diff options
| -rw-r--r-- | usr.bin/ssh/ssh.1 | 11 | ||||
| -rw-r--r-- | usr.bin/ssh/sshd.8 | 11 |
2 files changed, 20 insertions, 2 deletions
diff --git a/usr.bin/ssh/ssh.1 b/usr.bin/ssh/ssh.1 index dfd38a6b811..14e2925cf13 100644 --- a/usr.bin/ssh/ssh.1 +++ b/usr.bin/ssh/ssh.1 @@ -34,7 +34,7 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.\" $OpenBSD: ssh.1,v 1.133 2001/08/29 23:13:11 stevesk Exp $ +.\" $OpenBSD: ssh.1,v 1.134 2001/08/29 23:39:40 stevesk Exp $ .Dd September 25, 1999 .Dt SSH 1 .Os @@ -848,6 +848,15 @@ The default is .It Cm GatewayPorts Specifies whether remote hosts are allowed to connect to local forwarded ports. +By default, +.Nm +binds local port forwardings to the loopback addresss. This +prevents other remote hosts from connecting to forwarded ports. +.Cm GatewayPorts +can be used to specify that +.Nm +should bind local port forwardings to the wildcard address, +thus allowing remote hosts to connect to forwarded ports. The argument must be .Dq yes or diff --git a/usr.bin/ssh/sshd.8 b/usr.bin/ssh/sshd.8 index e000ec6501a..478036d2b42 100644 --- a/usr.bin/ssh/sshd.8 +++ b/usr.bin/ssh/sshd.8 @@ -34,7 +34,7 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.\" $OpenBSD: sshd.8,v 1.144 2001/08/29 23:02:21 stevesk Exp $ +.\" $OpenBSD: sshd.8,v 1.145 2001/08/29 23:39:40 stevesk Exp $ .Dd September 25, 1999 .Dt SSHD 8 .Os @@ -442,6 +442,15 @@ By default login is allowed regardless of the user name. .It Cm GatewayPorts Specifies whether remote hosts are allowed to connect to ports forwarded for the client. +By default, +.Nm +binds remote port forwardings to the loopback addresss. This +prevents other remote hosts from connecting to forwarded ports. +.Cm GatewayPorts +can be used to specify that +.Nm +should bind remote port forwardings to the wildcard address, +thus allowing remote hosts to connect to forwarded ports. The argument must be .Dq yes or |