Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-01-02 | clarify tun(4) opening - set the mode and bring the interface up. also | Reyk Floeter | |
(re)sets the tun(4) layer 2 LINK0 flag for existing tunnel interfaces. suggested and ok by djm@ | |||
2006-01-02 | use a common max. packet length, no binary change | Damien Miller | |
2006-01-01 | no trailing "\n" for debug() | Kevin Steves | |
2006-01-01 | move <net/if.h>; ok djm@ | Kevin Steves | |
2005-12-31 | .Nm does not require an argument; | Jason McIntyre | |
2005-12-31 | clean up ENVIRONMENT a little; | Jason McIntyre | |
2005-12-31 | merge the "LOGIN SESSION AND REMOTE EXECUTION" and "SERVER | Jason McIntyre | |
AUTHENTICATION" sections into "AUTHENTICATION"; some rewording done to make the text read better, plus some improvements from djm; ok djm | |||
2005-12-31 | document -MM; ok djm@ | Kevin Steves | |
2005-12-30 | do not suggest that interactive authentication will work | Jason McIntyre | |
with the -b flag; based on a diff from john l. scarfone; ok djm | |||
2005-12-30 | add channel output filter interface. | Reyk Floeter | |
ok djm@, suggested by markus@ | |||
2005-12-28 | use 'break-in' for consistency; ok deraadt@ ok and input jmc@ | Kevin Steves | |
2005-12-24 | eliminate some code duplicated in privsep and non-privsep paths, and | Damien Miller | |
explicitly clear SIGALRM handler; "groovy" deraadt@ | |||
2005-12-23 | less mark up for -c; | Jason McIntyre | |
2005-12-23 | - sync the description of -e w/ synopsis | Jason McIntyre | |
- simplify the description of -I - note that -I is only available if support compiled in, and that it isn't by default feedback/ok djm@ | |||
2005-12-22 | expand the description of -w somewhat; | Jason McIntyre | |
help/ok reyk | |||
2005-12-22 | put the description of "UsePrivilegedPort" in the correct place; | Jason McIntyre | |
2005-12-21 | clarify precedence of -p, Port, ListenAddress; ok and help jmc@ | Kevin Steves | |
2005-12-21 | -Y does X11 forwarding too; | Jason McIntyre | |
ok markus | |||
2005-12-21 | options now described `above', rather than `later'; | Jason McIntyre | |
2005-12-21 | -L and -R descriptions are now above, not below, ~C description; | Jason McIntyre | |
2005-12-20 | move info on ssh return values and config files up into the main | Jason McIntyre | |
description; | |||
2005-12-20 | .Ss -> .Sh: subsections have not made this page more readable | Jason McIntyre | |
2005-12-20 | merge the sections on protocols 1 and 2 into one section on authentication; | Jason McIntyre | |
feedback djm dtucker ok deraadt markus dtucker | |||
2005-12-20 | exit(255) on error to match description in ssh(1); bz #1137; ok deraadt@ | Darren Tucker | |
2005-12-17 | spelling: intented -> intended | Kevin Steves | |
2005-12-17 | spelling: fowarding, fowarded | Kevin Steves | |
2005-12-16 | signpost the protocol sections; | Jason McIntyre | |
2005-12-16 | make the description of -c a little nicer; | Jason McIntyre | |
2005-12-16 | simplify a sentence; | Jason McIntyre | |
2005-12-16 | move the option descriptions up the page: start of a restructure; | Jason McIntyre | |
ok markus deraadt | |||
2005-12-13 | if forced_tun_device is not set, it is -1 and not SSH_TUNID_ANY | Reyk Floeter | |
2005-12-12 | make sure protocol messages for internal channels are ignored. | Markus Friedl | |
allow adjust messages for non-open channels; with and ok djm@ | |||
2005-12-08 | new sentence, new line; | Jason McIntyre | |
2005-12-08 | two changes to the new ssh tunnel support. this breaks compatibility | Reyk Floeter | |
with the initial commit but is required for a portable approach. - make the tunnel id u_int and platform friendly, use predefined types. - support configuration of layer 2 (ethernet) or layer 3 (point-to-point, default) modes. configuration is done using the Tunnel (yes|point-to-point|ethernet|no) option is ssh_config(5) and restricted by the PermitTunnel (yes|point-to-point|ethernet|no) option in sshd_config(5). ok djm@, man page bits by jmc@ | |||
2005-12-08 | keep options in order; | Jason McIntyre | |
2005-12-08 | make `!command' a little clearer; | Jason McIntyre | |
ok reyk | |||
2005-12-07 | - avoid line split in SYNOPSIS | Jason McIntyre | |
- add args to -w - kill trailing whitespace | |||
2005-12-07 | typo | Reyk Floeter | |
2005-12-07 | reyk forgot to compile with -Werror (missing header) | Damien Miller | |
2005-12-06 | Add brief instructions on how to use the new tun(4) forwarding over | Reyk Floeter | |
OpenSSH with OpenBSD. Please note that tunnel forwarding is still somewhat experimental and specific to the OpenBSD version of OpenSSH. Nevertheless, porting and interoperability is possible due to the availability of a tun(4)-like device for most of the other operating systems. ok jmc@, requested by djm@ | |||
2005-12-06 | Add support for tun(4) forwarding over OpenSSH, based on an idea and | Reyk Floeter | |
initial channel code bits by markus@. This is a simple and easy way to use OpenSSH for ad hoc virtual private network connections, e.g. administrative tunnels or secure wireless access. It's based on a new ssh channel and works similar to the existing TCP forwarding support, except that it depends on the tun(4) network interface on both ends of the connection for layer 2 or layer 3 tunneling. This diff also adds support for LocalCommand in the ssh(1) client. ok djm@, markus@, jmc@ (manpages), tested and discussed with others | |||
2005-11-30 | avoid ambiguities in describing TZ; | Jason McIntyre | |
ok djm@ | |||
2005-11-30 | timezone -> time zone | Jason McIntyre | |
2005-11-29 | Populate default key sizes before checking them; from & ok tim@ | Darren Tucker | |
2005-11-28 | Update agent socket path templates to reflect reality, correct xref for | Darren Tucker | |
the time formats. bz#1121, patch from openssh at roumenpetrov.info, ok djm@ | |||
2005-11-28 | Enforce DSA key length of exactly 1024 bits to comply with FIPS-186-2, | Darren Tucker | |
increase minumum RSA key size to 768 bits and update man page to reflect these. Patch originally bz#1119 (senthilkumar_sen at hotpop.com), ok djm@, grudging ok deraadt@. | |||
2005-11-22 | Correct format/arguments to debug call; spotted by shaw at vranix.com ok djm@ | Darren Tucker | |
2005-11-21 | Perform Kerberos calls even for invalid users to prevent leaking information | Darren Tucker | |
about account validity. bz #975, patch originally from Senthil Kumar, sanity checked by Simon Wilkinson, tested by djm@, biorn@, ok markus@ | |||
2005-11-15 | Include sys/queue.h explicitly instead of assuming some other header | Todd C. Miller | |
will pull it in. At the moment it gets pulled in by sys/select.h (which ssh has no business including) via event.h. OK markus@ | |||
2005-11-12 | avoid close(-1), as in rcp; ok cloder | Theo de Raadt | |