Re: Questions on Transparent Tunneling

[Jeremy Brock <jbrock@xxxxxxxxxxxxxx>]

Hi Aris,

    Actually the SSH Client IP is exactly what I am after!  How can I 
force the Openssh server to use the SSH Client IP when forwarding the 
tunnel traffic to itself?

~Jeremy

--

Jeremy Brock

Vital Soft, Inc
www.vital-soft.com

On 10/23/2013 1:00 PM, Aris Adamantiadis wrote:
> Hi,
>
> I think what you want is not possible. The originating IP address of
> your tunnel will always be either the SSH client or the SSH server
> depending on the direction of the proxying. It would be very hard to
> change that information because it is not supposed to be tamperable
> (Inside the OS' kernel).
>
> I think your question is worth asking on a more general mailing list,
> I'm afraid libssh is of no use for what you need.
>
> Regards,
>
> Aris
> Le 23/10/13 21:32, Jeremy Brock a écrit :
> > Hi Aris,
> >
> >      Please forgive my ignorance, I am new to the ssh tunneling
> > terminology.  I am trying to setup a tunnel from a windows client
> > running Putty (or other openssh client) to an HPUX host running
> > openssh.  I would like to pass plain text traffic across the tunnel to
> > the HPUX server while preserving the client IP when the port forwarding
> > is done at the HPUX side to itself (since it is the destination).
> >
> >      I am currently able to tunnel with the following in putty, but
> > unable to preserve my client IP when the forwarding occurs on the HPUX
> > host :
> >
> >
> >
> >
> > ~Jeremy
> >
> > --
> >
> > Jeremy Brock
> >
> > Vital Soft, Inc
> > www.vital-soft.com
> >
> > On 10/23/2013 12:07 PM, Aris Adamantiadis wrote:
> > > Hi,
> > >
> > > I don't understand what you want. SSH supports tcp forwarding, and yes
> > > there's some metadata transfered about origin of the connection. (I
> > > guess you speak of ssh -R behaviour).
> > >
> > > Aris
> > >
> > > Le 23/10/13 18:35, Jeremy Brock a écrit :
> > > > Hi All,
> > > >
> > > >      Is possible with libssh, or openssh for that matter, to have a
> > > > transparent tcp tunnel where the forwarded port traffic across the
> > > > tunnel keeps intact the remote client ip address when received on the
> > > > server side for logging purposes etc?
> > > >
> > > >      Thx!
> > > >
> > > >      ~Jeremy