From mike.gabriel@das-netzwerkteam.de Thu Mar 28 09:27:48 2013 Received: (at submit) by bugs.x2go.org; 28 Mar 2013 08:27:48 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=URIBL_BLOCKED autolearn=ham version=3.3.2 Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199]) by ymir (Postfix) with ESMTPS id 18E7A5DA79 for ; Thu, 28 Mar 2013 09:27:48 +0100 (CET) Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98]) by freya.das-netzwerkteam.de (Postfix) with ESMTPS id B4DA4C07 for ; Thu, 28 Mar 2013 09:27:47 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id AEA883BB37 for ; Thu, 28 Mar 2013 09:27:47 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de Received: from grimnir.das-netzwerkteam.de ([127.0.0.1]) by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n+cr2N-mCtRw for ; Thu, 28 Mar 2013 09:27:47 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 8B88C3BB4E for ; Thu, 28 Mar 2013 09:27:47 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 7330C3BB37 for ; Thu, 28 Mar 2013 09:27:47 +0100 (CET) Received: by grimnir.das-netzwerkteam.de (Postfix, from userid 33) id 2FA4A3BB4E; Thu, 28 Mar 2013 09:27:46 +0100 (CET) Received: from 224-186-142-46.pool.kielnet.net (224-186-142-46.pool.kielnet.net [46.142.186.224]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP; Thu, 28 Mar 2013 09:27:46 +0100 Message-ID: <20130328092746.752271kyzpwykyrm@mail.das-netzwerkteam.de> X-Priority: 3 (Normal) Date: Thu, 28 Mar 2013 09:27:46 +0100 From: Mike Gabriel To: submit@bugs.x2go.org Subject: Limit tunneled (localhost -> localhost) traffic to IPv4 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=_6yo0c5irmjgi"; protocol="application/pgp-signature"; micalg="pgp-sha1" Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) H3 (4.3.4) This message is in MIME format and has been PGP signed. --=_6yo0c5irmjgi Content-Type: text/plain; charset=UTF-8; DelSp="Yes"; format="flowed" Content-Disposition: inline Content-Transfer-Encoding: 7bit Package: x2goclient Version 4.0.1.0 Severity: grave Tag: ipv6 Hi Alex, Orion reported this issue on IRC: https://red.libssh.org/issues/101 To work around it, I guess, we should limit the tunnel connections in X2Go to IPv4 (as they are localhost to localhost connections anyway). Here is the IRC backlog of the reported issue: 18:51 < orionp> Is there a known issue with x2client and ssh proxy connections with passwords? I'm getting "connection refused". 18:56 < neverpanic> you mean your ssh host is password-protected? No, that works. 18:56 < neverpanic> at least for me 18:57 < neverpanic> connection refused doesn't sound like an authentication issue anyway 18:57 < orionp> It seems to be a ssh hanshake issue 18:57 < orionp> handshake 18:57 < orionp> It seems like this used to work for me, but now it doesn't 18:58 < orionp> Even with ssh-agent it fails now, though with a different error. 19:47 < orionp> Hmm, looks like a race condition - tries to connect to the ssh tunnel port before it is bound Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, rothenstein 5, 24214 neudorf-bornstein fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb --=_6yo0c5irmjgi Content-Type: application/pgp-signature Content-Description: Digitale PGP-Unterschrift Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAABAgAGBQJRU/8CAAoJEJr0azAldxsx7xsQAKIMjF7wkyG5aKsfd2rOIbyo e8ySt0rewVKZva+Cv/w1l4cOKvHgtq9NeReYYHgwwrEN+mtuVanOyyiBh9GRw+UZ KvEGDZXR0++kBtsb3BLd4JbkVGp5fAu1cLHUf59n/8WMCtTnXDwqxYGmG8lqHQT+ HmefpVPNNzfqLjkqjVfidlygcIbw9qeWeei3Tc/8t1CSFTiF6C2gRpbQrlrPUhCA fBONJwauxK7FAjEmkTsyamRuT4xL4Sw8D16y4y1zGclgclkvt+I/PM70fQKXSiUE 23DCNCcUBTBqae/FmXnbJUQqQ2Rz5xcLP42elPk0eCVgpHR4DXXfeJJHR3nhM5wa UwmiU4ceG++sWIrbJt7i6nS4Tv0YPwjjIGXFfIPfVrsWPR80TAQJfE4ixOzbmMvr FpIqdF7hYvmWO8P6PGp6WrST/mLgZTMz6n58etcvS7BC4UVHz5975EkPorHZSQm2 iARJPR2mexui7tDojLJiowGv5J/R9+mGk5guDGS7+vHImVa3TFfLQlPYpYBuWcmW NUlLvKzccce79xRSnzw/UJBrzbXV11o+Qh/Vks0P9NDo6gV1ubvivZw6TSVQr6nM tqCWfmC6MKHOThny1/PPSR7l185t7kJ45EHV6oRZ0q9bjQdMo/yW/uXXiYYthJkD Di4NFbfcy0xHUlaDyaOP =PaKm -----END PGP SIGNATURE----- --=_6yo0c5irmjgi--