MESSAGE
| DATE | 2001-11-06 |
| FROM | Billy
|
| SUBJECT | Re: [hangout] openssh upgrades
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Mon, Nov 05, 2001 at 11:59:58PM -0500, Ruben Safir wrote:
> Cool
>
> What do you use it for? Does that encrypt your whole X -Session?
But all showing off aside, I use it to get and send mail securely.
I've got dadadada.net on a rack somewhere, and my laptop stays
with me. As long as I have at least one ssh open to mail.dadadada.net,
I can securely smtp and pop to and from that host.
Here's how:
billy-at-purple:billy$ cat .ssh/config
Host *
ForwardAgent yes
Host mail.dadadada.net
LocalForward 1111 127.0.0.1:110
LocalForward 1112 127.0.0.1:25
#... more stuff that I'm not discussing :) ...
That config file has all of the magic... When I ssh to mail.dadadada.net, I am
automatically opening up these two forwarded ports. Port 1111 of my local
laptop is really a secure connection to some port over at mail.dadadada.net,
controlled by my remote ssh, which forwards all traffic
to 127.0.0.1:110.. (localhost:pop3)
Check it out (I've got an ssh open in another window):
billy-at-purple:billy$ telnet localhost 1111
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
+OK POP3 localhost v7.64 server ready
billy-at-purple:billy$ telnet localhost 1112
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 mail.dadadada.net ESMTP Exim 3.12 #1 Tue, 06 Nov 2001 00:32:50 -0500
The interesting thing is that mail.dadadada.net doesn't have to allow outside
access to any ports other than ssh, but I can get to any 'localhost' service I
want. In the smtp and pop logs over on mail.dadadada.net, all I see are
accesses from localhost. All of my mail headers show
localhost->localhost->localhost, and don't give any information about where I
was when I sent the message. It's a sweet setup.
- --
"The funk, the whole funk, and nothing but the funk."
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE753iE+2VvpwIZdF0RArPGAJwNrzBOVW9rXAAxEH97F4ktOVsLrACfSkBy
YWQA/qmZvdVsvL3QnGyWPl0=
=VNx2
-----END PGP SIGNATURE-----
____________________________
New Yorker Linux Users Scene
Fair Use -
because it's either fair use or useless....
|
|
