Displaying 20 results from an estimated 2000 matches similar to: "HOWTO (advanced) ssh transparent proxy jump"
2018 Apr 10
2
Route certain trafic via a tinc node that is not directly connected.
On Tue, Apr 10, 2018 at 03:36:08PM +0200, Hans de Groot wrote:
> hosta <--> hostb <--> hostc
>
> Hosta and hostc are not directly connected via tinc. But both are conncted
> via hostb (I called my network tincnet). This works fine I can ssh from
> hosta to hostc and vice versa without any problems.
>
> hostc is in a whitelisted iprange at some service
2003 Sep 12
1
Agent Forwarding Anomalies on OpenBSD 3.3/OpenSSH 3.6.1
I have a curious situation with four OpenBSD 3.3 hosts.
Each of these has public/private keys on each other for inter-host
authentication using RSA2 keys.
For instance, they're called hostA-to-hostBCD, hostB-to-hostACD,
hostC-to-hostABD, and hostD-to-hostABC.
The sshd_config files, on each host, look as follows...
#;
#; /etc/ssh/sshd_config
#;
Port 22
Protocol 2
ListenAddress
2014 May 14
2
Option to turn off listen port, e.g. client only mode
Hey,
I have this setup on my small test tinc-vpn.
HostA (runs on a server and is publicly accessible)
HostB (runs on my laptop (behind firewall) sometimes and connects to HostA)
HostC (runs on a Amazon AWS server (behind firewall) to test long uptime and connects to HostA)
This setup allows me to communicate from HostB to HostC thru HostA without any issues.
Everything works great, but I
2006 Jun 20
2
[PATCH] openssh pseudo-terminal bug
hello
short description:
ssh client sends a wrong all-zero terminal info when requesting forced pseudo-terminal
allocation while stdin is not a terminal.
sshd then sets the terminals ospeed to 0 because it receives this information from the
client. on solaris this means that the pseudo-terminal is closed and output of any
remote command is dropped.
longer description:
what we're doing is
2018 Apr 11
1
Route certain trafic via a tinc node that is not directly connected.
On 11 April 2018 at 11:30, Hans de Groot <hansg at dandy.nl> wrote:
> Hello again :)
>
> Thank you all for your reply's. Below are the config files of the 3 hosts.
> I use tinc in router mode. I do not have a kernel mode config lines
> anywhere so tinc must be using the default settings here.
>
> I added the ipaddressx to subnets on hostc and this works. Traffic
2012 Aug 13
1
iptables: cannot port forward
Easy question here: I have a test network that looks like this
(apologies for my lack of ascii skills):
[hostc]---------------[Firewall]192.168.42.1 (EXTIF: eth0) /10.0.0.1
(INTIF: eth1)
192.168.42.10 (wan) |(lan)
|
+-------------[hosta] 10.0.0.10 (port 4242)
|
+-------------[hostb]
2018 Mar 31
5
Help on a Nat To Nat soluction - tinc servers won't ping remote clients
I have a three tinc server setup, similar to "4.3 How Connections Work" using the configuration mostly likehttp://ostolc.org/site-to-site-vpn-with-tinc.html
The clients (Ubuntus, Debians and Windows 10s) can all ping (and SSH) to each other remotely.
As far as that is concerned it's working great - thanks so much for some great software.
However, on each of the Tinc servers (A and
2015 Jul 31
0
Indirect routing issue?
Hi there,
I am experiencing an annoying but not critical issue with (I think)
tinc's internal routing. My setup is this:
HostA (local. ConnectTo = HostC)
HostB (geographically close. ConnectTo = HostC)
HostC (far away. ConnectTo = nothing)
Without tinc, pings from HostA to HostB take around 10ms, and from
HostA/B to HostC around 200ms.
With tinc, pings from HostA to HostB take nearly
2018 Apr 11
0
Route certain trafic via a tinc node that is not directly connected.
Hello again :)
Thank you all for your reply's. Below are the config files of the 3 hosts.
I use tinc in router mode. I do not have a kernel mode config lines
anywhere so tinc must be using the default settings here.
I added the ipaddressx to subnets on hostc and this works. Traffic to
that ip is now routed via hostc.
But since this ipaddressx address changes often I need to resolve it
2018 Apr 10
0
Route certain trafic via a tinc node that is not directly connected.
Hello List,
I have this setup:
hosta <--> hostb <--> hostc
Hosta and hostc are not directly connected via tinc. But both are
conncted via hostb (I called my network tincnet). This works fine I can
ssh from hosta to hostc and vice versa without any problems.
hostc is in a whitelisted iprange at some service provider.
