My experience at work
"Yves Smolders" <[email protected]> Wed, 11 Feb 2004 08:11:25 +0100
| Newsgroups | gmane.comp.security.zebedee.general |
|---|---|
| Message-ID | <003001c3f06e$4309a440$9e7ba8c0@yvespc> |
>I use Zebedee primarily for personal use, but would like to use it at work. The only problem is that some of the people I would want to have making Zebedee connections to my services are not very technical. Well I'm an IT consultant, and use Zebedee for several of my clients, here's an example where & how: A large television company (the "Big brother" one :): * "road warrior" VPN connections for Mac/PC: SMTP/IMAP4 for mail, WebDav for file server, Filemaker database (runs over single tcp port) and intranet website - zebedee runs as a manual service that can be started with icons on the desktop (net start/net stop zebclient) - on mac os x it's a bash shell script lauched with an icon - identity is used, so I can delete a single line at the server to make a road warriors connection unuseable. * p&p site-to-site: This company sometimes sends 10-15 ppl to different location to record tv-programs - as a quick solution to provide these people with an easy way to work I do the following: A made a single W2K box running a zebedee client and also DNS/DHCP, as services; I plug this into a simple router connecting to whatever the internet connection at the site may be (even ran it "under" an existing lan subnet) and the ppl plug in their macs/pcs on this net without altering anything. The DNS on the box resolves all servernames normally used at the main site to the fixed IP of this W2K box. Zebedee listens on that box to all services (smtp/imap/webdav...) and forwards them to the main company, to the right servers - truly a plug/play VPN that works everywhere - at the time I had to do this as belgian providers had a tendency to block all kinds of ports, no IPSEC was possible on the cheaper connections! Oh yeah, the service never *ever* failed on me, not even once, on all computers I run it on! The only hard part with running zebedee as client NT service is making it "wait" until it can resolve DNS, else it fails at start. I guess I can't thank Neil enough for the hard work.... Hope this helps a lot of ppl, Yves