Amanda-Users

Encrypte backups: client configured ssh to listen on a different port

2007-03-14 17:39:46
Subject: Encrypte backups: client configured ssh to listen on a different port
From: Oscar Ricardo Silva <osilva AT scuff.cc.utexas DOT edu>
To: amanda-users AT amanda DOT org
Date: Wed, 14 Mar 2007 16:02:37 -0500
I've setup encrypted backups per <http://wiki.zmanda.com/index.php/Encryption> and it's working. Unfortunately, I have two clients that have configured the ssh daemon to listen on port 23 instead of 22. I thought I could get by this by creating an ssh config file on the amanda server dictating that for those particular hosts it should use port 23. I tested the config ~/.ssh/config and it works. The only problem is that amanda still appears to use port 22 to communicate with the client.

Is there something obvious I'm missing in telling amanda what port to use? I DO want the amanda server to use port 22 for all other clients, just not these two.


Here's a snippet of tcpdump from just attempting to ssh (with the port indicated in the ssh config file) to this non-standard client. The amanda server is 172.16.124.162 and the client is 146.6.97.210:

15:43:22.888005 IP (tos 0x0, ttl 61, id 1090, offset 0, flags [DF], proto 6, length: 52) 146.6.97.210.telnet > 172.16.124.162.34074: . [tcp sum ok] ack 687 win 1768 <nop,nop,timestamp 369358898 441212078>

15:43:22.890255 IP (tos 0x0, ttl 61, id 1092, offset 0, flags [DF], proto 6, length: 204) 146.6.97.210.telnet > 172.16.124.162.34074: P 663:815(152) ack 687 win 1768 <nop,nop,timestamp 369358900 441212078>

15:43:22.893841 IP (tos 0x0, ttl 64, id 64820, offset 0, flags [DF], proto 6, length: 196) 172.16.124.162.34074 > 146.6.97.210.telnet: P 687:831(144) ack 815 win 2100 <nop,nop,timestamp 441212084 369358900>

15:43:22.901999 IP (tos 0x0, ttl 61, id 1094, offset 0, flags [DF], proto 6, length: 516) 146.6.97.210.telnet > 172.16.124.162.34074: P 815:1279(464) ack 831 win 2088 <nop,nop,timestamp 369358912 441212084>



and here's what I see when I do amcheck:

15:42:39.679985 IP (tos 0x0, ttl 61, id 58766, offset 0, flags [DF], proto 6, length: 52) 146.6.97.210.ssh > 172.16.124.162.34073: . [tcp sum ok] ack 23 win 1448 <nop,nop,timestamp 369315689 441168863>

15:42:39.679994 IP (tos 0x0, ttl 64, id 48429, offset 0, flags [DF], proto 6, length: 692) 172.16.124.162.34073 > 146.6.97.210.ssh: P 23:663(640) ack 23 win 1460 <nop,nop,timestamp 441168863 369315689>



Any information would be appreciated.



Oscar

<Prev in Thread] Current Thread [Next in Thread>
  • Encrypte backups: client configured ssh to listen on a different port, Oscar Ricardo Silva <=