RE: Zebedee Client Configuration for more than one host

<[email protected]> Thu, 24 Feb 2005 12:34:27 -0000
Newsgroups gmane.comp.security.zebedee.general
Message-ID <0AAF93247C75E3408638B965DEE11A700D4FCFC1@i2km41-ukdy.domain1.systemhost.net>
> I spent a number of hours configuring a Zebedee-client service and was
unable to
> determine why I could connect to the first tunnel listed but not any
of the others.
> I came to the conclusion that Zebedee only allows one service per
connection instead
> of one service handling all connections.

A Zebedee client can only connect to a single *server*. However, there
can be multiple tunnels between that client and the server, each
connecting to a different *service*. The server can connect to services
on any number of machines. So, for example, in the following picture:

   machineX              machineY
          Port 2000 --->          ---> machineA, Port 23
   Client Port 2001 --->  Server  ---> machineB, Port 80 
          Port 2002 --->          ---> machineC, Port 8080

The Zebedee client is running on machineX and the server on machineY.
The client has a config file something like this:

   serverhost machineY
   tunnel 2000:machineA:23
   tunnel 2001:machineB:80
   tunnel 2002:machineC:8080

The server's looks like:

   target machineA:23
   target machineB:80
   target machineC:8080

Then connecting to port 2001 on machineX will result in a tunnel
connected to port 80 on machineB. This is fine if you don't need the
tunnel to be secure end-to-end from machineX to machineB. If you *do*
need secure tunnels from X to A, B and C then you will need to run
multiple Zebedee clients on X, each of which connects to one server
running on each of A, B and C.
 
I hope this helps.

	Neil


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click