Re: Question about SSH, well duh.

From: Richard E. Silverman (res_at_qoxp.net)
Date: 07/26/03

  • Next message: Darren Tucker: "Re: socks5 in OpenSSH [was: Forwarding HTTP traffic through SSH using Windows]" 
    Date: 26 Jul 2003 01:15:32 -0400

    > OK that makes perfect sense. Now is it then possible to go from a SSH
    > server to yet another trusted SSH server from the client, which would
    > be like this:
    > SSH cleint>SSH Server>SSH Server and back again. This would make the
    > middle SSH Server unable to decrypt teh information, correct?

    It depends on what you mean by "go from." If you're doing this:

      A% ssh B ssh C

    then the data is decrypted by B and re-encrypted for transport over the
    second SSH connection. However, if you funnelled the first SSH connection
    through the second by proxying or tunnelling, then B would have no special
    vantage point with regard to the data. E.g.

      A% ssh -o proxycommand="ssh B nc C 22" C

    or

      A% ssh -L 1234:C:22 B
      A% ssh localhost -p 1234 -o hostkeyalias=C 

    -- 
  Richard Silverman
  res@qoxp.net
  • Next message: Darren Tucker: "Re: socks5 in OpenSSH [was: Forwarding HTTP traffic through SSH using Windows]"

    Relevant Pages

    • Re: Safest way of accessing a home computer from outside?
      ... what if I my router doesent have a public IP ... use for ssh is forwarded to your ssh server. ... You can find Hamachi at ...
      (Fedora)
    • Re: Safest way of accessing a home computer from outside?
      ... what if I my router doesent have a public IP ... I agree - ssh with no password and then use certificates to ... use for ssh is forwarded to your ssh server. ... You can find Hamachi at ...
      (Fedora)
    • Re: AIX 5.2L "who" question
      ... SSH is corrupting the utmp file! ... where did you get the SSH server you are running? ... We have a 44P-270 running AIX 5.2L, when users connected via ssh they can't ... Monitoring ...
      (AIX-L)
    • Re: Remote Desktop from Linux console
      ... if your running a SSH server on L you can connect to V using RDC through the SSH tunnel. ... I do, or did, that all the time when I ran a SSH server on either a PC inside my router or on the router itself, ie. DD-WRT running on the router. ...
      (microsoft.public.windows.vista.networking_sharing)
    • Re: get into the private campus server
      ... Once the ssh connection is established, ... you're not careful and the outside ssh server gets compromised, ... attackers will have a free ride into the campus network, ...
      (comp.os.linux.networking)