📄 ckuus2.c
字号:
" ","SSH [ OPEN ] host [ port ] [ /COMMAND:command /USER:username"," /PASSWORD:pwd /VERSION:{ 1, 2 } /X11-FORWARDING:{ ON, OFF } ]"," This command establishes a new connection using SSH version 1 or"," version 2 protocol. The connection is made to the specified host on"," the SSH port (you can override the port by including a port name or"," number after the host name). Once the connection is established the"," authentication negotiations begin. If the authentication is accepted,"," the local and remote port forwarding lists are used to establish the"," desired connections. If X11 Forwarding is active, this results in a"," remote port forwarding between the X11 clients on the remote host and"," X11 Server on the local machine. If a /COMMAND is provided, the"," command is executed on the remote host in place of your default shell."," "," An example of a /COMMAND to execute C-Kermit in SERVER mode is:"," SSH OPEN hostname /COMMAND:{kermit -x -l 0}"," ","SSH V2 REKEY"," Requests that an existing SSH V2 connection generate new session keys.",#else /* SSHBUILTIN */"Syntax: SSH [ options ] <hostname> [ command ]"," Makes an SSH connection using the external ssh program via the SET SSH"," COMMAND string, which is \"ssh -e none\" by default. Options for the"," external ssh program may be included. If the hostname is followed by a"," command, the command is executed on the host instead of an interactive"," shell.",#endif /* SSHBUILTIN */""};static char *hmxyssh[] = {#ifdef SSHBUILTIN"SET SSH AGENT-FORWARDING { ON, OFF }"," If an authentication agent is in use, setting this value to ON"," results in the connection to the agent being forwarded to the remote"," computer. The default is OFF."," ","SET SSH CHECK-HOST-IP { ON, OFF }"," Specifies whether the remote host's ip-address should be checked"," against the matching host key in the known_hosts file. This can be"," used to determine if the host key changed as a result of DNS spoofing."," The default is ON."," ","SET SSH COMPRESSION { ON, OFF }"," Specifies whether compression will be used. The default is ON."," ","SET SSH DYNAMIC-FORWARDING { ON, OFF }"," Specifies whether Kermit is to act as a SOCKS4 service on port 1080"," when connected to a remote host via SSH. When Kermit acts as a SOCKS4"," service, it accepts connection requests and forwards the connections"," through the remote host. The default is OFF."," ","SET SSH GATEWAY-PORTS { ON, OFF }"," Specifies whether Kermit should act as a gateway for forwarded"," connections received from the remote host. The default is OFF."," ","SET SSH GSSAPI DELEGATE-CREDENTIALS { ON, OFF }"," Specifies whether Kermit should delegate GSSAPI credentials to "," the remote host after authentication. Delegating credentials allows"," the credentials to be used from the remote host. The default is OFF."," ","SET SSH HEARTBEAT-INTERVAL <seconds>"," Specifies a number of seconds of idle time after which an IGNORE"," message will be sent to the server. This pulse is useful for"," maintaining connections through HTTP Proxy servers and Network"," Address Translators. The default is OFF (0 seconds)."," ","SET SSH IDENTITY-FILE filename [ filename [ ... ] ]"," Specifies one or more files from which the user's authorization"," identities (private keys) are to be read when using public key"," authorization. These are files used in addition to the default files:"," "," \\v(appdata)ssh/identity V1 RSA"," \\v(appdata)ssh/id_rsa V2 RSA"," \\v(appdata)ssh/id_dsa V2 DSA"," ","SET SSH KERBEROS4 TGT-PASSING { ON, OFF }"," Specifies whether Kermit should forward Kerberos 4 TGTs to the host."," The default is OFF."," ","SET SSH KERBEROS5 TGT-PASSING { ON, OFF }"," Specifies whether Kermit should forward Kerberos 5 TGTs to to the"," host. The default is OFF."," ","SET SSH PRIVILEGED-PORT { ON, OFF }"," Specifies whether a privileged port (less than 1024) should be used"," when connecting to the host. Privileged ports are not required except"," when using SSH V1 with Rhosts or RhostsRSA authorization. The default"," is OFF."," ","SET SSH QUIET { ON, OFF }"," Specifies whether all messages generated in conjunction with SSH"," protocols should be suppressed. The default is OFF."," ","SET SSH STRICT-HOST-KEY-CHECK { ASK, ON, OFF }"," Specifies how Kermit should behave if the the host key check fails."," When strict host key checking is OFF, the new host key is added to the"," protocol-version-specific user-known-hosts-file. When strict host key"," checking is ON, the new host key is refused and the connection is"," dropped. When set to ASK, Kermit prompt you to say whether the new"," host key should be accepted. The default is ASK."," "," Strict host key checking