[NMLUG] ssh X forwarding

Aaron Birenboim nmlug@swcp.com
Wed, 07 Nov 2001 10:46:17 -0700


James Hamilton wrote:
> 
> Are you saying if I ssh to host 1 then to host 2 then to host 3 and forward things through that tunnel that security is degraded or are you talking about using 'xhost' to degrade security?

> 
> On Wed, Nov 07, 2001 at 10:06:16AM -0700, Robbins, Wesley L wrote:
> > A little side note (I do not know your level so please
> > dismiss this if you already know this). If you allow
> > Daisy chain ssh X forwarding you greatly decrease
> > security on the internal network.

Seems to me like daisy chains of ssh forwards will be fine.
Sending X on host3 to host2:10 by cleartext might be a problem,
but I don't intend to do that.
-- 
Aaron Birenboim | Black holes are where G-d divided
Albuquerque, NM |      by zero.
aaron@boim.com  |
boim.com/~aaron |                      -Steven Wright
------------------------------------------------------
To UNSUBSCRIBE send a message to nmlug-request@swcp.com
with only the word unsubscribe in the body.  More
information can be found at www.nmlug.org/info.html
-----------------------------------------------------