# This example assumes that delegated-subdomain.example.net has been delegated
# to 192.0.2.1, where dns2tcpd is running.
# If the 192.0.2.1:53 dns2tcpd name server is not directly reachable by this
# client then $DNS2TCP_RESOLVER can be set to the address of a DNS resolver.
#
# Enabling DynamicForward allows to use the SSH server as a SOCKS proxy, e.g.
# with the tsocks package.

Host dnstunnel-server.example.net
 ProxyCommand dns2tcpc -z delegated-subdomain.example.net -r ssh -l - ${DNS2TCP_RESOLVER:-192.0.2.1}
 HostKeyAlias server.example.net
 DynamicForward 1080
 Compression yes
