search for: client_request_forwarded_tcpip

...t to me :-) so it seems not to be implemented yet. Actually, remote forwarding is negotiated within some protocol between ssh and sshd. No problem to change this slightly with a private patch. If it only wouldn't incompatibly change the protocol. So my idea is to implement it in a way that client_request_forwarded_tcpip() in clientloop.c checks originator_port for being in the priveleged range and - if yes - uses a privileged port to connect. Any comments? Regards, Robert -- Robert.Dahlem at siemens.com Siemens Business Services - SBS D ORS FS BO DEZ KORDOBA-Outsourcing Tel: +49-69-797-6530 Fax: +...

...14 for forwarding to host localhost port 81 So far, so good! Connecting to port 60013 worked fine, causing the client to connect to localhost:80 as requested, with the following debug output: quad:~>debug1: client_input_channel_open: ctype forwarded-tcpip rchan 5 win 2097152 max 32768 debug1: client_request_forwarded_tcpip: listen localhost port 0, originator ::1 port 60153 debug2: fd 9 setting O_NONBLOCK debug1: connect_next: host localhost ([::1]:80) in progress, fd=9 debug2: fd 9 setting TCP_NODELAY debug3: fd 9 is O_NONBLOCK debug3: fd 9 is O_NONBLOCK debug1: channel 1: new [::1] debug1: confirm forwarded-tcpip d...

...nator IP and port, but server app on computer with ssh client will never see this -------------------------------------------------------------------------------------------------------------------------- debug1: client_input_channel_open: ctype forwarded-tcpip rchan 6 win 131072 max 32768 debug1: client_request_forwarded_tcpip: listen localhost port 80, originator 81.910.872.450 port 50454 debug1: channel 7: new [81.910.872.450] debug1: confirm forwarded-tcpip debug1: channel 7: connected debug1: channel 7: free: 81.910.872.450, nchannels 11 --------------------------------------------------------------------------------...

...d port 60014 for forwarding to host localhost port 81 So far, so good! Connecting to port 60013 worked fine, causing the client to connect to localhost:80 as requested, with the following debug output: debug1: client_input_channel_open: ctype forwarded-tcpip rchan 5 win 2097152 max 32768 debug1: client_request_forwarded_tcpip: listen localhost port 0, originator ::1 port 60153 debug1: connect_next: host localhost ([::1]:80) in progress, fd=9 debug1: channel 1: new [::1] debug1: confirm forwarded-tcpip debug1: channel 1: connected to localhost port 80 However, connecting to port 60014 did not work as expected. In that c...

...forwarding "ssh -R 20000:localhost:22 xxx at x.x.x.x". The tunnel is set up. But when I write data to the tunnel, the ssh client failed to forward the data to the localhost. The debug is below: debug1: client_input_channel_open: ctype forwarded-tcpip rchan 2 win 131072 max 32768 debug1: client_request_forwarded_tcpip: listen localhost port 20000, originator 127.0.0.1 port 36478 connect_to localhost: unknown host (No such file or directory) debug1: failure forwarded-tcpip The code relevant is here: 3133 /* Return CONNECTING channel to remote host, port */ 3134 static Channel * 3135 connect_to(const char *host...

...NING: Server requests forwarding for unknown listen_port %d", > listen_port); > return NULL; > } > > Note that it checks here that a host_to_connect is set, but it doesn't > even pass in the listen_address to match against when this is called > from client_request_forwarded_tcpip() in clientloop.c. This means > you can't actually have two different listeners on the server side > with the same port listening on different addresses and forwarding to > different destinations. > > My suggestion is to keep the portion of my change which fills in the > prope...

...===================== RCS file: /home/markus/cvs/ssh/clientloop.c,v retrieving revision 1.84 diff -u -r1.84 clientloop.c --- clientloop.c 11 Oct 2001 15:24:00 -0000 1.84 +++ clientloop.c 22 Oct 2001 18:23:38 -0000 @@ -1042,6 +1042,7 @@ quit_pending = 1; } +#ifdef WITH_TCPFWD static Channel * client_request_forwarded_tcpip(const char *request_type, int rchan) { @@ -1078,7 +1079,9 @@ xfree(listen_address); return c; } +#endif /* WITH_TCPFWD */ +#ifdef WITH_X11FWD static Channel* client_request_x11(const char *request_type, int rchan) { @@ -1118,7 +1121,9 @@ c->force_drain = 1; return c; } +#endif /*...

Hi, Just a usecase that I'm sure has been covered before but just in case its not an openssh solution would be very helpful. I was trying to install software on a server that was firewalled so no outbound http connections would work. I was also tunnelling via another server. Outbound ssh connections also were a convenient option. What would have been nice would be a remote version of

...sh, "")) != 0 || /* language tag */ (r = sshpkt_send(ssh)) != 0 || (r = ssh_packet_write_wait(ssh)) != 0) - fatal("%s: %s", __func__, ssh_err(r)); + fatal("%s: send disconnect: %s", __func__, ssh_err(r)); channel_free_all(ssh); @@ -1502,7 +1502,7 @@ client_request_forwarded_tcpip(struct ssh *ssh, const char *request_type, (r = sshpkt_get_cstring(ssh, &originator_address, NULL)) != 0 || (r = sshpkt_get_u32(ssh, &originator_port)) != 0 || (r = sshpkt_get_end(ssh)) != 0) - fatal("%s: %s", __func__, ssh_err(r)); + fatal("%s: parse pack...

Hi, OpenSSH 8.0p1 is almost ready for release, so we would appreciate testing on as many platforms and systems as possible. Snapshot releases for portable OpenSSH are available from http://www.mindrot.org/openssh_snap/ The OpenBSD version is available in CVS HEAD: http://www.openbsd.org/anoncvs.html Portable OpenSSH is also available via git using the instructions at