Warren a475de45c9 Add SSH Port Forwarding ACL (Phase 1-3): prevent SSH tunnel abuse ...

Features:
- ForwardRule: Allow/Deny rules with address/port specifications
- ForwardAcl: User-specific ACL with priority-based rule matching
- ForwardAclManager: Global ACL manager for all users
- OpenSSH-style PermitOpen/PermitListen parsing
- 8 unit tests for all operations

Security:
- Prevent unauthorized SSH tunnel creation
- Restrict forwarding to specific hosts/ports
- Default deny policy for unknown users

Files:
- markbase-core/src/ssh_server/forward_acl.rs (493 lines)
- markbase-core/src/ssh_server/mod.rs (+1 line)

Tests: 317 passed (+8)

2026-06-21 12:48:56 +08:00

..

auth.rs

Fix code quality: trailing whitespace, unused imports, clippy warnings

2026-06-19 05:21:38 +08:00

channel.rs

Implement SSH X11 forwarding Phase 4: Save X11ForwardContext

2026-06-21 02:32:32 +08:00

cipher.rs

Implement SSH Compression Phase 3: Actual packet compression

2026-06-21 02:07:35 +08:00

compression.rs

Implement SSH Compression support Phase 1

2026-06-21 01:40:07 +08:00

crypto.rs

Suppress non_snake_case warning for RFC 4253 notation (K, H, X)

2026-06-20 21:10:28 +08:00

data_forwarder.rs

Fix code quality: trailing whitespace, unused imports, clippy warnings

2026-06-19 05:21:38 +08:00

forward_acl.rs

Add SSH Port Forwarding ACL (Phase 1-3): prevent SSH tunnel abuse

2026-06-21 12:48:56 +08:00

host_key.rs

Implement SSH Host Key Management (Phase 1): Generate/Load/Rotate Ed25519 keys

2026-06-21 04:57:15 +08:00

kex_complete.rs

Remove dead code: compute_exchange_hash + write_ssh_mpint_to_hash in kex_complete.rs (replaced by kex_exchange.rs version)

2026-06-20 15:59:17 +08:00

kex_exchange.rs

Implement SSH Host Key Management (Phase 1): Generate/Load/Rotate Ed25519 keys

2026-06-21 04:57:15 +08:00

kex.rs

feat(ssh): Optimize SSH performance Phase 1-2c + stdin fix

2026-06-19 20:18:20 +08:00

known_hosts.rs

Implement SSH Known Hosts Verification: Parse ~/.ssh/known_hosts + verify host keys + hashed host support

2026-06-21 05:24:33 +08:00

mod.rs

Add SSH Port Forwarding ACL (Phase 1-3): prevent SSH tunnel abuse

2026-06-21 12:48:56 +08:00

multiplex.rs

Implement SSH Multiplexing: Connection/Session/Channel management with expiration and cleanup

2026-06-21 05:31:06 +08:00

packet.rs

Fix code quality: trailing whitespace, unused imports, clippy warnings

2026-06-19 05:21:38 +08:00

port_forward_listener.rs

Fix code quality: trailing whitespace, unused imports, clippy warnings

2026-06-19 05:21:38 +08:00

port_forward.rs

Fix code quality: trailing whitespace, unused imports, clippy warnings

2026-06-19 05:21:38 +08:00

rate_limiter.rs

Implement SSH Connection Rate Limiting: IP rate limit + global rate limit + auth brute force prevention

2026-06-21 05:01:04 +08:00

rsync_handler.rs

Fix code quality: trailing whitespace, unused imports, clippy warnings

2026-06-19 05:21:38 +08:00

scp_handler.rs

SMB Server Phase 2: VFS backend build fix + integration test

2026-06-20 19:42:29 +08:00

server.rs

Implement SSH Compression Phase 2: Integration

2026-06-21 01:51:39 +08:00

sftp_handler.rs

Implement Upload Hook for momentry integration (Phase 1)

2026-06-19 06:26:20 +08:00

ssh_audit_log.rs

Add SSH Structured Logging (Phase 1-5): ssh_audit_log.rs module with JSON tracing

2026-06-21 11:29:04 +08:00

ssh_config.rs

Implement SSH config file support Phase 1

2026-06-21 02:36:32 +08:00

ssh_security_config.rs

Implement SSH Banner/MOTD support

2026-06-20 23:33:19 +08:00

sshbuf.rs

Fix clippy warnings: unused imports, minor style fixes

2026-06-20 21:08:50 +08:00

upload_hook.rs

Fix clippy warnings: unused imports, minor style fixes

2026-06-20 21:08:50 +08:00

version.rs

Fix code quality: trailing whitespace, unused imports, clippy warnings

2026-06-19 05:21:38 +08:00

window_manager.rs

Fix code quality: trailing whitespace, unused imports, clippy warnings

2026-06-19 05:21:38 +08:00

x11_forward.rs

Implement SSH X11 forwarding Phase 1

2026-06-21 02:11:55 +08:00