search for: bind_address

OpenSSH supports the -b bind_address argument for binding to a local IP address when connecting to a remote host. It's however currently not possible to specify a local port to bind to, something I've found useful at several occasions. Below is an unified diff that introduces the [-B bind_port] option to ssh(1) and a ssh_conf...

...t, which processes --help option, and for `ssh` binary I usually use Google + StackOverflow. Having --help option that works as an human friendly entrypoint for more information about command would certainly save some time. Current output from `ssh --help`: usage: ssh [-1246AaCfgkMNnqsTtVvXxY] [-b bind_address] [-c cipher_spec] [-D [bind_address:]port] [-e escape_char] [-F configfile] [-i identity_file] [-L [bind_address:]port:host:hostport] [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port] [-R [bind_address:]port:host:hostport] [-S ctl_path]...

...g/openssh-5.9p1/readconf.c openssh-5.9p1/readconf.c --- orig/openssh-5.9p1/readconf.c 2011-05-29 14:42:31.000000000 +0300 +++ openssh-5.9p1/readconf.c 2012-02-12 15:43:43.302048950 +0200 @@ -641,8 +641,10 @@ parse_char_array: goto parse_string; case oBindAddress: - charptr = &options->bind_address; - goto parse_string; + cpptr = (char**)&options->bind_addresses; + uintptr = &options->num_bind_address; + max_entries =SSH_MAX_BIND_ADDRESSES; + goto parse_char_array; case oPKCS11Provider: charptr = &options->pkcs11_provider; @@ -1176,7 +1178,7 @@ initialize_optio...

...t;, oHostKeyAlgorithms }, { "bindaddress", oBindAddress }, + { "bindport", oBindPort }, #ifdef ENABLE_PKCS11 { "smartcarddevice", oPKCS11Provider }, { "pkcs11provider", oPKCS11Provider }, @@ -634,6 +635,10 @@ parse_string: charptr = &options->bind_address; goto parse_string; + case oBindPort: + charptr = &options->bind_port; + goto parse_string; + case oPKCS11Provider: charptr = &options->pkcs11_provider; goto parse_string; @@ -1133,6 +1138,7 @@ initialize_options(Options * options) options->log_level = SYSLOG_LEVEL_...

http://bugzilla.mindrot.org/show_bug.cgi?id=1077 Summary: Descriptions for "ssh -D" and DynamicForward should mention they can specify "bind_address" optionally Product: Portable OpenSSH Version: -current Platform: All OS/Version: All Status: NEW Severity: trivial Priority: P5 Component: Documentation AssignedTo: bitbucket at mindrot.org Report...

...r 2004 21:00:26 -0500 (CDT)), Ben Lindstrom <mouring at etoh.eviladmin.org> says: > > > Be that true.. then one should review the usage of it in sshconnect.c > > which is the other place we do it. > > This (in sshconnect.c) should leave as "0" > since options.bind_address may be NULL. > (Note: host and/or port must non-NULL.) > Tell me how options.bind_address can reach getaddrinfo() as null. As I see it there is no possible way it can happen. [..] /* Bind the socket to an alternative local IP address */ if (options.bind_address == NULL)...

Hi all, A server with [GatewayPorts "yes"] also ignores client's remote bind_address parameter, contrary to what is implied by the current description. Cheers! Index: src/usr.bin/ssh/ssh.1 =================================================================== RCS file: /cvs/src/usr.bin/ssh/ssh.1,v retrieving revision 1.316 diff -u src/usr.bin/ssh/ssh.1 --- src/usr.bin/ssh/ssh.1 18 N...

https://bugzilla.mindrot.org/show_bug.cgi?id=2324 Bug ID: 2324 Summary: remote port forward w/ empty bind_address via multiplexed connection: doc violation Product: Portable OpenSSH Version: 6.7p1 Hardware: amd64 OS: Linux Status: NEW Severity: trivial Priority: P5 Component: ssh Assignee: una...

No answers on secureshell at securityfocus.com I must be doing something wrong or the server seems to ignore my bind request. Port forwarding is working it just bind to all ips and ignores my bind request. I've also tried this with an rfc1918 address opposed to a loopback and had the same results. Google and the archive haven't helped. Thanks in advance for your time and consideration.

https://bugzilla.mindrot.org/show_bug.cgi?id=2592 Bug ID: 2592 Summary: -R bind_address not working, always bind 0.0.0.0 Product: Portable OpenSSH Version: 7.2p1 Hardware: amd64 OS: Linux Status: NEW Severity: normal Priority: P5 Component: sshd Assignee: unassigned-bugs at mindrot.org...

...eveloping an application which uses on-the-fly SSH port forwarding by using the "~C" escape sequence to add local port forwards when needed (through Expect). It would appear that there is no option to remove local port forwards and only remote port forwards: ssh> -h Commands: -L[bind_address:]port:host:hostport Request local forward -R[bind_address:]port:host:hostport Request remote forward -KR[bind_address:]port Cancel remote forward I am hitting scalability issues as I am not able to cancel local forwards and after about 251 tunnels I am unable to a...

...l the ssh_config file does not, even in 7.9. > >It does, look for LocalForward Pardon me, I've been unclear. I don't mean TCP forwards but UNIX domain socket forwarding. I use LocalForward extensively in my ssh configs for tunnels, but although these command line options: -L [bind_address:]port:host:hostport -L [bind_address:]port:remote_socket -L local_socket:host:hostport -L local_socket:remote_socket work just fine for UNIX domain sockets, all my efforts with UNIX socket file paths have met with failure in the ssh config file, and the ssh_config(5) manual entry doe...

