Patch to allow gatewaying of remote forwarded ports
Lincoln Stein
lstein at cshl.org
Tue Dec 11 15:13:04 EST 2001
Enclosed is a re-revised patch that includes documentation changes! Please
ignore the two previous patches. I hope this is it.
Lincoln
On Sunday 09 December 2001 11:51, Lincoln Stein wrote:
> Enclosed is a revised patch which respects the server policy with respect
> to GatewayPorts.
>
> Lincoln
>
> On Sunday 09 December 2001 08:42, Markus Friedl wrote:
> > On Sat, Dec 08, 2001 at 12:03:45AM -0500, Lincoln Stein wrote:
> > > Enclosed is a patch against the "portable" OpenSSH version 3.02p1. It
> > > enables the -g switch when applied to -R (remote) forwardings. This
> > > allows remote hosts to connect to forwarded ports on the sshd host.
> >
> > + gateway_ports = (strncmp(listen_address,"0.0.0.0",7) == 0) ||
> > options.gateway_ports;
> >
> > this would violate the policy of the server.
> >
> > if the sshd_config says: gatewayports==no, then the
> > socket should be bound to 127.0.0.1 only, regardless
> > of what the client wants.
> >
> > gateway_ports = options.gateway_ports &&
> > (strncmp(listen_address,"0.0.0.0",7) == 0);
> >
> > would be correct.
----------------------------------------
Content-Type: text/x-c; charset="iso-8859-1";
name="openssh-3.0.2p1-gateway.patch"
Content-Transfer-Encoding: base64
Content-Description:
----------------------------------------
--
========================================================================
Lincoln D. Stein Cold Spring Harbor Laboratory
lstein at cshl.org Cold Spring Harbor, NY
NOW HIRING BIOINFORMATICS POSTDOCTORAL FELLOWS AND PROGRAMMERS.
PLEASE WRITE FOR DETAILS.
========================================================================
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openssh-3.0.2p1-gateway.patch
Type: text/x-c
Size: 4766 bytes
Desc: not available
Url : http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20011210/f840ce0a/attachment.bin
More information about the openssh-unix-dev
mailing list