protects you against Trojan horse attacks."," It depends on you to maintain the contents of the known-hosts-file"," with current and trusted host keys."," ","SET SSH USE-OPENSSH-CONFIG { ON, OFF }"," Specifies whether Kermit should parse an OpenSSH configuration file"," after applying Kermit's SET SSH commands. The configuration file"," would be located at \\v(home)ssh/ssh_config. The default is OFF."," ","SET SSH V1 CIPHER { 3DES, BLOWFISH, DES }"," Specifies which cipher should be used to protect SSH version 1"," connections. The default is 3DES."," ","SET SSH V1 GLOBAL-KNOWN-HOSTS-FILE filename"," Specifies the location of the system-wide known-hosts file. The"," default is:"," "," \v(common)ssh_known_hosts"," ","SET SSH V1 USER-KNOWN-HOSTS-FILE filename"," Specifies the location of the user-known-hosts-file. The default"," location is:"," "," \\v(appdata)ssh/known_hosts"," ","SET SSH V2 AUTHENTICATION { EXTERNAL-KEYX, GSSAPI, HOSTBASED, "," KEYBOARD-INTERACTIVE, PASSWORD, PUBKEY, SRP-GEX-SHA1 } [ ... ]"," Specifies an ordered list of SSH version 2 authentication methods to"," be used when connecting to the remote host. The default list is:"," "," external-keyx gssapi hostbased publickey srp-gex-sha1 publickey"," keyboard-interactive password none"," ","SET SSH V2 AUTO-REKEY { ON, OFF }"," Specifies whether Kermit automatically issues rekeying requests"," once an hour when SSH version 2 in in use. The default is ON."," ","SET SSH V2 CIPHERS { 3DES-CBC, AES128-CBC AES192-CBC AES256-CBC"," ARCFOUR BLOWFISH-CBC CAST128-CBC RIJNDAEL128-CBC RIJNDAEL192-CBC"," RIJNDAEL256-CBC }"," Specifies an ordered list of SSH version ciphers to be used to encrypt"," the established connection. The default list is:"," "," aes128-cbc 3des-cbc blowfish-cbc cast128-cbc arcfour aes192-cbc"," aes256-cbc"," "," \"rijndael\" is an alias for \"aes\"."," ","SET SSH V2 GLOBAL-KNOWN-HOSTS-FILE filename"," Specifies the location of the system-wide known-hosts file. The default"," location is:"," "," \\v(common)ssh/known_hosts2"," ","SET SSH V2 HOSTKEY-ALGORITHMS { SSH-DSS, SSH-RSA }"," Specifies an ordered list of hostkey algorithms to be used to verify"," the identity of the host. The default list is"," "," ssh-rsa ssh-dss"," ","SET SSH V2 MACS { HMAC-MD5 HMAC-MD5-96 HMAC-RIPEMD160 HMAC-SHA1"," HMAC-SHA1-96 }"," Specifies an ordered list of Message Authentication Code algorithms to"," be used for integrity protection of the established connection. The"," default list is:"," "," hmac-md5 hmac-sha1 hmac-ripemd160 hmac-sha1-96 hmac-md5-96"," ","SET SSH V2 USER-KNOWN-HOSTS-FILE filename"," Specifies the location of the user-known-hosts file. The default"," location is:"," "," \\v(appdata)ssh/known_hosts2"," ","SET SSH VERBOSE level"," Specifies how many messages should be generated by the OpenSSH engine."," The level can range from 0 to 7. The default value is 2."," ","SET SSH VERSION { 1, 2, AUTOMATIC }"," Specifies which SSH version should be negotiated. The default is"," AUTOMATIC which means use version 2 if supported; otherwise to fall"," back to version 1."," ","SET SSH X11-FORWARDING { ON, OFF }"," Specifies whether X Windows System Data is to be forwarded across the"," established SSH connection. The default is OFF. When ON, the DISPLAY"," value is either set using the SET TELNET ENV DISPLAY command or read"," from the DISPLAY environment variable."," ","SET SSH XAUTH-LOCATION filename"," Specifies the location of the xauth executable (if provided with the"," X11 Server software.)",#else /* SSHBUILTIN */"Syntax: SET SSH COMMAND command"," Specifies the external command to be used to make an SSH connection."," By default it is \"ssh -e none\" (ssh with no escape character).",#endif /* SSHBUILTIN */""};#endif /* ANYSSH */#ifdef NEWFTPstatic char *hmxygpr[] = {"Syntax: SET GET-PUT-REMOTE { AUTO, FTP, KERMIT}"," Tells Kermit whether GET, PUT, and REMOTE commands should be directed"," at a Kermit server or an FTP server. The default is AUTO, meaning that"," if you have only one active connection, the appropriate action is taken"," when you give a GET, PUT, or REMOTE command. SET GET-PUT-REMOTE FTP forces"," Kermit to treat GET, PUT, and REMOTE as FTP client commands; setting this"," to KERMIT forces these commands to be treated as Kermit client commands."," NOTE: PUT includes SEND, MPUT, MSEND, and all other similar commands."," Also see HELP REMOTE, HELP SET LOCUS, HELP FTP.",""};#endif /* NEWFTP */#ifdef LOCUSstatic char *hmxylocus[] = {#ifdef KUI"Syntax: SET LOCUS { ASK, AUTO, LOCAL, REMOTE }",#else"Syntax: SET LOCUS { AUTO, LOCAL, REMOTE }",#endif /* KUI */" Specifies whether unprefixed file management commands should operate"," locally or (when there is a