...Index: socket.c =================================================================== RCS file: /cvsroot/apps/rsync/socket.c,v retrieving revision 1.1.1.1 diff -u -r1.1.1.1 socket.c --- socket.c 4 Mar 2003 10:29:09 -0000 1.1.1.1 +++ socket.c 4 Mar 2003 10:55:34 -0000 @@ -290,59 +290,30 @@ * @param bind_address Local address to bind, or NULL to allow it to * default. **/ -static int open_socket_in(int type, int port, const char *bind_address, - int af_hint) +static int open_socket_in(struct addrinfo *resp) { int one=1; int s; - struct addrinfo hints, *all_ai, *resp; - char portbuf[10]; - int...

...OPENVMS_AXP */ /* -*- c-file-style: "linux" -*- Copyright (C) 1992-2001 by Andrew Tridgell <tridge@samba.org> @@ -105,7 +106,8 @@ bhints.ai_family = ai_family; bhints.ai_socktype = ai_socktype; bhints.ai_flags = AI_PASSIVE; - if (getaddrinfo(bind_address, NULL, &bhints, &bres_all) == -1) { + error = getaddrinfo(bind_address, NULL, &bhints, &bres_all); + if (error == -1) { rprintf(FERROR, RSYNC_NAME ": getaddrinfo %s: %s\n", bind_address, gai_strerror(error));...

...om http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/ssh.1 Comments welcome. ================ ssh.1.patch ================ --- ssh.1 2012/09/15 16:08:48 1.1 +++ ssh.1 2012/09/15 20:23:35 @@ -51,13 +51,13 @@ .Op Fl F Ar configfile .Op Fl I Ar pkcs11 .Op Fl i Ar identity_file -.Op Fl L Oo Ar bind_address : Oc Ns Ar port : Ns Ar host : Ns Ar hostport +.Op Fl L Oo Ar bind_address : Oc Ns Ar localport : Ns Ar remoteaddr : Ns Ar remoteport .Op Fl l Ar login_name .Op Fl m Ar mac_spec .Op Fl O Ar ctl_cmd .Op Fl o Ar option .Op Fl p Ar port -.Op Fl R Oo Ar bind_address : Oc Ns Ar port : Ns Ar host :...

Changes since OpenSSH 6.4 ========================= This is a feature-focused release. New features: * ssh(1), sshd(8): Add support for key exchange using elliptic-curve Diffie Hellman in Daniel Bernstein's Curve25519. This key exchange method is the default when both the client and server support it. * ssh(1), sshd(8): Add support for Ed25519 as a public key type. Ed25519 is a

...Component: ssh-agent Assignee: unassigned-bugs at mindrot.org Reporter: lwaynewalker at gmail.com The usage message and the man page both show that [-c | -s] [-Dd] are compatible with [command [arg ...]]. ``` $ ssh-agent -D /bin/bash usage: ssh-agent [-c | -s] [-Dd] [-a bind_address] [-E fingerprint_hash] [-P provider_whitelist] [-t life] [command [arg ...]] ssh-agent [-c | -s] -k $ ``` The SYNOPSIS and the usage message should both be changed to show that they are incompatible. This would have saved me hours: usage: ssh-agent [-a bind_address] [-E f...

...er at host PTY allocation request failed on channel 0 Linux hostname 2.6.32-5-amd64 #1 SMP Mon Oct 3 03:59:20 UTC 2011 x86_64 cat ~/.ssh/authorized_keys no-pty ssh-rsa AAAA..5KS3+Q== ssh -v OpenSSH_5.5p1 Debian-6+squeeze3, OpenSSL 0.9.8o 01 Jun 2010 usage: ssh [-1246AaCfgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec] [-D [bind_address:]port] [-e escape_char] [-F configfile] [-I pkcs11] [-i identity_file] [-L [bind_address:]port:host:hostport] [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port] [-R [bind_address:]port:host:host...

...icecast/src/config.c IceCast/src/config.c --- icecast/src/config.c 2003-03-14 21:10:17.000000000 -0500 +++ IceCast/src/config.c 2003-04-18 10:15:44.000000000 -0400 @@ -127,6 +127,7 @@ xmlFree(c->error_log); for(i=0; i < MAX_LISTEN_SOCKETS; i++) { if (c->listeners[i].bind_address) xmlFree(c->listeners[i].bind_address); + if (c->listeners[i].default_mount) xmlFree(c->listeners[i].default_mount); } if (c->master_server) xmlFree(c->master_server); if (c->master_password) xmlFree(c->master_password); @@ -266,6 +267,7 @@ configurat...

....1, OpenSSL 1.0.2g 1 Mar 2016 Would you support a patch to add "ssh --version" this is the standard way to check the version, it is unclear what version ssh from the help output, so could add it to that as well. If there was agreement. $ ssh usage: ssh [-1246AaCfGgKkMNnqsTtVvXxYy] [-b bind_address] [-c cipher_spec] [-D [bind_address:]port] [-E log_file] [-e escape_char] [-F configfile] [-I pkcs11] [-i identity_file] [-L address] [-l login_name] [-m mac_spec] [-O ctl_cmd] [-o option] [-p port] [-Q query_option] [-R address] [-S ctl_path] [-W host:po...