[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#965132: openssh-server: add ssh@.socket



Package: openssh-server
Version: 1:8.3p1-1
Priority: wishlist
Tags: patch

Hi,

when having some daemon listening on another IP address on the same port as 
the regular sshd, sshd must not listen on wildcard.

Because IP addresses might come up later than sshd on bootup, sshd might miss 
relevant listen addresses.

The problem can be solved by either patching sshd to use IP_FREEBIND or using 
the attached template socket unit with systemd.

Usage:
systemctl enable --now ssh@192.0.2.42.socket ssh@[2001:db8::2a].socket


Regards
Timo Weingärtner
-- 
ITscope GmbH
Ludwig-Erhard-Allee 20
D-76131 Karlsruhe

Tel: +49 721 627376-0
Fax: +49 721 66499175

https://www.itscope.com

Handelsregister: AG Mannheim, HRB 232782 Sitz der Gesellschaft: Karlsruhe
Geschäftsführer: Alexander Münkel, Benjamin Mund, Stefan Reger
[Unit]
Description=OpenBSD Secure Shell server socket
Before=ssh.service
Conflicts=ssh.service ssh.socket
ConditionPathExists=!/etc/ssh/sshd_not_to_be_run

[Socket]
ListenStream=%I:22
FreeBind=yes
Accept=yes

[Install]
WantedBy=sockets.target

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: