Skip to content

Commit

Permalink
- typo fixes, better README
Browse files Browse the repository at this point in the history
  • Loading branch information
stealth committed Apr 26, 2012
1 parent 3e83d95 commit 5b33fc6
Show file tree
Hide file tree
Showing 3 changed files with 9 additions and 6 deletions.
2 changes: 1 addition & 1 deletion Makefile
Expand Up @@ -10,7 +10,7 @@ CFLAGS=-c -O2 -Wall
# SMTP/SSH multiplexer. The SSH_BANNER _must exaclty match_
# what your real ssh server tells you, otherwise the ssh client
# will detect the handshake as tempered, and will abort the
# connection
# connection. Newlines will be added by sshttpd itself.
SMTP_DOMAIN=-DSMTP_DOMAIN=\"example.com\"
SSH_BANNER=-DSSH_BANNER=\"SSH-2.0-OpenSSH_5.8\"

Expand Down
11 changes: 7 additions & 4 deletions README
Expand Up @@ -9,7 +9,7 @@ sshttp can multiplex the following protocol pairs:

- SSH/HTTP
- SSH/HTTPS
- SSH2/SMTP (without SMTP multiline banners)
- SSH/SMTP (without SMTP multiline banners)

sshttpd is an easy to use OSI-Layer5 switching daemon. It runs
transparently on HTTP port (-L switch, default 80) and decides
Expand All @@ -26,13 +26,16 @@ your traffic destinated to TCP port 80.

If you want to mux SMTP with sshttp, just give "25" as -L parameter, "2525"
as -H parameter, and setup your smtp daemon to listen on 2525. Then
edit the nf-setup script to match these ports. Done.
edit the nf-setup script to match these ports. In the Makefile, change the
SMTP_DOMAIN and SSH_BANNER to your needs (SSH_BANNER must match exactly
yours of the running sshd).
SMTP/SSH muxing was tested with OpenSSH client and Postfix client and server.

You dont need to patch any of your ssh/web client or server software. It
You dont need to patch any of your ssh/web/smtp client or server software. It
works as is. sshttpd runs only on Linux and needs IP_TRANSPARENT support.
It would work without, but by using IP_TRANSPARENT it is possible to even
have unmodified syslogs, e.g. the original source IP/port of incoming connections
is passed as-is to the SSH/HTTP servers.
is passed as-is to the SSH/HTTP/SMTP servers.

sshttpd is also a tricky anti-SSH0day (if ever:) and anti SSH-scanning/bruteforcing
measurement.
Expand Down
2 changes: 1 addition & 1 deletion sshttp.cc
Expand Up @@ -287,7 +287,7 @@ int sshttp::loop()

string smtp_ssh_banner = "220 ";
smtp_ssh_banner += SMTP_DOMAIN;
smtp_ssh_banner += " ESMTP Postifx\n";
smtp_ssh_banner += " ESMTP Postfix\n";
smtp_ssh_banner += SSH_BANNER;
smtp_ssh_banner += "\r\n";

Expand Down

0 comments on commit 5b33fc6

Please sign in to comment.