[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ssh: default configuration breaks IPv6



¡Hola!

[Cc'ing debian-ipv6, as usual]

Please leave the bug open. New ssh yet doesn't work.

tinuviel:~# dpkg -l ssh
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-files/Unpacked/Failed-config/Half-installed
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name                       Version                    Description
+++-==========================-==========================-====================================================================
ii  ssh                        2.3.0p1-1.2                Secure rlogin/rsh/rcp replacement (OpenSSH)

(using default sshd_config)

tinuviel:/etc/ssh# /etc/init.d/ssh start
Starting OpenBSD Secure Shell server: sshd.
tinuviel:/etc/ssh# netstat -an | grep 22
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN
tinuviel:/etc/ssh# ssh ::1
Secure connection to ::1 refused.

(BTW:)

tinuviel:/etc/ssh# grep ListenA /etc/ssh/sshd_config
ListenAddress 0.0.0.0
#ListenAddress ::

Thanks,
					HoraPe

On Wed, Jan 10, 2001 at 10:33:32PM +0100, Christian Kurz wrote:
> severity 80503 fixed
> thanks
> 
> On 01-01-02 horape@tinuviel.compendium.net.ar wrote:
> > > > Package: ssh
> > > > Version: 2.2.0p1-1.1
> > > > Severity: important
> 
> > > > /etc/ssh/sshd.conf has the line:
> 
> > > > ListenAddress 0.0.0.0
> 
> > > > This avoids ssh listening on IPv6 addresses. If the admin want not
> > > > to restrict ssh to IPv4 clients, there should not be any
> > > > ListenAddress directive (using ::1 would break IPv4, having no
> > > > ListenAddress directive sshd binds to ::1 if the host is
> > > > IPv6-capable or 0.0.0.0 else)
> 
> I close this report now as the new ssh packages on non-US should work
> fine with ipv6.
> 
> Ciao
>      Christian
> -- 
>           Debian Developer and Quality Assurance Team Member
>     1024/26CC7853 31E6 A8CA 68FC 284F 7D16  63EC A9E6 67FF 26CC 7853



-- 
					HoraPe
---
Horacio J. Peña
horape@compendium.com.ar
horape@uninet.edu
bofh@puntoar.net.ar
horape@hcdn.gov.ar



Reply to: