U oggolow SSH inuu isticmaalo dhegeyste SOCKS maxalli ah marka uu jiro

Ku xaddid hubinta Match exec ee OpenSSH hal meel oo keliya oo fahan waxa tijaabada dekedda maxalliga ah ee guulaysatay caddayso iyo waxa aanay caddayn.

Dhegeyste SOCKS maxalli ah waa faa'iido leh shabakadaha qaarkood kumana jiro kuwa kale. OpenSSH waxa uu si shuruud leh u dooran karaa amarka boroksi, isaga oo aan doorashadaas ka dhigineyn mid khuseysa host kasta.

OpenSSH oo leh qaabka OpenBSD ee nc, tusaale qaabeynta macmiilku waa:

Host work-server
    HostName ssh.example.net
    User alex

Match originalhost work-server exec "nc -z -w 1 127.0.0.1 1080"
    ProxyCommand nc -X 5 -x 127.0.0.1:1080 %h %p

Match all

originalhost waxa uu hubinta ku xaddidayaa magaca lagu bixiyay khadka amarka SSH. exec waxa uu u dhigmaa marka amarkiisu si guul leh u dhammaado. Match all ugu dambeeya waxa uu soo afjarayaa baaxaddaas shuruudaysan ee dejinta xigta.

Tani waxa ay u qadanaysaa in aanay jirin dejinta hore oo khusaysa oo horey u dooratay amar boroksi ama dariiq boodid ah oo is khilaafaya. SSH badanaa waxa uu isticmaalaa qiimaha ugu horreeya ee la helo, sidaas darteed qiime caadi ah oo ballaaran oo xagga sare ah waxa uu ka hor istaagi karaa shuruud dambe in ay yeelato saamaynta la filayay.

Socket dhegeysanaya waa ballan qabyo ah

Tijaabadu waxa ay baadhaysaa gelitaanka TCP ee deked maxalli ah. Ma dhammeystirto wada-hadalka SOCKS, ma dhisi xidhiidhka meesha loo socdo ee la rabo, mana caddaynayso barnaamijka leh dekeddaas. Dhegeystaha waxa uu sidoo kale lumin karaa hubinta ka dib.

Waqtiga xaddidan waxa uu hayaa tijaabad qaldan xad. Ikhtiyaarrada la muujiyay waxa ay ka tirsan yihiin interface-ka nc ee OpenBSD; barnaamijyada kale ee isla magaca faylka leh waxa laga yaabaa in ay bixiyaan ikhtiyaarro kale.

Marka shuruuddu aanay u dhigmeyn, tusaalahan waxa uu xidhiidhka ka tagayaa ProxyCommand-kan la'aan, taas oo u oggolaanaysa dariiqa caadiga ah. Taasi waa ku habboon tahay oo keliya marka gelitaanka tooska ah la oggol yahay. Siyaasadda boroksi ee qasabka ah waa in aanay hubinta helitaanka u isticmaalin fasax lagu baxsado dariiq kale.

Magaca host SSH ee la beegsanayo iyo hubinta furaha host weli waxa ay aqoonsadaan server-ka loo socdo. Doorashada kaaliyaha gaadiidka maaha sabab lagu aqbalo fure host oo lama filaan ah.

Maqaallo la xiriira