Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Instead of using netcat when tunneling SSH through another machine like this:

    ProxyCommand ssh -T host1 'nc %h %p'
one should use this instead:

    ProxyCommand ssh -W %h:%p host1


The only problem with -W is that it is not available everywhere yet: RHEL6 defaults to OpenSSH 5.3, while -W was introduced in 5.4. Thankfully EL7 comes with OpenSSH 6.4 (and a kernel newer than 2.6.32!).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: