Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Make -D behave like -L (obey GatewayPorts). Before it defaulted to listen 

to wildcard which is not secure.
This commit is contained in:
christos 2005-09-18 18:27:28 +00:00
parent 218a95c0f2
commit 5391e24af6
2 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
crypto/dist/ssh/ssh.1 vendored
View File

@ -1,4 +1,4 @@
.\" $NetBSD: ssh.1,v 1.32 2005/09/18 16:22:35 christos Exp $
.\" $NetBSD: ssh.1,v 1.33 2005/09/18 18:27:28 christos Exp $
.\" -*- nroff -*-
.\"
.\" Author: Tatu Ylonen <ylo@cs.hut.fi>
@ -516,8 +516,9 @@ Only root can forward privileged ports.
Dynamic port forwardings can also be specified in the configuration file.
If
.Ar bind_address
is not specified, then the socket will listen to all interfaces, which
can have unexpected security implications.
is not specified then the port is bound in accordance with the
.Cm GatewayPorts
setting.
.It Fl e Ar ch | ^ch | none
Sets the escape character for sessions with a pty (default:
.Ql ~ ) .

6
crypto/dist/ssh/ssh.c vendored
View File

@ -1,4 +1,4 @@
/* $NetBSD: ssh.c,v 1.34 2005/09/09 12:24:37 christos Exp $ */
/* $NetBSD: ssh.c,v 1.35 2005/09/18 18:27:33 christos Exp $ */
/*
* Author: Tatu Ylonen <ylo@cs.hut.fi>
* Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
@ -42,7 +42,7 @@
#include "includes.h"
RCSID("$OpenBSD: ssh.c,v 1.233 2005/03/01 17:22:06 jmc Exp $");
__RCSID("$NetBSD: ssh.c,v 1.34 2005/09/09 12:24:37 christos Exp $");
__RCSID("$NetBSD: ssh.c,v 1.35 2005/09/18 18:27:33 christos Exp $");
#include <openssl/evp.h>
#include <openssl/err.h>
@ -433,7 +433,7 @@ again:
fwd.listen_host = cleanhostname(fwd.listen_host);
} else {
fwd.listen_port = a2port(fwd.listen_host);
fwd.listen_host = "";
fwd.listen_host = NULL;
}
if (fwd.listen_port == 0) {