Commit graph

31 commits

Author SHA1 Message Date
Jaime Pillora ce307e580c move chisel to flyio 2023-01-28 17:01:37 +11:00
Noah Williams 66455a64e9 Delete redundant verbage 2021-03-14 15:30:59 -08:00
Noah Williams 2a44830ed0 Add description for server mode 2021-03-14 15:30:18 -08:00
Noah Williams 46692b9c4f Capitalization revision 2021-03-14 15:29:12 -08:00
Noah Williams 7eed68ffc5 Improve description of Chisel server function 2021-03-14 15:28:43 -08:00
Noah Williams 2037ed44c2 Capitalization revision 2021-03-14 15:27:00 -08:00
Noah Williams 597a22d599 Add client description 2021-03-14 15:26:43 -08:00
Noah Williams 1a4d7e10bb Delete redundant scripts 2021-03-14 15:24:16 -08:00
Noah Williams 4d057d7fde Capitalization revision 2021-03-14 15:23:39 -08:00
Noah Williams 004471b6b7 Spelling revision 2021-03-14 15:23:02 -08:00
Noah Williams 2e4920ec69 Semantic revision 2021-03-14 15:22:39 -08:00
Noah Williams 2b922bc604 Grammatical revision 2021-03-14 15:20:58 -08:00
Noah Williams b8f74ecabc Semantic revision 2021-03-14 15:19:24 -08:00
Noah Williams 93858e6f98 Additional formatting revision 2021-03-13 12:55:06 -09:00
Noah Williams b1c9eefec1 Formatting revision 2021-03-13 12:54:46 -09:00
Noah Williams a65716a1b6 Add docker-compose client section 2021-03-13 12:49:35 -09:00
Noah Williams ab3eec53d9 Add authfile 2021-03-13 12:35:36 -09:00
Noah Williams 29783d3dfc Clarify syntax used in compose file 2021-03-13 12:34:32 -09:00
Noah Williams c19ff8a194 Add server compose file 2021-03-13 12:29:23 -09:00
Noah Williams f30e814eb7 Add intro 2021-03-13 12:20:21 -09:00
Noah Williams 1cc5ad4bfc Update formatting in preparation for Docker section 2021-03-13 12:19:32 -09:00
Noah Williams 816ee43265 Grammatical revisions 2021-03-13 12:11:24 -09:00
Noah Williams e136e0ff8d Add use case 2021-03-13 12:09:25 -09:00
Noah Williams 2875fa14d1 Add client setup 2021-03-13 12:04:32 -09:00
Noah Williams d198ce3132 Add server configuration 2021-03-13 11:56:31 -09:00
Noah Williams deafd5272b Add beginnging of reverse-tunneling guide 2021-03-13 11:46:28 -09:00
Noah Williams af38a54d8d Add client reverse example with authentication 2021-03-11 14:32:49 -09:00
Noah Williams e1b0eb9937 Add plain authenticated chisel server (reverse) 2021-03-11 14:25:17 -09:00
Eric Sunshine a11a3dd2dd server: add reverse port forwarding restrictions
Although reverse port forwarding (sharing client ports with the server)
should not generally leak any resources from the server to the client,
the facility may nevertheless be abused if the client is able to open a
server port which is otherwise meant for some other purpose on the
server. (This might happen, for instance, if a service on the server has
crashed or becomes somehow disabled, thus freeing the port which would
otherwise be occupied by the service.)

To mitigate such potential abuse, disable reverse port forwarding by
default and introduce server option --reverse to enable it explicitly.
Additionally, subject reverse port forwarding remotes to server-side
--authfile restrictions (for instance, "^R:0.0.0.0:7000$").
2018-12-23 16:25:45 -05:00
Jaime Pillora 1871137e32 ssh working, user auth working, addr whitelisting (mostly) working 2015-03-19 02:41:17 +11:00
Jaime Pillora 68eb79a634 progressing to users and remote address whitelists 2015-03-19 01:25:20 +11:00