RE: Questions on Transparent Tunneling

[Saju Panikulam <spanikulam@xxxxxxxxxxxx>]

Hi,
For logging -  OpenSSH Logging and SysLog Forwarding may be an option.

Saju
-----Original Message-----
From: Jeremy Brock [mailto:jbrock@xxxxxxxxxxxxxx] 
Sent: Wednesday, October 23, 2013 4:09 PM
To: libssh@xxxxxxxxxx
Subject: Re: Questions on Transparent Tunneling

Hi Aris,

     Actually the SSH Client IP is exactly what I am after!  How can I force the Openssh server to use the SSH Client IP when forwarding the tunnel traffic to itself?

~Jeremy

-- 

Jeremy Brock

Vital Soft, Inc
www.vital-soft.com

On 10/23/2013 1:00 PM, Aris Adamantiadis wrote:
> Hi,
>
> I think what you want is not possible. The originating IP address of 
> your tunnel will always be either the SSH client or the SSH server 
> depending on the direction of the proxying. It would be very hard to 
> change that information because it is not supposed to be tamperable 
> (Inside the OS' kernel).
>
> I think your question is worth asking on a more general mailing list, 
> I'm afraid libssh is of no use for what you need.
>
> Regards,
>
> Aris
> Le 23/10/13 21:32, Jeremy Brock a écrit :
>> Hi Aris,
>>
>>      Please forgive my ignorance, I am new to the ssh tunneling 
>> terminology.  I am trying to setup a tunnel from a windows client 
>> running Putty (or other openssh client) to an HPUX host running 
>> openssh.  I would like to pass plain text traffic across the tunnel 
>> to the HPUX server while preserving the client IP when the port 
>> forwarding is done at the HPUX side to itself (since it is the destination).
>>
>>      I am currently able to tunnel with the following in putty, but 
>> unable to preserve my client IP when the forwarding occurs on the 
>> HPUX host :
>>
>>
>>
>>
>> ~Jeremy
>>
>> --
>>
>> Jeremy Brock
>>
>> Vital Soft, Inc
>> www.vital-soft.com
>>
>> On 10/23/2013 12:07 PM, Aris Adamantiadis wrote:
>>> Hi,
>>>
>>> I don't understand what you want. SSH supports tcp forwarding, and 
>>> yes there's some metadata transfered about origin of the connection. 
>>> (I guess you speak of ssh -R behaviour).
>>>
>>> Aris
>>>
>>> Le 23/10/13 18:35, Jeremy Brock a écrit :
>>>> Hi All,
>>>>
>>>>      Is possible with libssh, or openssh for that matter, to have a 
>>>> transparent tcp tunnel where the forwarded port traffic across the 
>>>> tunnel keeps intact the remote client ip address when received on 
>>>> the server side for logging purposes etc?
>>>>
>>>>      Thx!
>>>>
>>>>      ~Jeremy
>>>>
>