Subject: Re: running a second sshd
To: None <netbsd-users@netbsd.org>
From: Stefan 'Kaishakunin' Schumacher <stefan@net-tex.de>
List: netbsd-users
Date: 08/17/2005 21:43:47
--zS7rBR6csb6tI2e1
Content-Type: text/plain; charset=iso-8859-15
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Also sprach Andy Ruhl (acruhl@gmail.com)
> On 8/17/05, Steven M. Bellovin <smb@cs.columbia.edu> wrote:
> > >I *thought* you could specify more than one port in the config
> > >file...
> > >
> > >Is it your goal to just listen on 2 ports or actually run a
> > >totally
> > >separate instance? If the later, do you mind if I ask why?
> > >
> >
> > The primary instance listens on 0.0.0.0:22. The second instance
> > needs
> > to listen to port 443 on a particular IP address, for reasons that
> > I
> > suspect are obvious.... I had not realized that multiple Listen:
> > statements were allowed; I'll certainly try that. (The two
> > answers I
> > received -- copying rc.d/sshd and using rc.local -- are obvious
> > but not
> > clean...)
> >
>
> The man page for sshd_config states that you can use more than one
> ListenAddress statement, hopefully in such a way that you can listen
> on different IP addresses (it would kind of defeat the point if
> not).
ListenAddress can take an IP or an IP:Port Argument, multiple
ListenAddress Statements are allowed, like this, for a command line:
/usr/sbin/sshd -o ListenAddress=3D192.168.2.2:22 \
-o ListenAddress=3D192.168.2.2:443 \
-o ListenAddress=3D127.0.0.1:22 \
-o -ListenAddress=3D127.0.0.1:443
--=20
Der Geist des Kriegers sollte mit Beginn des Neujahrstages bis zum Ende
des Jahres vom Gedanken an seinen Tod beherrscht werden.
Daijouji Shigesuke in "Budo Shoshin Shuu"
--zS7rBR6csb6tI2e1
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (NetBSD)
iD8DBQFDA5NzEfTEHrP7rjMRAsAiAJ90aI/H4fB1kf3FYKOt8y7cLEDX0gCfbJ2K
eRN4tI1/CinI9mzuP1oBLTg=
=KgiQ
-----END PGP SIGNATURE-----
--zS7rBR6csb6tI2e1--