SOCKS5 and UDP

Romain Vimont rom at rom1v.com
Tue Jan 17 01:30:46 AEDT 2017


Hi,

Currently, OpenSSH only accepts the SOCKS5 command "CONNECT":
<https://anongit.mindrot.org/openssh.git/tree/channels.c#n1281>

The RFC also specifies the commands "BIND" and "UDP ASSOCIATE":
<https://tools.ietf.org/html/rfc1928#section-4>

As a consequence, in particular, a SOCKS5 server started with "ssh -D"
cannot proxify UDP packets.

Are there deep reasons why OpenSSH does not implement them (security, or
whatever)?

Thank you.

Regards,
®om


More information about the openssh-unix-dev mailing list