Whitebox/go-sshd
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity
sshd implementation in Go, for the sole purpose of restricting the ports that clients can request using direct-tcpip and tcpip-forward / forwarded-tcpip.
13 commits 1 branch 0 tags 715 KiB
Find a file
Merlijn Wajer c1a9590f84 Add localports=,remoteports= parsing
2017-03-09 02:21:00 +01:00
README.rst Remove global state, refactoring 2017-03-08 01:27:40 +01:00
sshd.go Add localports=,remoteports= parsing 2017-03-09 02:21:00 +01:00
TODO Support forward-tcpip (IPv4 and IPv6) 2017-03-05 03:18:51 +01:00

README.rst 

Motivation
==========

sshd implementation in Go, for the sole purpose of restricting the ports that
clients can request using direct-tcpip and tcpip-forward / forwarded-tcpip.

OpenSSH refuses to merge patches to support this, but there is a fork of OpenSSH
with patches that achieve something similar to this. [1]


[1] https://github.com/antonyantony/openssh

authorized_keys format
======================

Same as OpenSSH authorized_keys format.
The options field contains the ports that are allowed to be forwarded, colon separated::

    ports=3333:4444 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHPWEWu85yECrbmtL38wlFua3tBSqxTekCX/aU+dku+w COMMENTHERE