diff options
Diffstat (limited to 'ssh_config.5')
| -rw-r--r-- | ssh_config.5 | 70 |
1 files changed, 61 insertions, 9 deletions
diff --git a/ssh_config.5 b/ssh_config.5 index 8f6d851b4..6b6cfc5e9 100644 --- a/ssh_config.5 +++ b/ssh_config.5 | |||
| @@ -34,7 +34,7 @@ | |||
| 34 | .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF | 34 | .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
| 35 | .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | 35 | .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| 36 | .\" | 36 | .\" |
| 37 | .\" $OpenBSD: ssh_config.5,v 1.42 2005/02/28 00:54:10 djm Exp $ | 37 | .\" $OpenBSD: ssh_config.5,v 1.43 2005/03/01 10:09:52 djm Exp $ |
| 38 | .Dd September 25, 1999 | 38 | .Dd September 25, 1999 |
| 39 | .Dt SSH_CONFIG 5 | 39 | .Dt SSH_CONFIG 5 |
| 40 | .Os | 40 | .Os |
| @@ -480,12 +480,37 @@ The default is to use the server specified list. | |||
| 480 | Specifies that a TCP/IP port on the local machine be forwarded over | 480 | Specifies that a TCP/IP port on the local machine be forwarded over |
| 481 | the secure channel to the specified host and port from the remote machine. | 481 | the secure channel to the specified host and port from the remote machine. |
| 482 | The first argument must be a port number, and the second must be | 482 | The first argument must be a port number, and the second must be |
| 483 | .Ar host:port . | 483 | .Xo |
| 484 | IPv6 addresses can be specified with an alternative syntax: | 484 | .Sm off |
| 485 | .Ar host/port . | 485 | .Oo Ar bind_address : Oc |
| 486 | Multiple forwardings may be specified, and additional | 486 | .Ar host:port |
| 487 | forwardings can be given on the command line. | 487 | .Sm on |
| 488 | .Xc . | ||
| 489 | IPv6 addresses can be specified by enclosing addresses in square brackets or | ||
| 490 | by using an alternative syntax: | ||
| 491 | .Xo | ||
| 492 | .Sm off | ||
| 493 | .Oo Ar bind_address / Oc | ||
| 494 | .Ar host/port | ||
| 495 | .Sm on | ||
| 496 | .Xc . | ||
| 497 | Multiple forwardings may be specified, and additional forwardings can be | ||
| 498 | given on the command line. | ||
| 488 | Only the superuser can forward privileged ports. | 499 | Only the superuser can forward privileged ports. |
| 500 | By default, the local port is bound in accordance with the | ||
| 501 | .Cm GatewayPorts | ||
| 502 | setting. | ||
| 503 | However, an explicit | ||
| 504 | .Ar bind_address | ||
| 505 | may be used to bind the connection to a specific address. | ||
| 506 | The | ||
| 507 | .Ar bind_address | ||
| 508 | of | ||
| 509 | .Dq localhost | ||
| 510 | indicates that the listening port be bound for local use only, while an | ||
| 511 | empty address or | ||
| 512 | .Dq * | ||
| 513 | indicates that the port should be available from all interfaces. | ||
| 489 | .It Cm LogLevel | 514 | .It Cm LogLevel |
| 490 | Gives the verbosity level that is used when logging messages from | 515 | Gives the verbosity level that is used when logging messages from |
| 491 | .Nm ssh . | 516 | .Nm ssh . |
| @@ -592,12 +617,39 @@ This option applies to protocol version 2 only. | |||
| 592 | Specifies that a TCP/IP port on the remote machine be forwarded over | 617 | Specifies that a TCP/IP port on the remote machine be forwarded over |
| 593 | the secure channel to the specified host and port from the local machine. | 618 | the secure channel to the specified host and port from the local machine. |
| 594 | The first argument must be a port number, and the second must be | 619 | The first argument must be a port number, and the second must be |
| 595 | .Ar host:port . | 620 | .Xo |
| 596 | IPv6 addresses can be specified with an alternative syntax: | 621 | .Sm off |
| 597 | .Ar host/port . | 622 | .Oo Ar bind_address : Oc |
| 623 | .Ar host:port | ||
| 624 | .Sm on | ||
| 625 | .Xc . | ||
| 626 | IPv6 addresses can be specified by enclosing any addresses in square brackets | ||
| 627 | or by using the alternative syntax: | ||
| 628 | .Xo | ||
| 629 | .Sm off | ||
| 630 | .Oo Ar bind_address / Oc | ||
| 631 | .Ar host/port | ||
| 632 | .Sm on | ||
| 633 | .Xc . | ||
| 598 | Multiple forwardings may be specified, and additional | 634 | Multiple forwardings may be specified, and additional |
| 599 | forwardings can be given on the command line. | 635 | forwardings can be given on the command line. |
| 600 | Only the superuser can forward privileged ports. | 636 | Only the superuser can forward privileged ports. |
| 637 | .Pp | ||
| 638 | If the | ||
| 639 | .Ar bind_address | ||
| 640 | is not specified, the default is to only bind to loopback addresses. | ||
| 641 | If the | ||
| 642 | .Ar bind_address | ||
| 643 | is | ||
| 644 | .Ql * | ||
| 645 | or an empty string, then the forwarding is requested to listen on all | ||
| 646 | interfaces. | ||
| 647 | Specifying a remote | ||
| 648 | .Ar bind_address | ||
| 649 | will only succeed if the server's | ||
| 650 | .Cm GatewayPorts | ||
| 651 | option is enabled (see | ||
| 652 | .Xr sshd_config 5 ). | ||
| 601 | .It Cm RhostsRSAAuthentication | 653 | .It Cm RhostsRSAAuthentication |
| 602 | Specifies whether to try rhosts based authentication with RSA host | 654 | Specifies whether to try rhosts based authentication with RSA host |
| 603 | authentication. | 655 | authentication. |