https://bugzilla.mindrot.org/show_bug.cgi?id=2751
Bug ID: 2751
Summary: permitopen but for -R option
Product: Portable OpenSSH
Version: 7.5p1
Hardware: Other
OS: All
Status: NEW
Severity: enhancement
Priority: P5
Component: sshd
Assignee: [email protected]
Reporter: [email protected]
Created attachment 3024
--> https://bugzilla.mindrot.org/attachment.cgi?id=3024&action=edit
patch exported from github pull request
restricts which ports are available for a given user on a remote server
when opening remote forwarding ports.
use case: NAT traversing limited to a specified port for each user
on the remote server.
on the users .ssh/authorized_keys , add: permitopen="host:port" and
user's public key. it helps mitigate a DoS in case a user's private key
is lost
** if no permitopen is found for the user, all ports are allowed as
usual
useful to limit tunneling for nat traversing to a specified port on a
by user base
--
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs
