RE: Zebedee Client Configuration for more than one host
<[email protected]> Thu, 24 Feb 2005 12:34:27 -0000
| Newsgroups | gmane.comp.security.zebedee.general |
|---|---|
| Message-ID | <0AAF93247C75E3408638B965DEE11A700D4FCFC1@i2km41-ukdy.domain1.systemhost.net> |
> I spent a number of hours configuring a Zebedee-client service and was
unable to
> determine why I could connect to the first tunnel listed but not any
of the others.
> I came to the conclusion that Zebedee only allows one service per
connection instead
> of one service handling all connections.
A Zebedee client can only connect to a single *server*. However, there
can be multiple tunnels between that client and the server, each
connecting to a different *service*. The server can connect to services
on any number of machines. So, for example, in the following picture:
machineX machineY
Port 2000 ---> ---> machineA, Port 23
Client Port 2001 ---> Server ---> machineB, Port 80
Port 2002 ---> ---> machineC, Port 8080
The Zebedee client is running on machineX and the server on machineY.
The client has a config file something like this:
serverhost machineY
tunnel 2000:machineA:23
tunnel 2001:machineB:80
tunnel 2002:machineC:8080
The server's looks like:
target machineA:23
target machineB:80
target machineC:8080
Then connecting to port 2001 on machineX will result in a tunnel
connected to port 80 on machineB. This is fine if you don't need the
tunnel to be secure end-to-end from machineX to machineB. If you *do*
need secure tunnels from X to A, B and C then you will need to run
multiple Zebedee clients on X, each of which connects to one server
running on each of A, B and C.
I hope this helps.
Neil
-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click