Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Dec 2001 11:31:17 -0500
From:      Michael Lucas <mwlucas@blackhelicopters.org>
To:        questions@freebsd.org
Subject:   SSHD and Socks5
Message-ID:  <20011213113117.A52927@blackhelicopters.org>

next in thread | raw e-mail | index | archive | help
I am behind a SOCKS5 server, accessing most of the wide wide world
with "runsocks ssh hostname."  This works for everything except my
main system blackhelicopters.org.  bh.org is a vanilla 4.4-R system.
"runsocks" works fine with other commands, such as telneting to
various ports, popping mail, etc.

I can ssh to my system at home, and jump into this machine.  I can ssh
into freefall.  But I cannot ssh directly there.  If I watch for
incoming connections on bh.org and try to ssh directly, netstat shows
the incoming connection hung in SYN_RCVD.

(the following is a second SSH process, so I won't cut off my own
connection by mucking with it.  The config is exactly the same, except
it is listening on port 81 and on a single IP address.)


tcp4       0      0  209.69.178.19.81       165.252.93.3.35382     SYN_RCVD
tcp4       0      0  209.69.178.19.81       *.*                    LISTEN

From a client behind the socks5 server:

pedicular~;runsocks ssh -v -p 81 209.69.178.19
OpenSSH_2.9 FreeBSD localisations 20011202, SSH protocols 1.5/2.0, OpenSSL 0x0090601f
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Applying options for *
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 1001 geteuid 1001 anon 1
debug1: Connecting to 209.69.178.19 [209.69.178.19] port 81.
debug1: temporarily_use_uid: 1001/1001 (e=1001)
debug1: restore_uid
debug1: temporarily_use_uid: 1001/1001 (e=1001)
debug1: connect: Connection refused
debug1: restore_uid
debug1: Trying again...
debug1: Connecting to 209.69.178.19 [209.69.178.19] port 81.

Verbose sshd from the client and the server seems to indicate that the
system never hands the request off to the daemon.  While all this is
going on, all we see is the below:

blackhelicopters/etc/ssh;sshd -f sshd_config_81 -d
debug1: sshd version OpenSSH_2.3.0 FreeBSD localisations 20010713
debug1: read DSA private key done
debug1: Bind to port 81 on 209.69.178.19.
Server listening on 209.69.178.19 port 81.
Generating 768 bit RSA key.
RSA key generation complete.




-- 
Michael Lucas		mwlucas@FreeBSD.org, mwlucas@BlackHelicopters.org
My FreeBSD column: http://www.oreillynet.com/pub/q/Big_Scary_Daemons

http://www.blackhelicopters.org/~mwlucas/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011213113117.A52927>