[fetchmail]multi-hop ssh

Rob MacGregor rob.macgregor@gmail.com
Tue, 15 Nov 2005 22:51:22 +0000


On 15/11/05, Derek Broughton <auspex@pointerstop.ca> wrote:
> Due to "issues" with the $%^*!@#  firewall at my client's site, I can't g=
et
> out to my mailbox, directly.  So, I'm trying to use fetchmail via ssh in
> two hops. This works from home:
>   poll pointerstop.ca with proto imap
>     plugin "ssh pointers@%h /usr/sbin/imapd" auth ssh
>     user "pointers"
>
> and this works (as user fetchmail)  from the client's site:
>   ssh  derek@io.acad.athabascau.ca \
>     'ssh pointers@pointerstop.ca /usr/sbin/imapd'
> and seems to meet the criteria for a plugin: I can give it imap commands =
on
> stdin and get results on stdout.  The ssh keys are configured correctly s=
o
> that no passwords are requested.
>
> But this  doesn't:
>   poll pointerstop.ca with proto imap
>     plugin "ssh derek@io.acad.athabascau.ca \
>       'ssh  pointers@pointerstop.ca /usr/sbin/imapd'"
>       auth ssh
>     user "pointers"
>
> Syslog shows:
>   socket error while fetching from pointerstop.ca
>
> What am I doing wrong?  Is there some really good reason why I can't do i=
t?

I think you're doing something nobody else has tried :-)

You may need to write a script as the plugin, maybe calling a script
on the intermediate host.  It could be that the nesting is the
problem.

--
                 Please keep list traffic on the list.
Rob MacGregor
      Whoever fights monsters should see to it that in the process he
        doesn't become a monster.                  Friedrich Nietzsche