Patch to allow gatewaying of remote forwarded ports

Markus Friedl markus at openbsd.org
Mon Dec 10 00:42:29 EST 2001


On Sat, Dec 08, 2001 at 12:03:45AM -0500, Lincoln Stein wrote:
> Enclosed is a patch against the "portable" OpenSSH version 3.02p1.  It 
> enables the -g switch when applied to -R (remote) forwardings.  This allows 
> remote hosts to connect to forwarded ports on the sshd host.

+ gateway_ports = (strncmp(listen_address,"0.0.0.0",7) == 0) || options.gateway_ports;                                                    

this would violate the policy of the server.

if the sshd_config says: gatewayports==no, then the
socket should be bound to 127.0.0.1 only, regardless
of what the client wants.

	gateway_ports = options.gateway_ports &&
	    (strncmp(listen_address,"0.0.0.0",7) == 0);

would be correct.



More information about the openssh-unix-dev mailing list