ssh SOCKS vs. IPv6 destinations

["Steven M. Bellovin" <smb%cs.columbia.edu@localhost>]

I generally do my browsing over an ssh tunnel to somewhere not on a
wireless net, for all the obvious reasons.  In the past, I've run a
squid proxy on a well-located machine, and ssh'd to it, forwarding port
3128 (or whatever) from my laptop to that proxy.  In the interest of
reducing the number of moving parts I have to maintain, I tried using
ssh's built-in SOCKS proxy (the DynamicForward option in the config
file) instead.  That works well for most web sites, but if the web site
has a AAAA record -- and that includes www.netbsd.org -- the connection
returns EOF immediately.

Any fixes?  Work-arounds?


                --Steve Bellovin, http://www.cs.columbia.edu/~smb