Hi Saju,

The logging that I am after is actually on the HPUX system where one of my listener applications reports the IP addresses that connect to it on a specific port. When the SSH TUNNEL traffic is received by my program running on HPUX, it logs the HPUX IP as the client connecting to it. This makes sense since the openssh server is forwarding the traffic to the destination host:port. However it destroys any chance of auditing.

I know that this can be done via Transparent Proxy mode with stunnel on Linux iptables, so I am grasping at straws for a UNIX solution.

~Jeremy

--

Jeremy Brock

Vital Soft, Inc
www.vital-soft.com

On 10/23/2013 1:25 PM, Saju Panikulam wrote:
Hi,
For logging -  OpenSSH Logging and SysLog Forwarding may be an option.

Saju
-----Original Message-----
From: Jeremy Brock [mailto:[email protected]]
Sent: Wednesday, October 23, 2013 4:09 PM
To: [email protected]
Subject: Re: Questions on Transparent Tunneling

Hi Aris,

      Actually the SSH Client IP is exactly what I am after!  How can I force 
the Openssh server to use the SSH Client IP when forwarding the tunnel traffic 
to itself?

~Jeremy



Reply via email to