ssh tunnel refusing connections with “channel 2: open failed”

Problem solved: $ ssh -L 7000:127.0.0.1:7000 user@host -N -v -v …apparently, ‘localhost‘ was not liked by the remote host. Yet, remote /etc/hosts contains: ::1 localhost localhost. 127.0.0.1 localhost localhost. while the local network interface is lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33184 inet 127.0.0.1 netmask 0xff000000 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2 Sigh. so … Read more

Is X.Y.Z.0 a valid IP address?

It depends on the subnet of the IP address in question. In general, the first and last addresses in a subnet are used as the network identifier and broadcast address, respectively. All other addresses in the subnet can be assigned to hosts on that subnet. For example, IP addresses of networks with subnet masks of … Read more

Switching to IPv6 implies dropping NAT. Is that a good thing?

First and foremost, there is nothing to fear from being on a public IP allocation, so long as your security devices are configured right. What should I be replacing NAT with, if we don’t have physically separate networks? The same thing we’ve been physically separating them with since the 1980’s, routers and firewalls. The one … Read more

Why do consoles sometimes hang forever when SSH connection breaks?

There is a “secret” keyboard shortcut to force an exit :~) From the frozen session, hit these keys in order: Enter~. The tilde (only after a newline) is recognized as an escape sequence by the ssh client, and the period tells the client to terminate it’s business without further ado. The long-hang behavior on communication … Read more