kingToolbox / kingToolbox/WindTerm

通过代理(跳板)解析域名

Open
#2,331 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
32.3k
Forks
2.5k
PR merge metrics
No merged PRs in 30d

Description

新建 SSH 会话,Host 设为 host-name.internal ,这是一个内部DNS能够解析的域名。

然后设置 Proxy ,使用另一个 SSH 会话 (jumpbox) 作为代理(跳板)。

连接后提示

```
SOCKS version 5 protocol error
The session is disconnected, press Enter to reconnect.
```

如果我把 host-name.internal 会话的 host 修改成 IP 地址,则可以成功连接。

如果我先连接 jumpbox 会话,在 jumpbox 会话中再执行 ssh user@host-name.internal ,也可以成功连接。

所以诊断出 WindTerm 没有通过代理来解析域名,而是先在本地解析域名,再通过代理建立连接。

作为对比,同样的使用方式,在 SecureCRT 中一切正常, 可以使用 jumpbox 会话作为 Firewall 来连接 host-name.internal 主机。(SecureCRT 把代理叫做 Firewall)

Contributor guide

No contributing guide indexed for this repository

Research direction

Reproduce the SSH session using host-name.internal and a jumpbox session as the proxy, then compare it with connecting by IP or running SSH from the jumpbox. Investigate where proxy connections resolve the destination hostname; done when the internal hostname is resolved through the proxy and the session connects without the SOCKS protocol error.

Written by the indexing model from the issue text.

Assessment

Tech stack
c
Domain
cli, networking
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.