On Wed, May 03, 2006 at 10:29:56PM +0200, Florian Weimer wrote: > * Marc Haber: > > If this is already possible without wrapping the ssh client, the > > documentation is too well hidden. > > It's called ProxyCommand. The additional overhead should be > negligible.
The uglyness of the configuration in this case is not negligible: proxycommand sh -c 'knock <knock params>; sleep 1; exec socket %h %p' is absolutly ugly, means one more process, the ssh client giving up control over the TCP connection and other things. A bad hack, IMO. Greetings Marc -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Mannheim, Germany | lose things." Winona Ryder | Fon: *49 621 72739834 Nordisch by Nature | How to make an American Quilt | Fax: *49 621 72739835 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]