSIBLE DNS SPOOFING
When connecting to the server via SSH, you may encounter an error «WARNING: POSSIBLE DNS SPOOFING DETECTED!»... It usually looks like this:
This error occurs due to a change in the server certificate and its IP address. This situation can arise:
- Or in the case when a deliberate deception of your device is really performed and the attackers spoof the IP address of the host to which you are trying to connect (in the example
example.ftp.tools
). - Or in the case of transferring a hosting account between our servers (for example, when migrations or for technical reasons). In this case, the error will most often be paired with an error. «REMOTE HOST IDENTIFICATION HAS CHANGED!».
To fix it, you need to delete the existing key for the address. This can be done:
- By running the command:
ssh-keygen -R example.ftp.tools
Instead
example.ftp.tools
specify the address you are connecting to. - By removing the specifying key in the file
known_hosts
... Usually this file is located in/home/user/.ssh/known_hosts
on your device. In this file, the entries will look like this:Specifically, in this example, you need to remove all text from
example.ftp.tools
toxxxxxxx.ftp.tools
, that is: