Arch Linux

zidarsk8

Member

Registered: 2011-12-06

Posts: 97

[solved] ssh proxycommand problems with ipv6

hi,

this is my .ssh/config - IPs have been changed

Host dog
    HostName 8.2.1.18
    User zidar
    Port 1248

Host az
    HostName 2.2.19.12
    User zidar

Host mc_via_az
    HostName 21:2:49:1::5
    User zidar
    ProxyCommand ssh az nc -q0 %h %p 2> /dev/null

Host mc_via_dog 
    HostName 21:2:49:1::5
    User zidar
    ProxyCommand ssh dog nc -q0 %h %p 2> /dev/null   

Host kami
    User zidar
    HostName 10.0.0.2
    Port 5555
    ProxyCommand ssh dog -W %h:%p # this works on Dog but it's not good with ipv6 becauso of the ":"

manual ssh connections work on all machines

my problems:

ssh kami         # works
ssh mc_via_az    # works
ssh mc_via_dog   # doesn't work and shows: ssh_exchange_identification: Connection closed by remote host

I should mention that I can connect to each and every server there from AZ, DOG and my current pc without any proxy commands.
the only problem I have is using DOG as a proxy to an ipv6 machine. And yead ping6 ipv6.google.com also works on DOG

the main difference is that AZ is a ubuntu 12.04, while DOG is running up to date ArchLinux.

edit: solution was to use community/openbsd-netcat version of netcat.

Last edited by zidarsk8 (2014-03-22 01:56:52)

p0x8

Member

Registered: 2012-09-20

Posts: 70

Re: [solved] ssh proxycommand problems with ipv6

Have you checked the output of verbose mode for useful details?

ssh -vvv mc_via_dog

zidarsk8

Member

Registered: 2011-12-06

Posts: 97

Re: [solved] ssh proxycommand problems with ipv6

I did, but it didn't say anything more useful than "ssh_exchange_identification: Connection closed by remote host"

but I did manage to get it running today.

the error was:
i installed extra/gnu-netcat instead of community/openbsd-netcat on my DOG, and it turnes out that the gnu version has a few problems with ipv6 and doesn't even support all the flags that the bsd verision has.