5.2: Solaris 10 x86 x-11 forwarding fails, assign requested address

[Seth Ellsworth]

That works, and setting listen-addrs to only IPV4 address works as well.

This is in a package I provide to multiple distinct customers, and would prefer to fix it in a way that 'just works' across the board. Meaning no config needed, and still allows IPV6 if desired.

---

Seth Ellsworth

Vintela Development

The people and products of Vintela are now a part of Quest Software.

Read the press release to learn more.


-----Original Message-----
From: openssh-unix-dev-bounces+seth.ellsworth=quest.com at mindrot.org [mailto:openssh-unix-dev-bounces+seth.ellsworth=quest.com at mindrot.org] On Behalf Of Peter Stuge
Sent: Monday, May 24, 2010 4:55 PM
To: openssh-unix-dev at mindrot.org
Subject: Re: 5.2: Solaris 10 x86 x-11 forwarding fails, assign requested address

Seth Ellsworth wrote:
> So, how do I fix this so I keep the needed behavior but don't
> introduce the vulnerability?
..
> Am I approaching this wrong, and this shows a mis-configured
> machine? ( happens on multiple machines, all default setups
> connected to IPV4 networks ).

If they are only connected with v4 but your kernel has v6 support
enabled then try running sshd -4 to make sshd only use v4.


//Peter
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev at mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev