FreeBSD 15 SSH Login Delays Due to Reverse DNS Timeout

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

SSH takes several seconds before password or key prompt appears.

Environment & Reproduction

Most visible on internal networks without proper PTR records.

time ssh user@host

Root Cause Analysis

sshd waits for reverse DNS response before continuing authentication flow.

Quick Triage

Review sshd logs for lookup timeout indications.

sudo tail -n 100 /var/log/auth.log

Step-by-Step Diagnosis

Test reverse DNS on client IP and inspect resolver latency.

host 

Solution – Primary Fix

Disable DNS lookups in sshd when reverse DNS is not required.

echo 'UseDNS no' | sudo tee -a /etc/ssh/sshd_config && sudo service sshd reload

Solution – Alternative Approaches

Fix DNS PTR records and keep UseDNS enabled in strict auditing environments.

Verification & Acceptance Criteria

SSH prompt appears without noticeable delay and login telemetry remains healthy.

Rollback Plan

Remove UseDNS setting and reload sshd.

Prevention & Hardening

Continuously validate forward/reverse DNS consistency for managed hosts.

Related Errors & Cross-Refs

Often accompanied by resolver timeout warnings in system logs.

Related tutorial: View the step-by-step tutorial for freebsd-15.

View all freebsd-15 tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

OpenSSH server configuration manual pages.