Akoonka wakiilka SSH wuu shaqeyn karaa shell la'aan
Hayso gudbinta SSH iyadoo la damiyay fadhiyada shell oo fahan xadka ku qasbida SOCKS kaliya.
Dejinta soo jiidashada leh waa AllowTcpForwarding no. Nasiib darro, waxay kaloo damisaa gudbinta wakiilka SSH SOCKS maxalliga ah uu u baahan yahay. Gudbinta firfircoon maaha meel laga dhuunto siyaasadda serverka.
Akoon u go'an, OpenSSH waxay kala saartaa dhowr awood. Qayb siyaasad waxay oggolaan kartaa gudbinta maxalliga ah iyadoo ka hortagaysa fadhiyada shell iyo nidaamka hoose:
Match User proxyuser
AllowTcpForwarding local
MaxSessions 0
PermitTTY no
X11Forwarding no
AllowAgentForwarding no
Buugga serverka wuxuu MaxSessions 0 ku sharraxayaa dejinta ka hortagta fadhiyada shell, galitaanka iyo nidaamka hoose isla markaana oggolaata gudbinta. Ku dar akoon hore loo xaqiijiyay; kani maaha habayn ammaan SSH oo dhamaystiran.
Gudbin kaliya maaha SOCKS kaliya
Gudbin maxalli ah oo go'an iyo codsi SOCKS ayaa ugu dambeyn ka codsan kara serverka isku nooc xiriirka meesha loo socdo. Oggolaanshaha gudbinta maxalliga ah ma dammaanad qaadayo in macmiilku isticmaalay interface SOCKS gaar ah. Ha ku tilmaamin akoonka mid ku qasbaya isticmaalka SOCKS kaliya.
PermitOpen wuxuu xaddidi karaa lamaanaha host iyo dekedda meesha loo socdo marka liis gaar ah uu buuxiyo shuruudda. Kani maaha mamnuuc guud oo ka warqaba xallinta magaca host ee shabakad kasta oo gaar ah. Xaddidaad cinwaan oo ballaaran ayaa laga yaabaa inay u baahato siyaasad shabakad host oo ku habboon.
Dejinta akoonka, furaha iyo serverka oo lagu daray ayaa sii xaddidi kara gudbinta. Mamnuuc gudbin guud oo meel kale ah ayaa laga yaabaa inuu meesha ka saaro awood ay qaybtani u muuqato inay oggolaatay.
Isticmaal habka maamulka serverka caadiga ah oo leh waddo soo kabasho, ka dibna si gooni ah u qiimee awoodaha la oggolaaday iyo kuwa la diiday. Natiijada looga dan leeyahay waa oggolaansho gudbin oo cad, maaha galisyo is-dhexgal ah oo si shil ah u furan ama wakiil lagu damiyay xaddidkiisa.