Displaying 4 results from an estimated 4 matches for "sshvpn".
Did you mean:
sshv1
2016 Apr 23
2
StreamLocal forwarding
...teway for this example, but will be unique
once deployed in volume):
/usr/bin/ssh -o CheckHostIP=yes -o LogLevel=INFO -o
ServerAliveCountMax=3 -o ServerAliveInterval=5 -o
StrictHostKeyChecking=yes -o TCPKeepAlive=yes -o
StreamLocalBindUnlink=yes -o ExitOnForwardFailure=yes -o BatchMode=yes
-nN -R /sshvpn/gateway:127.0.0.1:22 -p 52221 sshvpn at host
On the server:
Match User sshvpn
ChrootDirectory /var/sshvpn/
AllowTCPForwarding no
AllowStreamLocalForwarding yes
StreamLocalBindUnlink yes
Then to connect to the client:
$ ssh -o ProxyCommand='socat /var/sshvpn/sshvpn/gateway' root...
2016 May 03
2
StreamLocal forwarding
...volume):
> >
> > /usr/bin/ssh -o CheckHostIP=yes -o LogLevel=INFO -o
> > ServerAliveCountMax=3 -o ServerAliveInterval=5 -o
> > StrictHostKeyChecking=yes -o TCPKeepAlive=yes -o
> > StreamLocalBindUnlink=yes -o ExitOnForwardFailure=yes -o BatchMode=yes
> > -nN -R /sshvpn/gateway:127.0.0.1:22 -p 52221 sshvpn at host
> >
> > On the server:
> >
> > Match User sshvpn
> > ChrootDirectory /var/sshvpn/
> > AllowTCPForwarding no
> > AllowStreamLocalForwarding yes
> > StreamLocalBindUnlink yes
> >
> > Then...
2016 May 04
4
Dynamic Remote Port forward?
...cular case, I have many routers running OpenWRT, using
sshtunnel to establish a persistent connection to my central server. I want
to be able to reach systems behind the gateways.
I currently have the sshtunnel configuration set up as follows:
On the router:
ssh StreamLocalBindUnlink=yes -nN -R /sshvpn/gateway-xxxx:127.0.0.1:22
sshvpn at central
In this way, should I want to connect to a system behind the router, I can
first establish a new SSH connection back to the router itself, from the
central server:
ssh -o ProxyCommand='socat UNIX:/sshvpn/gateway-xxxx -' -D 1080
root at gateway-x...
2016 May 03
3
StreamLocal forwarding
...> I tried moving the StreamLocalBindUnlink directive outside of the Match
> rule, and it worked. But that doesn't explain why the Match was not
> correctly setting the directive:
>
> This is running on an alternate port with -ddd:
>
> debug3: checking match for 'User sshvpn' user sshvpn host 196.209.244.243
> addr 196.209.244.243 laddr 176.9.9.247 lport 52221
> debug1: user sshvpn matched 'User sshvpn' at line 91
> debug3: match found
> debug3: reprocess config:92 setting ChrootDirectory /var/sshvpn/
> debug3: reprocess config:93 setting All...