[Bug 1572] accept SOCKS requests over the mux socket in master mode

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Fri Mar 13 17:01:32 EST 2009


https://bugzilla.mindrot.org/show_bug.cgi?id=1572





--- Comment #7 from Jim Knoble <jmknoble at pobox.com>  2009-03-13 17:01:31 ---
On 2009-03-12 19:51, William Ahern wrote:

: The way I implemented it was I re-wrote the the -L and -R parser to
be
: more generic, using a small state machine rather than ad-hoc string
: parsing. The most straight-forward syntax would be to require domain
: paths to be between braces; then there's no conflict (unless your
path
: contains brances, but you can escape those), and you don't even
: necessarily need to require absolute paths, because the brace syntax
: can bootstrap you into a new syntax domain.  For instance:
: 
:       -R[/tmp/remote-foo]:[/tmp/local-bar]

This is interesting.  Salvo had proposed using curly braces '{' and '}'
for this, which may be necessary, as IPv6 addresses are curently
allowed
to be inside square brackets '[' and ']'.  Haven't looked at the code,
though.

: Or perhaps:
: 
:      
-R[unix://some/relative/path/remote-foo]:[unix:///tmp/local-bar]

Aha.  Thanks, William, for pointing out what I missed: the possibility
of relative paths for the remote end.

This is very interesting, and obviously URI-style specifiers are
relatively commonplace these days.  I would get rid of the '//' after
the ':', as it is supposed to denote a host, but with Unix domain
sockets, the host is implied to be one of the hosts at either end of
the
SSH connection.  Thus:

    -R[unix:some/relative/path/remote-foo]:[unix:/tmp/local-bar]

should be sufficient.  I don't mind the extra typing associated with
the
square brackets and the URI-style specifier, as i suspect this usage
wouldn't be terribly commonplace anyway.  It also allows square
brackets
to be used without conflicting with the optional square brackets around
IPv6 addresses.  I'm in favor of this.

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list