OpenSSH
[Top] [All Lists]

Re: tunneling through stdin/stdout, source routing

To: Simon Richter <Simon.Richter@hogyros.de>
Subject: Re: tunneling through stdin/stdout, source routing
From: John Davidorff Pell <johnpell@gmail.com>
Date: Mon, 13 Nov 2006 16:14:10 -0800
Cc: openssh-unix-dev@mindrot.org
Delivered-to: sp-com-lists@consult.net
Delivered-to: openssh-unix-dev-list1@securepoint.com
Delivered-to: openssh-unix-dev-tmda@mindrot.org
Delivered-to: openssh-unix-dev@mindrot.org
In-reply-to: <4555C24C.7000007@hogyros.de>
List-archive: <http://lists.mindrot.org/pipermail/openssh-unix-dev>
List-help: <mailto:openssh-unix-dev-request@mindrot.org?subject=help>
List-id: Development of portable OpenSSH <openssh-unix-dev.mindrot.org>
List-post: <mailto:openssh-unix-dev@mindrot.org>
List-subscribe: <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=subscribe>
List-unsubscribe: <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=unsubscribe>
References: <4555C24C.7000007@hogyros.de>
Sender: openssh-unix-dev-bounces+openssh-unix-dev-list1=securepoint.com@mindrot.org
couldn't some carefully constructed host directives in the config file do this?

e.g.:
host cookie
        hostname monster
        ProxyCommand ssh -t -l ralph monster ssh -t -l root cookie


Whadayathink?

JP

On Nov 11, 2006, at 4:30 AM, Simon Richter wrote:

Hi,

quite often I find myself using commands like

$ ssh foo nc bar 12345

to connect to another host behind a firewall, and I also have a lot of
these commands in my ssh config file. Since this relies on the server
having netcat available (which a lot don't, or in some really old
version that will not shut down properly) it breaks often, and I wonder
whether it would make sense to have an option in the ssh client that
told it to connect to the server, then open a tunneled connection and
connect that to stdin/stdout.

As an extension, there could also be a source routing option in the
config file that would take care of setting up a chain of ssh
connections if I need multiple hops.

As far as I can see this requires no special support from the server, so
should be easy to implement; I'm not sure though how I would go about
implementing such a thing in OpenSSH because of the development model
that would effectively require me to run OpenBSD to test my patches
before submitting them.

Any ideas?

   Simon
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
<Prev in Thread] Current Thread [Next in Thread>