Re: Questions on Transparent Tunneling

[Jeremy Brock <jbrock@xxxxxxxxxxxxxx>]

Hi Saju,

    The logging that I am after is actually on the HPUX system where 
one of my listener applications reports the IP addresses that connect to 
it on a specific port.  When the SSH TUNNEL traffic is received by my 
program running on HPUX, it logs the HPUX IP as the client connecting to 
it.  This makes sense since the openssh server is forwarding the traffic 
to the destination host:port.  However it destroys any chance of auditing.

    I know that this can be done via Transparent Proxy mode with 
stunnel on Linux iptables, so I am grasping at straws for a UNIX solution.

~Jeremy

--

Jeremy Brock

Vital Soft, Inc
www.vital-soft.com

On 10/23/2013 1:25 PM, Saju Panikulam wrote:
> Hi,
> For logging -  OpenSSH Logging and SysLog Forwarding may be an option.
>
> Saju
> -----Original Message-----
> From: Jeremy Brock [mailto:jbrock@xxxxxxxxxxxxxx]
> Sent: Wednesday, October 23, 2013 4:09 PM
> To: libssh@xxxxxxxxxx
> Subject: Re: Questions on Transparent Tunneling
>
> Hi Aris,
>
>       Actually the SSH Client IP is exactly what I am after!  How can I force the Openssh server to use the SSH Client IP when forwarding the tunnel traffic to itself?
>
> ~Jeremy