Mailing-List:	contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT sources DOT redhat DOT com>
List-Help:	<mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT sources DOT redhat DOT com
Delivered-To:	mailing list cygwin AT sources DOT redhat DOT com
Date:	Wed, 11 Jul 2001 15:47:05 -0400
From:	"Simha, Shuba" <shuba_simha AT merck DOT com>
Subject:	RE: SSH on multiple ports
To:	"'Michael Erdely'" <cygwin AT cygwin DOT com>
Message-id:	<A33B09832F4CD411974400508BCF8F2B0343864E@uswsmx18.merck.com>
MIME-version:	1.0

Thanks for your response Mike.
But, where do I do port mapping? I tried putting it in the ssh-config file,
(/usr/bin/ssh-config)as below:
proxy.domain.com:1800 -> proxy1:22

I run SSH as:
ssh -i ssh-server/identity -p 2022 -o "HostkeyAlias=proxy1" -o
"CheckHostIP=no" user AT proxy DOT domain DOT com

I get the following error:
command-line: line 0: bad configuration option: HostKeyAlias

??!!??

Regards,
Shuba


-----Original Message-----
From: Michael Erdely [mailto:cygwin AT cygwin DOT com]
Sent: Wednesday, July 11, 2001 3:04 PM
To: cygwin AT cygwin DOT com
Subject: RE: SSH on multiple ports


Shuba,
  I'm not running OpenSSH_2.3.0p1, I'm running OpenSSH_2.9p1.  I'm not
sure if it's different.
  But I have the same problem: My ssh hosts are behind a firewall.  I do
port mapping like this:
firewall.ip.address:8022 -> host1.internal.address:22
firewall.ip.address:8122 -> host2.internal.address:22

>From "man ssh", I found the HostKeyAlias and CheckHostIP options.
When I want to connect to host 1, I use:
ssh -p 8022 -o "HostKeyAlias=host1" -o "CheckHostIP=no"
user AT firewall DOT ip DOT address

When I want to connect to host 2, I use:
ssh -p 8122 -o "HostKeyAlias=host2" -o "CheckHostIP=no"
user AT firewall DOT ip DOT address

I do not get prompted for the key change problem.  I hope this helps
you.

-ME

> -----Original Message-----
> From: cygwin-owner AT sources DOT redhat DOT com 
> [mailto:cygwin-owner AT sources DOT redhat DOT com] On Behalf Of Simha, Shuba
> Sent: Wednesday, July 11, 2001 1:38 PM
> To: Cygwin (E-mail)
> Subject: SSH on multiple ports
> 
> 
> I have Cygwin-1.1.5 with OpenSSH_2.3.0p1.
> 
> I am using Expect to connect to a proxy through SSH. It works well. 
> Howver, if I try to connect to the same proxy on other ports, 
> it does not
> connect. It gives the following warning:
> 
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
>  @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now 
> (man-in-the-middle attack)!
> It is also possible that the RSA host key has just been changed.
> Please contact your system administrator.
> Add correct host key in /.ssh/known_hosts to get rid of this message.
> RSA host key for dingo.merck.com has changed and you have 
> requested strict
> checking
> 
> 
> After I did some research on this, I found that I need to change the
> settings in /usr/bin/ssh-config. 
> What exactly should I do?
> I am not running sshd, but em still able to connect to the 
> host (on just 1
> port,ofcourse). When/why do I run sshd.exe?
> 
> Please help..
> Thanks,
> Shuba


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/

- Raw text -