Re: VPN project solutions

> Hi,
> 
> Thanks for answering my post.
> 
> In OpenVPN, you can create a tunnel between a client and server, on
> port 5000 for example, and send all of the packets through the tunnel
> to the server. (ie.. telnet, ftp, www,etc... on the client would go
> through the encrypted tunnel on port 5000 and on the other end would
> go to the servers ports for thode services). They do this via TAP/TUN
> devices.
> 
> Ho can i send all of the packet from a client to the server through
> the tunnel created by Zebedee in a similar way?

No problem at all. You can just specify the ports being listened to 
on the client side:

serverhost 122.12.36.73
serverport 15000
tunnel 20,21,5901,20000-20050:192.168.0.10:20,21,5900,20000-20050

This means that the client will listen on the ports listed in the 
"tunnel" command, connect to the Zebedee server listening on port 
15000 on remote IP 122.12.36.73, and redirect the ports to the 
internal IP listed in the "tunnel" command (192.168.0.10), even with 
port redirection on the other side (note the 5901 to 5900 redirection 
to not conflict with local VNC on the client machine). All this 
traffic flows over TCP port 15000.

The server side needs to be set up to listen to the same ports and 
allow forwarding to the same server listed on the client side:

target 192.168.0.10:20,21,5900,20000-20050

Multiple targets can exist, for example:

target 192.168.0.10:20,21,20000-20050
target 192.168.0.11:80
target 192.168.0.12:139

...will give support for a  typical passive FTP on .10, a web server 
on .11, and Windows SMB file sharing on .12. All from the same client 
IP (which listens on all these ports, so client lines for the above 
would look like this:

serverhost 122.12.36.73
serverport 15000
tunnel 20,21,20000-20050:192.168.0.10:20,21,20000-20050
tunnel 80:192.168.0.11:80
tunnel 139:192.168.0.12:139

(but do note that SMB forwarding needs special considerations)

Much info, and some implementation examples, can be found in the 
manual, which is pretty full featured but sometimes confusing... not 
to mention that my name is misspelled ;-)


Regards
 
 
-- 
Magnus Wedberg
http://www.magnuswedberg.com/
mw AT 9000.org
Warning! Objects in viewfinder may be closer than they appear.





-------------------------------------------------------
This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
Use IT products in your business? Tell us what you think of them. Give us
Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
http://productguide.itmanagersjournal.com/guidepromo.tmpl