Package: shellinabox
Version: 2.14-1
Severity: important
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
I am attempting to install this behind an authenticated reverse proxy. Since
I cannot specify "--localhost-only" I cannot restrict access.
* What exactly did you do (or not do) that was effective (or
ineffective)?
I changed the port from the default of 4200 to 4201 to see if this altered
the listening port - and it did - but specifying --localhost-only in the ARGS
field did not affect the netstat listening port:
tcp 0 0 localhost:4201 *:*
* What was the outcome of this action?
Access is allowed on the new port but from any source IP address
* What outcome did you expect instead?
Access should be allowed on the new port but only from localhost.
*** End of the template - remove these template lines ***
-- System Information:
Debian Release: 8.0
APT prefers testing-updates
APT policy: (500, 'testing-updates'), (500, 'testing'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.18.5-x86_64-linode52 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages shellinabox depends on:
ii adduser 3.113+nmu3
ii libc6 2.19-15
ii libpam0g 1.1.8-3.1
ii libssl1.0.0 1.0.1k-3
ii lsb-base 4.1+Debian13+nmu1
ii zlib1g 1:1.2.8.dfsg-2+b1
shellinabox recommends no packages.
Versions of packages shellinabox suggests:
ii openssl 1.0.1k-3
-- Configuration Files:
/etc/default/shellinabox changed:
SHELLINABOX_DAEMON_START=1
SHELLINABOX_PORT=4201
SHELLINABOX_ARGS="--no-beep --localhost-only -s /:SSH:127.0.0.1"
-- no debconf information
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
