I've looked over the man page for `ssh' and `ssh_config' on several
systems and I think people have it backwards. The pages I read indicate that
`-X' is more secure than `-Y'. Under the `-X' part on several systems I have
access to says:
"For this reason, X11 forwarding is subjected
On Sat, Dec 08, 2007, Les Mikesell wrote:
>Les Bell wrote:
>>Les Mikesell <[EMAIL PROTECTED]> wrote:
>>
>>What's a 'trusted' forwarding mean as opposed to any other kind?
>><<
>>
>>A trusted X11 client will bypass the security controls specified in the X11
>>Security Extension Specification (see
>>
Les Bell wrote:
Les Mikesell <[EMAIL PROTECTED]> wrote:
What's a 'trusted' forwarding mean as opposed to any other kind?
<<
A trusted X11 client will bypass the security controls specified in the X11
Security Extension Specification (see
http://refspecs.freestandards.org/X11/security.pdf). In g
Amos Shapira wrote:
On 07/12/2007, Karanbir Singh <[EMAIL PROTECTED]> wrote:
I am not doubting that -X will mostly work, but perhaps we should be
promoting the idea of -Y a bit more.
I'm totally with you about promoting security, but I got the
impression it's the other way around and -X is the
On 07/12/2007, Karanbir Singh <[EMAIL PROTECTED]> wrote:
> I am not doubting that -X will mostly work, but perhaps we should be
> promoting the idea of -Y a bit more.
I'm totally with you about promoting security, but I got the
impression it's the other way around and -X is the more secure one:
Bill Campbell <[EMAIL PROTECTED]> wrote:
>>
>(In fact, if you're on a trusted network, you shouldn't need to use SSH at
>all, since you trust the devices (and their users) attached to the network
>not to do nasty things like network sniffing, MitM attacks, etc.).
True enough, but ssh makes the X
Bill Campbell <[EMAIL PROTECTED]> wrote:
>>
True enough, but ssh makes the X11 DISPLAY things so easy! One
doesn't have to much with xhosts and such.
<<
Absolutely - you might *want* to use SSH for the convenience, but you
shouldn't *need* to. I preach "SSH Everywhere" as SOP, even on trusted
n
Caveat to using firefox over X11... you will sometimes get corrupted
images and icons. This is because firefox (and many other X11
applications) use shared memory to store images. The corruption comes
because your local X11 server cant see that memory location and will
write whatever it can get to
On Sat, Dec 08, 2007, Les Bell wrote:
>
>Les Mikesell <[EMAIL PROTECTED]> wrote:
>
>>>
>What's a 'trusted' forwarding mean as opposed to any other kind?
><<
>
>A trusted X11 client will bypass the security controls specified in the X11
>Security Extension Specification (see
>http://refspecs.freesta
Les Mikesell <[EMAIL PROTECTED]> wrote:
>>
What's a 'trusted' forwarding mean as opposed to any other kind?
<<
A trusted X11 client will bypass the security controls specified in the X11
Security Extension Specification (see
http://refspecs.freestandards.org/X11/security.pdf). In general, you do
On Fri, Dec 07, 2007, Les Mikesell wrote:
>Karanbir Singh wrote:
>
>ssh -X firefox
you prolly meant -Y :D
>>>Ok well just double checked and tested it here and -X works here. I
>>>knew about -Y but thought you only use that if you absolutely have too :)
>>
>>the reason I would prefer
Les Mikesell wrote:
> Karanbir Singh wrote:
>
> ssh -X firefox
you prolly meant -Y :D
>>> Ok well just double checked and tested it here and -X works here. I
>>> knew about -Y but thought you only use that if you absolutely have
>>> too :)
>>
>> the reason I would prefer -Y is that
Karanbir Singh wrote:
ssh -X firefox
you prolly meant -Y :D
Ok well just double checked and tested it here and -X works here. I
knew about -Y but thought you only use that if you absolutely have too :)
the reason I would prefer -Y is that its ( well, the man page says
anyway ) more secure
Akemi Yagi wrote:
> ssh -D 1080
>
> In firefox, Go to Edit -> Preferences -> Advanced -> Network -> Settings
>
Does firefox honour the Gnome Network Proxy settings ? If so, that might
be another way to setup socks for the client side. It would allow you to
have a fair few apps 'just work'.
--
Clint Dilks wrote:
>>> ssh -X firefox
>> you prolly meant -Y :D
>>
> Ok well just double checked and tested it here and -X works here. I
> knew about -Y but thought you only use that if you absolutely have too :)
the reason I would prefer -Y is that its ( well, the man page says
anyway ) more se
On Dec 7, 2007 7:53 AM, Jon Stanley <[EMAIL PROTECTED]> wrote:
> Or better yet use ssh -d and set your local SOCKS
> proxy to localhost: in your browser.
