From owner-freebsd-security Thu Mar 1 9:30:33 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.inka.de (quechua.inka.de [212.227.14.2]) by hub.freebsd.org (Postfix) with ESMTP id AD41937B71A for ; Thu, 1 Mar 2001 09:30:28 -0800 (PST) (envelope-from daemon@mips.inka.de) Received: from kemoauc.mips.inka.de (uucp@) by mail.inka.de with local-bsmtp id 14YWuK-0007EM-00; Thu, 1 Mar 2001 18:30:28 +0100 Received: (from daemon@localhost) by kemoauc.mips.inka.de (8.11.2/8.11.1) id f21HAEk01712 for freebsd-security@freebsd.org; Thu, 1 Mar 2001 18:10:14 +0100 (CET) (envelope-from daemon) From: naddy@mips.inka.de (Christian Weisgerber) Subject: Re: ssh tricks Date: Thu, 1 Mar 2001 17:10:14 +0000 (UTC) Message-ID: <97lvpm$18a$1@kemoauc.mips.inka.de> References: <01022819094900.04839@jardan.infowest.com> Originator: naddy@mips.inka.de (Christian Weisgerber) To: freebsd-security@freebsd.org Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Aaron D.Gifford wrote: > Are you aware that the FreeBSD SSH installation by default has TCP forwarding > enabled? Are you completely aware of the implications? Some time ago I realized that every OpenBSD anoncvs server out there could be (ab)used as an intermediary to bounce off TCP connections. That's why I added the AllowTcpForwarding option to OpenSSH. -- Christian "naddy" Weisgerber naddy@mips.inka.de To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message