RFC: non-root ssh tun access

Damien Miller djm at mindrot.org
Sat Aug 26 09:29:55 EST 2006


On Fri, 25 Aug 2006, Chris Rapier wrote:

> A while ago we developed a series of patches we call PMVPN for Poor 
> Man's VPN. Basically what we did was intercept open() calls and compare 
> the tuple to a set of rules we had (using LD_PRELOAD (windows and OS X 
> required more annoying proceedures that we didn't explore in any 
> depth)). If the rule matched then we'd automatically open an SSH tunnel 
> to the target and forward the appropriate port over it.

You can do something similar with an unmodified ssh, "socksify" and
DynamicForward

-d




More information about the openssh-unix-dev mailing list