search for: rfc1928

Hi, Currently, OpenSSH only accepts the SOCKS5 command "CONNECT": <https://anongit.mindrot.org/openssh.git/tree/channels.c#n1281> The RFC also specifies the commands "BIND" and "UDP ASSOCIATE": <https://tools.ietf.org/html/rfc1928#section-4> As a consequence, in particular, a SOCKS5 server started with "ssh -D" cannot proxify UDP packets. Are there deep reasons why OpenSSH does not implement them (security, or whatever)? Thank you. Regards, ?om

...ww.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/channels.c?rev=1.332;content-type=text%2Fplain Search for: "SSH_SOCKS5_NOAUTH not found" If a connection to SSH-SOCKS5 is established and a unsupported auth method is sent, SSH will not reply anything. According to http://tools.ietf.org/html/rfc1928 the server could (it does not state if the server MUST or SHOULD, hence "could" ;) ) send simply X'FF' NO ACCEPTABLE METHODS - with this a client can do appropriate handling. Would like to hear your thoughts if I am misinterpreting rfc1928, or I should just suck it up and handle...

Hi, has anybody seen a patch that provides socks version 5 support for the dynamic portforwarding feature? I?ve seen thats implemented in ssh.com?s ssh version, but found nothing about openssh. Only thing i found was a patch to provide socks4a. cu sleepi

...everse tethering would have been easy. Unfortunately, if UDP packets are not relayed, it does not work. An alternative would be to use a tun device on the host and forward the packets (what SimpleRT? does), but this requires root access on the host. Regards, ?om ? <https://tools.ietf.org/html/rfc1928#section-7> ? <https://github.com/vvviperrr/SimpleRT>

here's an up-to-date patch, should apply to both openbsd and non-openbsd versions of openssh. i did only test ipv4 addresses. Index: channels.c =================================================================== RCS file: /cvs/src/usr.bin/ssh/channels.c,v retrieving revision 1.191 diff -u -r1.191 channels.c --- channels.c 24 Jun 2003 08:23:46 -0000 1.191 +++ channels.c 25 Jun 2003 12:14:19

Hi, i've set the outside ip for the jail..It works.. When i try to ssh to jail'ed system from the main system (in which is created jail) the connection is successful, but when i try to connect to jailed system from anywhere else i get this message: ssh: connect to host IP_NUMBER port 22: Operation timed out What can be wrong here? How to solve this problem?