Sababta dhageystaha proxy SSH ee rogan uu ku heli karo serverka oo kaliya
Hubi cinwaanka bind ee dhageystaha fog iyo habka GatewayPorts ka hor intaadan beddelin borotokoolka proxy ama aqoonsiga.
Gudbinta fog waxay ka shaqeyn kartaa serverka SSH laakiin waxay diidi kartaa isku xirka mashiin kale sababtoo ah waxay dhageysataa loopback oo kaliya. Marka hore hubi cinwaanka dhageysiga dhabta ah.
Dhinaca serverka GatewayPorts | Bind-ka gudbinta fog |
|---|---|
no, caadiga | Waxay ku xaddidaa dhageystayaasha loopback |
yes | Waxay qasabtaa bind wildcard ah |
clientspecified | Waxay u oggolaataa macmiilka inuu codsado cinwaan bind gaar ah |
Dhageyste loogu talagalay hal interface la maamulo, serverku wuxuu isticmaali karaa:
GatewayPorts clientspecifiedMacmiilku wuxuu markaas codsadaa cinwaan ku habboon qeexiddiisa -R. Cinwaankaas waa inuu ku jiraa mashiinka fog, oo xaddidaadaha kale ee gudbinta wali khuseeya. -g dhinaca macmiilka maaha kontorol la isweydaarsan karo jihadan.
Saddex oggolaansho ayaa kala duwan: oggolaanshaha SSH ee abuurista gudbinta, gelitaanka shabakadda ee dhageystaheeda, iyo siyaasadda gelitaanka ee adeegga HTTP ama SOCKS laftiisa. Gelitaanka SSH wuxuu xaqiijiyaa abuurka tunnel-ka; ma xaqiijiyo qof kasta oo dambe ee dhageyste la wadaago mana ku daro caqabad furaha sirta SOCKS.
Haddii qofka fog uu wali isku xiri karin, hubi cinwaanka bind, xaddidaadaha gudbinta serverka iyo dariiqa firewall sidaas oo kale. Marka TCP uu gaaro dhageystaha, isku-duubnaanta proxy ee fashilmay waa dhibaato dambe.