search for: ssh_msg_global_request

...el-tcpip-forward' request. http://www.ietf.org/internet-drafts/draft-ietf-secsh-connect-17.txt says that | A port forwarding can be cancelled with the following message. | Note that channel open requests may be received until a reply to | this message is received. | | byte SSH_MSG_GLOBAL_REQUEST | string "cancel-tcpip-forward" | boolean want reply | string address_to_bind (e.g. "127.0.0.1") | uint32 port number to bind Is there a plan to support that request? Without that, ssh clients can not cancel '-R' port forwardings dynamically. Thank...

...expecting "port that was connected" in this message to be the dynamically allocated port so that it would always be a unique value, but this is not the case (at least with OpenSSH's sshd). Instead, it always seems to be the "port number to bind" value passed in the original SSH_MSG_GLOBAL_REQUEST "tcpip-forward" message (which is 0 since we're asking for a dynamic port). Unfortunately, I would imagine changing this behavior on the server side might break existing clients out there which are expecting to get this 0 value back in channel open requests when they set up a dynamic...

...expecting "port that was connected" in this message to be the dynamically allocated port so that it would always be a unique value, but this is not the case (at least with OpenSSH's sshd). Instead, it always seems to be the "port number to bind" value passed in the original SSH_MSG_GLOBAL_REQUEST "tcpip-forward" message (which is 0 since we're asking for a dynamic port). I did an experiment and was pleasantly surprised to find that the OpenSSH client does work correctly when the real port number is returned by the server. So, it won't break existing clients out there if t...

...sing deny/allow order. Given a few of hours of free time in the next week, I'd like to decide what to do about connections using other versions of the protocol (which currently bypass these restrictions) and further develop the approach to cover the other 2 major messages detailed below. * SSH_MSG_GLOBAL_REQUEST {"tcpip-forward", "cancel-tcpip-forward", "direct-tcpip"} returning SSH_MSG_REQUEST_FAILURE * SSH_MSG_CHANNEL_OPEN {"session", "x11", etc...} returning SSH_OPEN_ADMINISTRATIVELY_PROHIBITED I'm also going to resolve an issue where sftp-se...

http://bugzilla.mindrot.org/show_bug.cgi?id=413 ------- Additional Comments From dtucker at zip.com.au 2005-01-24 14:27 ------- Created an attachment (id=782) --> (http://bugzilla.mindrot.org/attachment.cgi?id=782&action=view) forward-bind.sh: regression test for binding port forwards to addresses Current limitations of test: - no testing of IPv6 - no testing of backwards compat

Dear all, For my thesis, I've been working on automatic inference of state machines for SSH servers. I ran into a couple of particularities regarding OpenSSH's inferred state machine, and was hoping some of you might be interested. Maybe you can even shed some light on it. Setup: I'm using LearnLib's (Java) version of the L* learning algorithm [1] to come up with sequences of