Mercurial > index.cgi > dotfiles
comparison .ssh/config @ 299:283c6f6c64c5
And start treating parapet like the bastion it is
author | Steve Huston <huston@princeton.edu> |
---|---|
date | Mon, 14 Apr 2025 15:41:32 -0400 |
parents | a4bf322037a6 |
children | 95129e7fb0ac |
comparison
equal
deleted
inserted
replaced
298:ef0a1a087499 | 299:283c6f6c64c5 |
---|---|
16 Ciphers +3des-cbc | 16 Ciphers +3des-cbc |
17 | 17 |
18 # If we're not on the Princeton wired network, csesbh2 should proxy through | 18 # If we're not on the Princeton wired network, csesbh2 should proxy through |
19 # xanadu | 19 # xanadu |
20 Match host csesbh2.princeton.edu exec "~/.ssh/onsubnet --not 128.112." | 20 Match host csesbh2.princeton.edu exec "~/.ssh/onsubnet --not 128.112." |
21 ProxyJump xanadu.astro.princeton.edu | |
22 | |
23 # Likewise, td-parapet connections should proxy through xanadu | |
24 Match host td-parapet.princeton.edu exec "~/.ssh/onsubnet --not 128.112." | |
21 ProxyJump xanadu.astro.princeton.edu | 25 ProxyJump xanadu.astro.princeton.edu |
22 | 26 |
23 # If we're not on Princeton wired network, and not at home, then connections | 27 # If we're not on Princeton wired network, and not at home, then connections |
24 # to joshua should tunnel through xanadu | 28 # to joshua should tunnel through xanadu |
25 Match host joshua.srhuston.net exec "~/.ssh/onsubnet --not 128.112. && ~/.ssh/athome --not" | 29 Match host joshua.srhuston.net exec "~/.ssh/onsubnet --not 128.112. && ~/.ssh/athome --not" |