[
https://issues.apache.org/jira/browse/SSHD-1269?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Thomas Wolf resolved SSHD-1269.
-------------------------------
Fix Version/s: 2.9.0
Resolution: Fixed
Fixed by [commit cdd5910e|https://github.com/apache/mina-sshd/commit/cdd5910e].
> TCP/IP remote port forwarding with wildcard IP addresses doesn't work with
> OpenSSH
> ----------------------------------------------------------------------------------
>
> Key: SSHD-1269
> URL: https://issues.apache.org/jira/browse/SSHD-1269
> Project: MINA SSHD
> Issue Type: Bug
> Affects Versions: 2.6.0, 2.7.0, 2.8.0
> Reporter: Thomas Wolf
> Assignee: Thomas Wolf
> Priority: Major
> Fix For: 2.9.0
>
>
> Looks like a recurrence of SSHD-792.
> To reproduce, take the {{Sshd1055Test}} from [PR
> 227|https://github.com/apache/mina-sshd/pull/227]. That one uses OpenSSH 9.0
> to set up a remote port forwarding on an Apache MINA sshd server using
> {code}
> ssh ... -R 127.0.0.1:0:someHost:somePort ...
> {code}
> That works. The server chooses a port A, and a client connecting to
> 127.0.0.1:A is forwarded to someHost:somePort.
> Now change that test to use either {{-R 0.0.0.0:0:someHost:somePort}} or {{-R
> 0:someHost:somePort}}. These should work equally well.
> However, the test then fails; the OpenSSH client complains about
> {code}
> debug1: client_request_forwarded_tcpip: listen 127.0.0.1 port 56054,
> originator 127.0.0.1 port 56055
> WARNING: Server requests forwarding for unknown listen_port 56054
> {code}
> where 56054 is the port chosen by the server.
> This appears to be caused by the Apache MINA sshd server sending back in the
> "forwarded-tcpip" request the _bound_ address (127.0.0.1); but OpenSSH
> expects the original (0.0.0.0, or empty). Probably Apache MINA sshd should
> send back the original address, but with the bound port.
> (Note: this is also reproducible using OpenSSH 7.9.)
--
This message was sent by Atlassian Jira
(v8.20.7#820007)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org
For additional commands, e-mail: dev-h...@mina.apache.org
