- dtucker@cvs.openbsd.org 2006/07/17 12:06:00
     [channels.c channels.h servconf.c sshd_config.5]
     Add PermitOpen directive to sshd_config which is equivalent to the
     "permitopen" key option.  Allows server admin to allow TCP port
     forwarding only two specific host/port pairs.  Useful when combined
     with Match.
     If permitopen is used in both sshd_config and a key option, both
     must allow a given connection before it will be permitted.
     Note that users can still use external forwarders such as netcat,
     so to be those must be controlled too for the limits to be effective.
     Feedback & ok djm@, man page corrections & ok jmc@.
5 files changed
tree: dc7d64d4ae9ce7c47d52804671e8b5d2aedddae3
  1. .cvsignore
  2. CREDITS
  3. ChangeLog
  4. INSTALL
  5. LICENCE
  6. Makefile.in
  7. OVERVIEW
  8. README
  9. README.dns
  10. README.platform
  11. README.privsep
  12. README.smartcard
  13. README.tun
  14. RFC.nroff
  15. TODO
  16. WARNING.RNG
  17. aclocal.m4
  18. acss.c
  19. acss.h
  20. atomicio.c
  21. atomicio.h
  22. audit-bsm.c
  23. audit.c
  24. audit.h
  25. auth-bsdauth.c
  26. auth-chall.c
  27. auth-krb5.c
  28. auth-options.c
  29. auth-options.h
  30. auth-pam.c
  31. auth-pam.h
  32. auth-passwd.c
  33. auth-rh-rsa.c
  34. auth-rhosts.c
  35. auth-rsa.c
  36. auth-shadow.c
  37. auth-sia.c
  38. auth-sia.h
  39. auth-skey.c
  40. auth.c
  41. auth.h
  42. auth1.c
  43. auth2-chall.c
  44. auth2-gss.c
  45. auth2-hostbased.c
  46. auth2-kbdint.c
  47. auth2-none.c
  48. auth2-passwd.c
  49. auth2-pubkey.c
  50. auth2.c
  51. authfd.c
  52. authfd.h
  53. authfile.c
  54. authfile.h
  55. bufaux.c
  56. bufaux.h
  57. bufbn.c
  58. buffer.c
  59. buffer.h
  60. buildpkg.sh.in
  61. canohost.c
  62. canohost.h
  63. channels.c
  64. channels.h
  65. cipher-3des1.c
  66. cipher-acss.c
  67. cipher-aes.c
  68. cipher-bf1.c
  69. cipher-ctr.c
  70. cipher.c
  71. cipher.h
  72. cleanup.c
  73. clientloop.c
  74. clientloop.h
  75. compat.c
  76. compat.h
  77. compress.c
  78. compress.h
  79. config.guess
  80. config.sub
  81. configure.ac
  82. contrib/
  83. crc32.c
  84. crc32.h
  85. deattack.c
  86. deattack.h
  87. defines.h
  88. dh.c
  89. dh.h
  90. dispatch.c
  91. dispatch.h
  92. dns.c
  93. dns.h
  94. entropy.c
  95. entropy.h
  96. fatal.c
  97. fixpaths
  98. fixprogs
  99. groupaccess.c
  100. groupaccess.h
  101. gss-genr.c
  102. gss-serv-krb5.c
  103. gss-serv.c
  104. hostfile.c
  105. hostfile.h
  106. includes.h
  107. install-sh
  108. kex.c
  109. kex.h
  110. kexdh.c
  111. kexdhc.c
  112. kexdhs.c
  113. kexgex.c
  114. kexgexc.c
  115. kexgexs.c
  116. key.c
  117. key.h
  118. log.c
  119. log.h
  120. loginrec.c
  121. loginrec.h
  122. logintest.c
  123. mac.c
  124. mac.h
  125. match.c
  126. match.h
  127. md-sha256.c
  128. md5crypt.c
  129. md5crypt.h
  130. mdoc2man.awk
  131. misc.c
  132. misc.h
  133. mkinstalldirs
  134. moduli
  135. moduli.c
  136. monitor.c
  137. monitor.h
  138. monitor_fdpass.c
  139. monitor_fdpass.h
  140. monitor_mm.c
  141. monitor_mm.h
  142. monitor_wrap.c
  143. monitor_wrap.h
  144. msg.c
  145. msg.h
  146. myproposal.h
  147. nchan.c
  148. nchan.ms
  149. nchan2.ms
  150. openbsd-compat/
  151. opensshd.init.in
  152. packet.c
  153. packet.h
  154. pathnames.h
  155. progressmeter.c
  156. progressmeter.h
  157. readconf.c
  158. readconf.h
  159. readpass.c
  160. regress/
  161. rijndael.c
  162. rijndael.h
  163. rsa.c
  164. rsa.h
  165. scard-opensc.c
  166. scard.c
  167. scard.h
  168. scard/
  169. scp.1
  170. scp.c
  171. servconf.c
  172. servconf.h
  173. serverloop.c
  174. serverloop.h
  175. session.c
  176. session.h
  177. sftp-client.c
  178. sftp-client.h
  179. sftp-common.c
  180. sftp-common.h
  181. sftp-glob.c
  182. sftp-server.8
  183. sftp-server.c
  184. sftp.1
  185. sftp.c
  186. sftp.h
  187. ssh-add.1
  188. ssh-add.c
  189. ssh-agent.1
  190. ssh-agent.c
  191. ssh-dss.c
  192. ssh-gss.h
  193. ssh-keygen.1
  194. ssh-keygen.c
  195. ssh-keyscan.1
  196. ssh-keyscan.c
  197. ssh-keysign.8
  198. ssh-keysign.c
  199. ssh-rand-helper.8
  200. ssh-rand-helper.c
  201. ssh-rsa.c
  202. ssh.1
  203. ssh.c
  204. ssh.h
  205. ssh1.h
  206. ssh2.h
  207. ssh_config
  208. ssh_config.5
  209. ssh_prng_cmds.in
  210. sshconnect.c
  211. sshconnect.h
  212. sshconnect1.c
  213. sshconnect2.c
  214. sshd.8
  215. sshd.c
  216. sshd_config
  217. sshd_config.5
  218. sshlogin.c
  219. sshlogin.h
  220. sshpty.c
  221. sshpty.h
  222. sshtty.c
  223. survey.sh.in
  224. ttymodes.c
  225. ttymodes.h
  226. uidswap.c
  227. uidswap.h
  228. uuencode.c
  229. uuencode.h
  230. version.h
  231. xmalloc.c
  232. xmalloc.h