summaryrefslogtreecommitdiff
path: root/ssh.1
diff options
context:
space:
mode:
authorDarren Tucker <dtucker@zip.com.au>2005-10-03 18:13:42 +1000
committerDarren Tucker <dtucker@zip.com.au>2005-10-03 18:13:42 +1000
commitc8d6421a645529a3c831dccc5d9d9e073de68657 (patch)
treecffc52ca23b243ff58e6b494973099aaf603e657 /ssh.1
parentce321d8a30a81222d11a4c27fd353804a9afecd3 (diff)
- djm@cvs.openbsd.org 2005/09/19 11:37:34
[ssh_config.5 ssh.1] mention ability to specify bind_address for DynamicForward and -D options; bz#1077 spotted by Haruyama Seigo
Diffstat (limited to 'ssh.1')
-rw-r--r--ssh.144
1 files changed, 40 insertions, 4 deletions
diff --git a/ssh.1 b/ssh.1
index b0749763b..135e3b6c5 100644
--- a/ssh.1
+++ b/ssh.1
@@ -34,7 +34,7 @@
34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 34.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 35.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36.\" 36.\"
37.\" $OpenBSD: ssh.1,v 1.209 2005/07/06 09:33:05 dtucker Exp $ 37.\" $OpenBSD: ssh.1,v 1.210 2005/09/19 11:37:34 djm Exp $
38.Dd September 25, 1999 38.Dd September 25, 1999
39.Dt SSH 1 39.Dt SSH 1
40.Os 40.Os
@@ -47,7 +47,12 @@
47.Op Fl 1246AaCfgkMNnqsTtVvXxY 47.Op Fl 1246AaCfgkMNnqsTtVvXxY
48.Op Fl b Ar bind_address 48.Op Fl b Ar bind_address
49.Op Fl c Ar cipher_spec 49.Op Fl c Ar cipher_spec
50.Op Fl D Ar port 50.Oo Fl D\ \&
51.Sm off
52.Oo Ar bind_address : Oc
53.Ar port
54.Sm on
55.Oc
51.Op Fl e Ar escape_char 56.Op Fl e Ar escape_char
52.Op Fl F Ar configfile 57.Op Fl F Ar configfile
53.Op Fl i Ar identity_file 58.Op Fl i Ar identity_file
@@ -494,13 +499,20 @@ The default is
494 arcfour256,arcfour,aes192-cbc,aes256-cbc,aes128-ctr, 499 arcfour256,arcfour,aes192-cbc,aes256-cbc,aes128-ctr,
495 aes192-ctr,aes256-ctr'' 500 aes192-ctr,aes256-ctr''
496.Ed 501.Ed
497.It Fl D Ar port 502.It Fl D Xo
503.Sm off
504.Oo Ar bind_address : Oc
505.Ar port
506.Sm on
507.Xc
498Specifies a local 508Specifies a local
499.Dq dynamic 509.Dq dynamic
500application-level port forwarding. 510application-level port forwarding.
501This works by allocating a socket to listen to 511This works by allocating a socket to listen to
502.Ar port 512.Ar port
503on the local side, and whenever a connection is made to this port, the 513on the local side, optionally bound to the specified
514.Ar bind_address .
515Whenever a connection is made to this port, the
504connection is forwarded over the secure channel, and the application 516connection is forwarded over the secure channel, and the application
505protocol is then used to determine where to connect to from the 517protocol is then used to determine where to connect to from the
506remote machine. 518remote machine.
@@ -509,6 +521,30 @@ Currently the SOCKS4 and SOCKS5 protocols are supported, and
509will act as a SOCKS server. 521will act as a SOCKS server.
510Only root can forward privileged ports. 522Only root can forward privileged ports.
511Dynamic port forwardings can also be specified in the configuration file. 523Dynamic port forwardings can also be specified in the configuration file.
524.Pp
525IPv6 addresses can be specified with an alternative syntax:
526.Sm off
527.Xo
528.Op Ar bind_address No /
529.Ar port
530.Xc
531.Sm on
532or by enclosing the address in square brackets.
533Only the superuser can forward privileged ports.
534By default, the local port is bound in accordance with the
535.Cm GatewayPorts
536setting.
537However, an explicit
538.Ar bind_address
539may be used to bind the connection to a specific address.
540The
541.Ar bind_address
542of
543.Dq localhost
544indicates that the listening port be bound for local use only, while an
545empty address or
546.Sq *
547indicates that the port should be available from all interfaces.
512.It Fl e Ar ch | ^ch | none 548.It Fl e Ar ch | ^ch | none
513Sets the escape character for sessions with a pty (default: 549Sets the escape character for sessions with a pty (default:
514.Ql ~ ) . 550.Ql ~ ) .