Displaying 2 results from an estimated 2 matches for "allowforwardingto".
2004 Oct 12
0
Feature request(s) for OpenSSH
...g (with an
appropriate LogLevel setting VERBOSE, DEBUG?) the user and the dest
ip/port combination setup, to enable sensible auditing controls to be in
place for forwarded connections.
2) Add a new sshd_config option to control port forwarding based based on
forwarded destination IPs and ports e.g.
AllowForwardingTo *:80
AllowForwardingTo 1.2.3.4:8080
AllowForwardingTo 6.7.8.9
DenyForwardingTo *
3) If possible restrict forwarding on a per group/user basis at the global
configuration level, rather than on an individual basis in there
authorized_keys file.
Cheers
Gareth
2000 Jun 11
0
Additions to UPGRADING?
...s
files. I encountered it with the authorized_keys file (as it made a
key unusable), and I haven't tested how the OpenSSH sshd reacts to
having the unavailable flags in sshd_config:
m. Options unavailable in sshd_options and authorized_keys.
The AccountExpireWarningDays, AllowForwardingPort, AllowForwardingTo,
AllowHosts, AllowSHosts, AllowTcpForwarding, DenyForwardingPort,
DenyForwardingTo, DenyHosts, DenySHosts, DenyTcpForwarding,
ForcedEmptyPasswdChange, ForcedPasswdChange, IdleTimeout,
IgnoreRootRhosts, PasswordExpireWarningDays, SilentDeny,
TISAuthentication, and Umask options are not available in...