version 1.323, 2020/04/03 02:27:12 |
version 1.324, 2020/04/10 00:52:07 |
|
|
.It Cm LocalForward |
.It Cm LocalForward |
Specifies that a TCP port on the local machine be forwarded over |
Specifies that a TCP port on the local machine be forwarded over |
the secure channel to the specified host and port from the remote machine. |
the secure channel to the specified host and port from the remote machine. |
The first argument must be |
The first argument specifies the listener and may be |
.Sm off |
.Sm off |
.Oo Ar bind_address : Oc Ar port |
.Oo Ar bind_address : Oc Ar port |
.Sm on |
.Sm on |
and the second argument must be |
or a Unix domain socket path. |
.Ar host : Ns Ar hostport . |
The second argument is the destination and may be |
|
.Ar host : Ns Ar hostport |
|
or a Unix domain socket path if the remote host supports it. |
|
.Pp |
IPv6 addresses can be specified by enclosing addresses in square brackets. |
IPv6 addresses can be specified by enclosing addresses in square brackets. |
Multiple forwardings may be specified, and additional forwardings can be |
Multiple forwardings may be specified, and additional forwardings can be |
given on the command line. |
given on the command line. |
|
|
empty address or |
empty address or |
.Sq * |
.Sq * |
indicates that the port should be available from all interfaces. |
indicates that the port should be available from all interfaces. |
|
Unix domain socket paths accept the tokens described in the |
|
.Sx TOKENS |
|
section. |
.It Cm LogLevel |
.It Cm LogLevel |
Gives the verbosity level that is used when logging messages from |
Gives the verbosity level that is used when logging messages from |
.Xr ssh 1 . |
.Xr ssh 1 . |
|
|
The remote port may either be forwarded to a specified host and port |
The remote port may either be forwarded to a specified host and port |
from the local machine, or may act as a SOCKS 4/5 proxy that allows a remote |
from the local machine, or may act as a SOCKS 4/5 proxy that allows a remote |
client to connect to arbitrary destinations from the local machine. |
client to connect to arbitrary destinations from the local machine. |
The first argument must be |
The first argument is the listening specification and may be |
.Sm off |
.Sm off |
.Oo Ar bind_address : Oc Ar port |
.Oo Ar bind_address : Oc Ar port |
.Sm on |
.Sm on |
|
or, if the remote host supports it, a Unix domain socket path. |
If forwarding to a specific destination then the second argument must be |
If forwarding to a specific destination then the second argument must be |
.Ar host : Ns Ar hostport , |
.Ar host : Ns Ar hostport |
|
or a Unix domain socket path, |
otherwise if no destination argument is specified then the remote forwarding |
otherwise if no destination argument is specified then the remote forwarding |
will be established as a SOCKS proxy. |
will be established as a SOCKS proxy. |
.Pp |
.Pp |
|
|
forwardings can be given on the command line. |
forwardings can be given on the command line. |
Privileged ports can be forwarded only when |
Privileged ports can be forwarded only when |
logging in as root on the remote machine. |
logging in as root on the remote machine. |
|
Unix domain socket paths accept the tokens described in the |
|
.Sx TOKENS |
|
section. |
.Pp |
.Pp |
If the |
If the |
.Ar port |
.Ar port |
|
|
The local username. |
The local username. |
.El |
.El |
.Pp |
.Pp |
.Cm Match exec , |
|
.Cm CertificateFile , |
.Cm CertificateFile , |
.Cm ControlPath , |
.Cm ControlPath , |
.Cm IdentityAgent , |
.Cm IdentityAgent , |
.Cm IdentityFile , |
.Cm IdentityFile , |
|
.Cm LocalForward, |
|
.Cm Match exec , |
|
.Cm RemoteCommand , |
and |
and |
.Cm RemoteCommand |
.Cm RemoteForward |
accept the tokens %%, %C, %d, %h, %i, %L, %l, %n, %p, %r, and %u. |
accept the tokens %%, %C, %d, %h, %i, %L, %l, %n, %p, %r, and %u. |
.Pp |
.Pp |
.Cm Hostname |
.Cm Hostname |