[openssh-dev]: disable ProxyCommand from being used?
Markus Friedl
markus at openbsd.org
Thu Feb 7 22:30:51 EST 2002
$ cat .ssh/config
Host bla-noproxy
Hostname bla
...
$ ssh bla-noproxy
On Thu, Feb 07, 2002 at 03:18:53AM -0800, Dan Kaminsky wrote:
> > i don't understand you problem.
> >
> > if you don't want to use it, why do you use it?
> >
> > or is it triggered by ssh_config ?
> >
> > they you can overwrite the config with your .ssh/config.
>
> Sounds like the majority of the time, he's connecting to hosts that require
> proxy support to connect to. Occasionally though, he connects to something
> on his local subnet, and would rather go directly. Using a .ssh/config
> would override his remote connections, and:
>
> ssh -o ProxyCommand="" user at host
>
> ...doesn't work.
>
> There are four possible solutions that come to mind:
>
> 1) Have a separate config file, ssh_noproxy, then do: ssh -f ~/ssh_noproxy
> user at host
> 2) Find some way to use the weak conditionals in the config file to only
> apply the ProxyCommand to hosts outside the present subnet. I don't think
> this is possible.
> 3) Create a shell script, sshp, with the following command:
> #!/usr/bin/bash
> exec ssh -o ProxyCommand %h %p $@
> then use sshp instead of ssh whenever accessing ssh using a proxy
> 4) Add null proxy parsing so that command line can eliminate the
> proxycommand entirely.
>
> --dan
>
>
More information about the openssh-unix-dev
mailing list