Determining Local IP Address within .profile

Dan Kaminsky dan at doxpara.com
Fri Sep 6 12:47:46 EST 2002


>
>
>Why not just bind to localhost and do your proxying using tcp sockets - no
>code changes required.
>  
>
Localhost for IPC is insecure across user boundries, at least compared 
to stdio -- to say nothing of the fact that an external proxying agent 
is always less convenient to use.

Besides, the ProxyCommand code is already there; it's just a matter of 
linking it to the socket listener instead of the socket connect.

Just something that'll be useful later.

--Dan





More information about the openssh-unix-dev mailing list