Yes, the SOCKS proxy method is indeed handy and you can redirect only
selected URLs fairly easily. In my case, there are web sites I can
acce
On Dec 6, 2007 11:22 PM, Amos Shapira <[EMAIL PROTECTED]> wrote:
>
> You can take it further (if you have more than one site/port to
> connect to) - install a proxy on the remote machine (e.g. "squid" or
> maybe apache's mod_proxy) and forward a tunnel to it as you describe
> then setup localhost:
On 07/12/2007, Ross Cavanagh <[EMAIL PROTECTED]> wrote:
> John R Pierce wrote:
> > Jerry Geis wrote:
> >> I can ssh into a remote machine.
> >> I can start X on that machine with startx
> >>
> >> How do I then start firefox on that machine (from the ssh prompt) and
> >> have it display on my machin
Karanbir Singh wrote:
Clint Dilks wrote:
ssh -X firefox
you prolly meant -Y :D
Ok well just double checked and tested it here and -X works here. I
knew about -Y but thought you only use that if you absolutely have too :)
Anyway Have a Great Day
John R Pierce wrote:
Jerry Geis wrote:
I can ssh into a remote machine.
I can start X on that machine with startx
How do I then start firefox on that machine (from the ssh prompt) and
have it display on my machine in my office.
So I want to be using firefox on the remote machine but displaying
On 07/12/2007, Jerry Geis <[EMAIL PROTECTED]> wrote:
>
>
> >
> > Jerry Geis wrote:
> > >/ I can ssh into a remote machine.
> > />/ I can start X on that machine with startx
> > />/
> > />/ How do I then start firefox on that machine (from the ssh prompt) and
> > />/ have it display on my machine i
On 07/12/2007, Karanbir Singh <[EMAIL PROTECTED]> wrote:
> Clint Dilks wrote:
> >
> > ssh -X firefox
>
> you prolly meant -Y :D
Why? It's less secure and -X is good enough 99% of the time (I always use -X).
--Amos
___
CentOS mailing list
CentOS@centos.
On 07/12/2007, Jerry Geis <[EMAIL PROTECTED]> wrote:
>
>
> Jerry Geis wrote:
> > I can ssh into a remote machine.
> > I can start X on that machine with startx
> >
> > How do I then start firefox on that machine (from the ssh prompt) and
> > have it display on my machine in my office.
> >
> > So I
Clint Dilks wrote:
ssh -X firefox
you prolly meant -Y :D
--
Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED]
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
>/
/>/ Jerry Geis wrote:
/>/ >/ I can ssh into a remote machine.
/>/ />/ I can start X on that machine with startx
/>/ />/
/>/ />/ How do I then start firefox on that machine (from the ssh prompt) and
/>/ />/ have it display on my machine in my office.
/>/ />/
/>/ />/ So I want to be using firefo
Jerry Geis wrote:
>/ I can ssh into a remote machine.
/>/ I can start X on that machine with startx
/>/
/>/ How do I then start firefox on that machine (from the ssh prompt) and
/>/ have it display on my machine in my office.
/>/
/>/ So I want to be using firefox on the remote machine but display
I can ssh into a remote machine.
I can start X on that machine with startx
No need to start X on the remote machine. You need to do "ssh -X
" so that X is forwarded (back to the machine that you
ssh'ed from). Make sure that "X11Forwarding yes" is set in the /etc/
ssh/sshd_config file (res
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jerry Geis wrote:
>
> So I want to be using firefox on the remote machine but displaying the
> screen output from firefox in my office.
> Both boxes are running centos 5.
>
> how is that done?
First, man ssh, so you can read the ssh manual. Second
Jerry Geis wrote:
I can ssh into a remote machine.
I can start X on that machine with startx
How do I then start firefox on that machine (from the ssh prompt) and
have it display on my machine in my office.
So I want to be using firefox on the remote machine but displaying the
screen output fro
Jerry Geis wrote:
I can ssh into a remote machine.
I can start X on that machine with startx
How do I then start firefox on that machine (from the ssh prompt) and
have it display on my machine in my office.
So I want to be using firefox on the remote machine but displaying the
screen output f
I can ssh into a remote machine.
I can start X on that machine with startx
How do I then start firefox on that machine (from the ssh prompt) and
have it display on my machine in my office.
So I want to be using firefox on the remote machine but displaying the
screen output from firefox in my off
31 matches
Mail list logo