I need hosta to talk to a certain ip (lets call it
2001 Oct 21
1
About mirroring in both sides
I am taisaki
About how to carry out mirroring with both server
Although I would like you to teach
About rsync, although it is a question, this time
hostA hostB It is related with ssh connection.
authorized_keys is held on both sides. In the environment which can be
used satisfactory
hostA /export/Data
The following directories
hostB /export/temp
a mirror is carried out to below --
2012 Jul 12
3
ssh port forwarding
Hello Everyone,
I am having a problem with setting up port forwarding from one of our local
CentOS machines to an AWS EC2 instance. We are wanting to make mysql
connections over an ssh tunnel.
In this case, lets say that hostA is our local machine, and hostB is the
Amazon EC2 instance. I have tried several different variations (that I have
found from google searching), including:
from hostA: ssh
2008 Aug 13
0
ProxyCommand and ExitOnForwardFailure = leftover process
Hi,
I'm having a small problem when using ProxyCommand and
ExitOnForwardFailure in combination with OpenSSH 5.1 under Ubuntu
8.04.
In order to enable multihop scp and port forwarding, I have enabled
automatic public key authenticated tunneling from hostA to hostC via
hostB using ProxyCommand in my private .ssh/config file on hostA.
<end of .ssh/config>:
host hostB
user X
hostC
2002 Feb 25
1
problem with tinc pre5
Hello,
I have 2 hosts HostA and HostB
HostA - 10.38.9.2, kernel 2.4.16, tincd from Debian package
HostB - 10.38.9.223, kernel 2.2.17-21mdk, tincd from tarball package.
HostA:
------------------------------
/etc/tinc/test4/tinc.conf
Name = HostA
ConnectTo = HostB
TapDevice = /dev/misc/net/tun
PrivateKeyFile = /etc/tinc/test4/rsa_key.priv
/etc/tinc/test4/hosts/HostA
Subnet = 10.0.0.0/8
Port =
2001 Oct 25
2
Both directions Mirror
Good evening
I use d as follows.
(It is every 5 minutes from Cron)
#!/bin/sh
LOCK=/tmp/lock.pid
if [ ! -e $LOCK ]; then
echo 1 > $LOCK
rsync -ave ssh --delete /export/mirror user@hostB:/export
rsync -ave ssh --delete user@hostB:/export/ /export/mirror/
rm > $LOCK
fi
However, now, it is.
It will be deleted even when a file is created on both sides.
Should the script
2011 Feb 03
3
2.6.2 excluding an exported resource
I have the class below to export host entries.
However I wish to override the entry for my host to 127.0.0.1
So for all of the hosts other than foo.bar.com I would like them to
have the real IP address but for foo.bar.com I would like to just have
the loopback host entry. 2.6.2 doesn''t allow multiple tags and if I
put in another entry for localhost there is a collision.
Is there any
2003 Mar 12
1
Problems with ! -p
Hi there,
rsync version 2.5.5 protocol version 26.
I seem to be having some trouble using rsync to ignore permissions on a
remote host when syncing back to a local host. I want it to listen to
the umask of the user running the rsync locally. Eg:
[remote host - I've touched a file made it 4750, etc, etc]
hostb $ mkdir -p /data/rsync/temp
hostb $ touch /data/rsync/temp/foo
hostb $ chgrp
2009 Jan 12
1
Is -R --link-dest really hard to use, or is it me?
I've got a problem for which the combination of -R and --link-dest
doesn't seem to be quite enough---and I may have discovered a few
small bugs as well; test cases are below.
[And if someone has a scheme for doing this that doesn't involve rsync
at all, but works okay, I'm all ears as well---I'm not the first with
this problem.]
Here's my problem: I unfortunately need to
2015 Jun 11
2
tinc as layer 2 switch doesn't automatically mesh with other nodes
We have a handful of nodes set up. Some are NAT'd but a few have direct
access to the Internet.
Sample confs:
HostA:
Name = HostA
AddressFamily = any
Interface = tap0
Mode = switch
Connectto = HostB
GraphDumpFile = /tmp/mesh
HostB:
Name = HostB
AddressFamily = any
Interface = tap0
Mode = switch
Connectto = HostA
GraphDumpFile = /tmp/mesh
And so on. If I use HostA as the main meta sever.
2012 Mar 13
1
Error recovery
I am trying to figure out what happens in the following scenario:
I use rsync to copy files from hostA:/dir1 to hostB:/dir1
with the command (from hostB)
rsync -abvt --delete-after --suffix=~ hostA:/dir1 /dir1
So if fileA exists already on both boxes (it has previously been
rsynce-d) and
fileA changes on hostA.
rsync starts from hostB, fileA starts transfer.
If the transfer aborts before it