Git/ssh-audit
1
0
Fork 0
mirror of https://github.com/jtesta/ssh-audit.git synced 2024-11-25 20:11:40 +01:00
Code Issues Packages Projects Releases Wiki Activity

Improved IPv4/IPv6 error handling during client testing.

Browse Source
This commit is contained in:
Joe Testa 2019-10-10 23:09:45 -04:00
parent e3a59a3e21
commit fd85e247e7
1 changed files with 26 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
ssh-audit.py
View File

@ -2004,20 +2004,33 @@ class SSH(object): # pylint: disable=too-few-public-methods
# auditing client connections). # auditing client connections).
def listen_and_accept(self): def listen_and_accept(self):
# Socket to listen on all IPv4 addresses. try:
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) # Socket to listen on all IPv4 addresses.
s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1) s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.bind(('0.0.0.0', self.__port)) s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
s.listen() s.bind(('0.0.0.0', self.__port))
self.__sock_map[s.fileno()] = s s.listen()
self.__sock_map[s.fileno()] = s
except Exception as e:
print("Warning: failed to listen on any IPv4 interfaces.")
pass
# Socket to listen on all IPv6 addresses. try:
s = socket.socket(socket.AF_INET6, socket.SOCK_STREAM) # Socket to listen on all IPv6 addresses.
s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1) s = socket.socket(socket.AF_INET6, socket.SOCK_STREAM)
s.setsockopt(socket.IPPROTO_IPV6, socket.IPV6_V6ONLY, 1) s.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
s.bind(('::', self.__port)) s.setsockopt(socket.IPPROTO_IPV6, socket.IPV6_V6ONLY, 1)
s.listen() s.bind(('::', self.__port))
self.__sock_map[s.fileno()] = s s.listen()
self.__sock_map[s.fileno()] = s
except Exception as e:
print("Warning: failed to listen on any IPv6 interfaces.")
pass
# If we failed to listen on any interfaces, terminate.
if len(self.__sock_map.keys()) == 0:
print("Error: failed to listen on any IPv4 and IPv6 interfaces!")
exit(-1)
# Wait for a connection on either socket. # Wait for a connection on either socket.
fds = select.select(self.__sock_map.keys(), [], []) fds = select.select(self.__sock_map.keys(), [], [])