Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT sources DOT redhat DOT com
Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
From: "Michael Erdely" <cygwin AT cygwin DOT com>
To: <cygwin AT cygwin DOT com>
Subject: RE: SSH on multiple ports
Date: Wed, 11 Jul 2001 15:04:14 -0400
Message-ID: <001501c10a3c$478f3e50$051865c6@merdelyxp>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2616
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2505.0000
In-Reply-To: <A33B09832F4CD411974400508BCF8F2B0343864B@uswsmx18.merck.com>

Shuba,
  I'm not running OpenSSH_2.3.0p1, I'm running OpenSSH_2.9p1.  I'm not
sure if it's different.
  But I have the same problem: My ssh hosts are behind a firewall.  I do
port mapping like this:
firewall.ip.address:8022 -> host1.internal.address:22
firewall.ip.address:8122 -> host2.internal.address:22

>From "man ssh", I found the HostKeyAlias and CheckHostIP options.
When I want to connect to host 1, I use:
ssh -p 8022 -o "HostKeyAlias=host1" -o "CheckHostIP=no"
user AT firewall DOT ip DOT address

When I want to connect to host 2, I use:
ssh -p 8122 -o "HostKeyAlias=host2" -o "CheckHostIP=no"
user AT firewall DOT ip DOT address

I do not get prompted for the key change problem.  I hope this helps
you.

-ME

> -----Original Message-----
> From: cygwin-owner AT sources DOT redhat DOT com 
> [mailto:cygwin-owner AT sources DOT redhat DOT com] On Behalf Of Simha, Shuba
> Sent: Wednesday, July 11, 2001 1:38 PM
> To: Cygwin (E-mail)
> Subject: SSH on multiple ports
> 
> 
> I have Cygwin-1.1.5 with OpenSSH_2.3.0p1.
> 
> I am using Expect to connect to a proxy through SSH. It works well. 
> Howver, if I try to connect to the same proxy on other ports, 
> it does not
> connect. It gives the following warning:
> 
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
>  @    WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED!     @
> @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
> IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
> Someone could be eavesdropping on you right now 
> (man-in-the-middle attack)!
> It is also possible that the RSA host key has just been changed.
> Please contact your system administrator.
> Add correct host key in /.ssh/known_hosts to get rid of this message.
> RSA host key for dingo.merck.com has changed and you have 
> requested strict
> checking
> 
> 
> After I did some research on this, I found that I need to change the
> settings in /usr/bin/ssh-config. 
> What exactly should I do?
> I am not running sshd, but em still able to connect to the 
> host (on just 1
> port,ofcourse). When/why do I run sshd.exe?
> 
> Please help..
> Thanks,
> Shuba


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/