I added this in my
~/.ssh/config to help avoid stupid mistakes:
Host *.prod-domain.com LocalCommand print "WARNING: PROD" && print "continue ?" && read PermitLocalCommand yes
ssh print a warning and a prompt when I try to connect to a host under
Now, most hosts do not expose ssh publically, so we have to go through a gateway. I used to do
ssh -J gateway.prod-domain.com target.prod-domain.com
But with the local command enabled, ssh fails with:
Bad packet length 1231976033. ssh_dispatch_run_fatal: Connection to UNKNOWN port 65535: message authentication code incorrect
Connecting directly (e.g.
ssh gateway.prod-domain.com) still works fine, and connecting with a jump works if I comment the local command.
Are local commands and ssh jumps incompatible ? Is it documented somewhere, and is there a way to make it work (like disabling the local command when "jumping"), or did I maybe hit a bug ?