News for hackers. Stuff that matters.

A comment on File Transfer with SSH, Tee, and Base64.

Re:File Transfer with SSH, Tee, and Base64 by jxy on Thursday September 17, 2020 @01:16PM (#24507276)
If the ssh gateway OP mentions is just a ssh server, a ProxyCommand should be used, and the gateway should be transparent after that.

    Host rcpu-tun
      User YOURLOGIN
      IdentityFile ~/.ssh/YOURSECRET
      ProxyCommand ssh -q -W HOSTBEHINDFW:22 -l PROXYLOGIN SSHGATEWAY
      HostName HOSTBEHINDFW
[ Parent | on HN ]
Re:File Transfer with SSH, Tee, and Base64 by wahern on Thursday September 17, 2020 @06:42PM (#24510846)
ssh -W requires that the gateway support port forwarding, which is probably disabled if its enforcing interactive logins. (-W also implicitly sets -T, though I don't know if that would fail the login or not.) Likewise, -J is shorthand for a ProxyCommand that runs nc on the gateway, which also won't work if the gateway requires interactive (i.e. TTY interposed) logins. (EDIT: Looking at the OpenSSH source code, -J is shorthand for generating a ProxyCommand using ssh -W. Either it was refactored to use -W after -W was added, or I'm misremembering how -J used to work.)
[ Parent | on HN ]