Re: Redirect 127.0.0.1 to host IP?

From: Richard E. Silverman (res_at_qoxp.net)
Date: 06/25/04

  • Next message: Richard E. Silverman: "Re: ssh without password" 
    Date: 24 Jun 2004 23:47:33 -0400

    >>>>> "Glenn" == Glenn <glchin@hotmail.com> writes:

        Glenn> Is it possible to configure ssh to redirect requests sent to
        Glenn> 127.0.0.1:22 to <host IP>:22 ?

    ssh -L 22:<host IP>:22 ...

    This will usually need to be run as root in order to bind the "privileged"
    port 22.

        Glenn> If not, I can use a user-mode program to do this task,

    What do you mean by "user-mode?" This term is usually used as distinct
    from "kernel mode," but that doesn't make sense here. And if you mean
    root vs non-root, that doesn't make sense either as you want it to bind a
    low port.

    Also, your comment suggests you simply want to redirect connections
    to/from a single host. You could use an SSH client this way, but it would
    provide no security, and it might be simpler to just use something else,
    e.g. the redirection facility of netfilter.

        Glenn> but is security potentially compromised when reading from and
        Glenn> sending to TCP sockets?

    I don't understand this question. 

    -- 
  Richard Silverman
  res@qoxp.net
  • Next message: Richard E. Silverman: "Re: ssh without password"

    Relevant Pages

    • Re: About named port binding
      ... > and anyuser except root can bind or use a port above 1024. ... Not illegal, uid 0 can become any user, but any uid cannot become uid 0 ...
      (Focus-Linux)
    • Re: About named port binding
      ... > and anyuser except root can bind or use a port above 1024. ... > But named process uses udp port 53 with named uid. ...
      (Focus-Linux)
    • Re: About named port binding
      ... > and anyuser except root can bind or use a port above 1024. ... setuidand setgid() and friends to drop root privs. ...
      (Focus-Linux)
    • RE: Ports 0-1023?
      ... a root owned one that checks ACL's ... and actually binds the port, and a LD_PRELOAD ed library that replaced the ... Can't remember the name of the program, but it was there on freshmeat not ... it'd run a library preload against bind() on ...
      (Vuln-Dev)
    • Re: Hardening a Solaris system.
      ... > I know files that execute with root permissions by normal users (e.g. ... > I've set up a web server, running Apache, so are thinking about what I ... thing to leave enabled in here might be a backup port. ... there are security steps here. ...
      (comp.unix.solaris)