connection to a remote FTP or Kermit"," server) sent to the server. The affected commands are: CD (CWD), PWD,"," CDUP, DIRECTORY, DELETE, RENAME, MKDIR, and RMDIR. To force any of"," these commands to be executed locally, give it an L-prefix: LCD, LDIR,"," etc. To force remote execution, use the R-prefix: RCD, RDIR, and so"," on. SHOW COMMAND shows the current Locus."," "," By default, the Locus for file management commands is switched"," automatically whenever you make or close a connection: if you make an"," FTP connection, the Locus becomes REMOTE; if you close an FTP connection"," or make any other kind of connection, the Locus becomes LOCAL.",#ifdef KUI" "," There are two kinds of automatic switching: ASK (the default) which"," asks you if it's OK to switch, and AUTO, which switches without asking.",#endif /* KUI */" "," If you give a SET LOCUS LOCAL or SET LOCUS REMOTE command, this sets"," the locus as indicated and disables automatic switching.",#ifdef KUI" SET LOCUS AUTO or SET LOCUS ASK restores automatic switching."," You can also change Locus switching and behavior in the Actions menu.",#else" SET LOCUS AUTO restores automatic switching.",#endif /* KUI */"",};#endif /* LOCUS */static char *hmxxtak[] = {"Syntax: TAKE filename [ arguments ]"," Tells Kermit to execute commands from the named file. Optional argument"," words, are automatically assigned to the macro argument variables \\%1"," through \\%9. Kermit command files may themselves contain TAKE commands,"," up to any reasonable depth of nesting.",""};#ifdef TCPSOCKETstatic char *hmxxfirew[] = {#ifdef OS2"Firewall Traversal in Kermit 95",#else"Firewall Traversal in C-Kermit",#endif" ",#ifndef NEWFTP#ifndef CKHTTP#ifndef CK_SOCKS#define NOFIREWALL#endif#endif#endif#ifdef NOFIREWALL"This version of Kermit was built with no support for firewall traversal","protocols. Kermit can be built with support for HTTP Proxy Servers,","SOCKS authorized firewall traversal, and FTP Passive connection modes."," ",#else /* NOFIREWALL */#ifdef CKHTTP"The simplist form of firewall traversal is the HTTP CONNECT command. The","CONNECT command was implemented to allow a public web server which usually","resides on the boundary between the public and private networks to forward","HTTP requests from clients on the private network to public web sites. To","allow secure web connections, the HTTP CONNECT command authenticates the","client with a username/password and then establishes a tunnel to the","desired host."," ","Web servers that support the CONNECT command can be configured to allow","outbound connections for authenticated users to any TCP/IP hostname-port","combination accessible to the Web server. HTTP CONNECT can be used only","with TCP-based protocols. Protocols such as Kerberos authentication that","use UDP/IP cannot be tunneled using HTTP CONNECT."," ","SET TCP HTTP-PROXY [switches] [<hostname or ip-address>[:<port>]]"," If a hostname or ip-address is specified, Kermit uses the given"," proxy server when attempting outgoing TCP connections. If no hostnamer"," or ip-address is specified, any previously specified Proxy server is"," removed. If no port number is specified, the \"http\" service is used."," [switches] can be one or more of:"," /AGENT:<agent> /USER:<user> /PASSWORD:<password>"," Switch parameters are used when connecting to the proxy server and"," override any other values associated with the connection."," ",#endif /* CKHTTP */#ifdef CK_SOCKS"In the early 1990s as firewalls were becoming prevalent, David Koblas","developed the SOCKS protocol for TCP/IP firewall traversal. Two versions","of SOCKS are currently in use: Version 4.2 lets TCP/IP client applications","traverse firewalls, similar to HTTP CONNECT, except that the SOCKS client","is aware of the public source IP address and port, which can be used within","the application protocol to assist in securing the connection (e.g. FTP","sessions secured with GSSAPI Kerberos 5)."," ","In 1995 the IETF issued SOCKS Protocol Version 5 (RFC 1928), which is","significantly more general than version 4. Besides supporting client-","to-server TCP/IP connections, it also includes:"," "," . Authenticated firewall traversal of UDP/IP packets."," . Authenticated binding of incoming public ports on the firewall."," ","This lets a service on the private network offer public services. It also","lets client applications like FTP establish a temporary public presence","that can be used by the FTP server to create a data channel. By allowing","the client to bind to a public port on the firewall and be aware of the","public address, SOCKS 5 lets the application protocol communicate this",
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -