Lists

Open Menu Close Menu

Terms and Conditions
Lists hosted on this site
Email the Postmaster
Tips for posting to public mailing lists

Re: launchd agent for securing mail through ssh tunnel

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: launchd agent for securing mail through ssh tunnel

Subject: Re: launchd agent for securing mail through ssh tunnel
From: "James Peach" <email@hidden>
Date: Fri, 13 Apr 2007 13:01:17 -0700

On 13/04/07, Nicola Vitacolonna <email@hidden> wrote:

Hi,
I use to read email through an ssh tunnel and I want to turn the task
into an on-demand launchd user agent. So far, I have come out with
the following, "nearly working", solution:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://
www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
        <key>Label</key>
        <string>my.smtp.server</string>
        <key>OnDemand</key>
        <true/>
        <key>Program</key>
        <string>/usr/bin/ssh</string>
        <key>ProgramArguments</key>
        <array>
                <string>ssh</string>
                <string>-i</string>
                <string>/Users/myself/.ssh/my-ssh-key</string>
                <string>-l</string>
                <string>myself</string>
                <string>-N</string>
                <string>-q</string>
                <string>-T</string>
                <string>-o</string>
                <string>Protocol=2</string>
                <string>-o</string>
                <string>ConnectionAttempts=3</string>
                <string>-o</string>
                <string>ServerAliveCountMax=3</string>
                <string>-o</string>
                <string>ServerAliveInterval=5</string>
                <string>-o</string>
                <string>ExitOnForwardFailure=yes</string>
                <string>-L</string>
                <string>1200:localhost:25</string>
                <string>my.smtp.server</string>
        </array>
        <key>RunAtLoad</key>
        <false/>
        <key>ServiceDescription</key>
        <string>SSH tunnel from localhost:1200 to my.smtp.server:25</string>
        <key>Sockets</key>
        <dict>
                <key>Listeners</key>
                <dict>
                        <key>SockServiceName</key>
                        <string>1200</string>
                        <key>SockType</key>
                        <string>stream</string>
                </dict>
        </dict>
</dict>
</plist>

I have a couple of problems, though:

1) The first email sent during a session correctly triggers the ssh
tunnel on, but the mail client (I have tried with Apple Mail and
Thunderbird) hangs on "Connecting to localhost...". If I stop sending
the email and try again (now the tunnel is already active) the mail
is sent. Subsequent messages are also sent without any problem.


Ar you sure that ssh isn't prompting?

2) When I pull out the network cable (e.g., because I change
location), ssh quits after a while (see options ServerAliveInterval
and ServerAliveCountMax); it is respawned by launchd, however, no
matter how long it has been running. Since there is no network
available, ssh exits again, and so repearedly until the job is
eventually removed. So, I have to unload/load the plist when I
connect the cable again.


Remove the RunAtLoad key? I use this with Mail.app, and it works just fine:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN"
"http://www.apple.com/DTDs/PropertyList-1.0.dtd";>
<plist version="1.0">
<dict>
       <key>Label</key>
       <string>my.mail.service</string>
       <key>Program</key>
	<string>/usr/bin/ssh</string>
       <key>ProgramArguments</key>
       <array>
		<string>/usr/bin/ssh</string>
		<string>-L</string>
		<string>9025:mailserver:25</string>
		<string>jpeach@mailserver</string>
		<string>imapd</string>
       </array>
	<key>inetdCompatibility</key>
	<dict>
	    <key>Wait</key>
	    <false/>
	</dict>
	<key>Sockets</key>
	<dict>
	    <key>Listeners</key>
	    <dict>
		<key>SockNodeName</key>
		<string>localhost</string>
		<key>SockServiceName</key>
		<integer>9220</integer>
		<key>SockType</key>
		<string>stream</string>
		<key>SockFamily</key>
		<string>IPv4</string>
	    </dict>
	</dict>
	<key>Debug</key>
	<true/>

</dict>
</plist>


--
James Peach | email@hidden
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-dev mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden


Follow-Ups:

Re: launchd agent for securing mail through ssh tunnel
From: Nicola Vitacolonna <email@hidden>


References:  
  >launchd agent for securing mail through ssh tunnel (From: Nicola Vitacolonna <email@hidden>)




Prev by Date:
Re: [APPL:DarwinDev] launchd agent for securing mail through ssh	tunnel

Next by Date:
Re: Redirecting Output for a fork()'d Process

Previous by thread:
Re: [APPL:DarwinDev] launchd agent for securing mail through ssh	tunnel

Next by thread:
Re: launchd agent for securing mail through ssh tunnel

Index(es):

Date
Thread