IETF-SSH archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: tcpip-forward requests and bind addresses



Hi,

How about the following which separates the thoughts into a list.

---

   The 'address to bind' and 'port number to bind' specify the IP address
   or domain name and port to which the socket to be listened is bound.
   Some strings used for the 'address to bind' have special-case
   semantics.

       "" means that connections are to be accepted from anywhere on all
       protocol families supported by the SSH implementation.

       "0.0.0.0" means to listen on all IPv4 addresses.  Note: not
       "interfaces"; the mapping between intefaces and addresses can be
       multi-valued in either direction.

       "::" means to listen on all IPv6 addresses.

       "localhost" means to listen on all protocol families supported by
       the SSH implementation on loopback addresses only.  Note: loopback
       addresses are defined in [RFC3330] for IPv4 and [RFC3513] for
       IPv6.

       "127.0.0.1" and "::1", while not really special cases for a
       normally configured system indicate listening on the loopback
       interfaces for IPv4 and IPv6 respectively.

   Note that the client can still filter connections based on information
   passed in the open request.

---

Comments?

Thanks,
Chris



Home | Main Index | Thread Index | Old Index