search for: sshdfwd

http://bugzilla.mindrot.org/show_bug.cgi?id=389 Summary: Sshdfwd-<port> Product: Portable OpenSSH Version: -current Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Build system AssignedTo: openssh-unix-dev at mindrot.org R...

http://bugzilla.mindrot.org/show_bug.cgi?id=390 Summary: Sshdfwd-<port> Product: Portable OpenSSH Version: -current Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: openssh-unix-dev at mindrot.org ReportedB...

http://bugzilla.mindrot.org/show_bug.cgi?id=390 stevesk at pobox.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |DUPLICATE ------- Additional Comments From stevesk at pobox.com 2002-08-30

http://bugzilla.mindrot.org/show_bug.cgi?id=389 ------- Additional Comments From stevesk at pobox.com 2002-08-30 07:12 ------- *** Bug 390 has been marked as a duplicate of this bug. *** ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the assignee.

...581,6 +586,30 @@ channel_post_port_listener(Channel *c, f } remote_hostname = get_remote_hostname(newsock); remote_port = get_peer_port(newsock); +#ifdef LIBWRAP + { + char fwd[80]; + void (*sigch) (int); + int res; + struct request_info req; + + snprintf(fwd, sizeof(fwd), "sshdfwd-%d", c->host_port); + request_init(&req, RQ_DAEMON, fwd, RQ_FILE, newsock, NULL); + fromhost(&req); + sigch = signal(SIGCHLD, SIG_DFL); + res = hosts_access(&req); + signal(SIGCHLD, sigch); + if (!res) { + packet_send_debug("refused forwarded connection from...

...erity; +#endif /* LIBWRAP */ /* -- channel core */ @@ -1006,6 +1012,25 @@ error("accept: %.100s", strerror(errno)); return; } +#ifdef LIBWRAP + /* XXX LIBWRAP noes not know about IPv6 */ + { + struct request_info req; + + request_init(&req, RQ_DAEMON, "sshdfwd-X11", RQ_FILE, newsock, 0); + fromhost(&req); + + if (!hosts_access(&req)) { + syslog(deny_severity, "refused fwd-X11 connect from %s", eval_client(&req)); + close(newsock); + + return; + } + syslog(allow_severity, "fwd-X11 connec...

...try_first_pass debug sshd account sufficient /usr/lib/security/pam_afs.so.1 ignore_root sshd account required /usr/lib/security/pam_unix.so.1 try_first_pass debug other session required /usr/lib/security/pam_unix.so.1 * tcpd/allow: sshd:.lrz-muenchen.de:rfc931 sshdfwd-X11:.lrz-muenchen.de:rfc931 * sshd.cf: Port 222 ListenAddress 0.0.0.0 HostKey /usr/local/etc/openssh/host_key ServerKeyBits 768 LoginGraceTime 600 KeyRegenerationInterval 3600 PermitRootLogin yes IgnoreRhosts no StrictModes yes X11Forwarding yes X11DisplayOffset 10 PrintMotd yes Kee...