Support ssh on nonstandard ports

Port 22 can be a target for portscanning, so for those that wish to
listen elsewhere, support that by adding a field to nodelist
This commit is contained in:
John Goerzen 2019-10-23 07:19:01 -05:00
parent b61398309a
commit 4f5b52ca3c
2 changed files with 14 additions and 12 deletions

View File

@ -1,10 +1,10 @@
team,tilde.team
voyage,cosmic.voyage
center,tilde.center
dataforge,uucp.dataforge.tk
institute,tilde.institute
aussie,aussies.space
epfl,uucp.cothority.net
frostbyte,uucp.frostbyte.cc
radiofreqs,radiofreqs.space
caconym,dgold.eu
team,tilde.team,22
voyage,cosmic.voyage,22
center,tilde.center,22
dataforge,uucp.dataforge.tk,22
institute,tilde.institute,22
aussie,aussies.space,22
epfl,uucp.cothority.net,22
frostbyte,uucp.frostbyte.cc,22
radiofreqs,radiofreqs.space,22
caconym,dgold.eu,22

View File

@ -35,7 +35,8 @@ sub getNodes {
#$nodeName eq $myNode && continue
my $nodeAddress = $fields[1];
generatePort($nodeName,$nodeAddress);
my $nodePort = $fields[2];
generatePort($nodeName,$nodeAddress,$nodePort);
generateSys($nodeName);
generateCall($nodeName);
generatePasswd($nodeName);
@ -52,13 +53,14 @@ sub generatePort {
my $nodeName = shift;
my $nodeAddress = shift;
my $nodePort = shift;
my $currentNode = ucfirst($nodeName);
my $template = qq{
port $currentNode
type pipe
command /usr/bin/ssh -a -x -q -i /var/spool/uucp/.ssh/id_rsa -l uucp $nodeAddress
command /usr/bin/ssh -a -x -q -i /var/spool/uucp/.ssh/id_rsa -l uucp -p $nodePort $nodeAddress
reliable true
protocol etyig
};