My experience at work

"Yves Smolders" <[email protected]> Wed, 11 Feb 2004 08:11:25 +0100
Newsgroups gmane.comp.security.zebedee.general
Message-ID <003001c3f06e$4309a440$9e7ba8c0@yvespc>

>I use Zebedee primarily for personal use, but would like to use it at work.
The only problem is that some of the people I would want to have making
Zebedee connections to my services are not very technical.

Well I'm an IT consultant, and use Zebedee for several of my clients, here's
an example where & how:

A large television company (the "Big brother" one :):

*  "road warrior" VPN connections for Mac/PC:  SMTP/IMAP4 for mail, WebDav
for file server, Filemaker database (runs over single tcp port) and intranet
website - zebedee runs as a manual service that can be started with icons on
the desktop (net start/net stop zebclient) - on mac os x it's a bash shell
script lauched with an icon - identity is used, so I can delete a single
line at the server to make a road warriors connection unuseable.

* p&p site-to-site:  This company sometimes sends 10-15 ppl to different
location to record tv-programs - as a quick solution to provide these people
with an easy way to work I do the following:  A made a single W2K box
running a zebedee client and also DNS/DHCP, as services;  I plug this into a
simple router connecting to whatever the internet connection at the site may
be (even ran it "under" an existing lan subnet) and the ppl plug in their
macs/pcs on this net without altering anything.  The DNS on the box resolves
all servernames normally used at the main site to the fixed IP of this W2K
box.  Zebedee listens on that box to all services (smtp/imap/webdav...) and
forwards them to the main company, to the right servers - truly a plug/play
VPN that works everywhere - at the time I had to do this as belgian
providers had a tendency to block all kinds of ports, no IPSEC was possible
on the cheaper connections!

Oh yeah, the service never *ever* failed on me, not even once, on all
computers I run it on!

The only hard part with running zebedee as client NT service is making it
"wait" until it can resolve DNS, else it fails at start.

I guess I can't thank Neil enough for the hard work....

Hope this helps a lot of ppl,

Yves