Re: Disabling other ports

Jeff:

 	Heya. The key to setting up a Zebedee server that will only
allow Zebedee clients to establish tunnels that reach specific ports...
is to understand the server's "target specification".

 	Fortunately, this is detailed pretty well in the online docs;
a good example is here:

http://www.winton.org.uk/zebedee/manual.html#multiple%20destinations

 	The example there looks like this:

%  zebedee -s target1:daytime,telnet target2:telnet target3

 	It's those values after the ":" that restrict the port
numbers a Zebedee server will allow a tunnel to be established for.
In the above, the "target1" PC can only be accessed on the daytime
(TCP port 13) and telnet (TCP port 23) ports; the "target2" PC
can only be access on the telnet port, and the "target3" can be
access on all ports.

 	So in your case, for VNC, you want a "target specification"
that looks something like this:

%  zebedee -s vnc.server.ip.address:5900

 	That will start a zebedee server listening on its default
port (TCP 11965), and it will allow clients to connect (and reach
the VNC Server) as long as TCP 5900 is in the client's "tunnel
specification".

 	Hope that helps!

-Scott




On Sun, 27 Feb 2005, Jeff's MailList wrote:

> I'm not quite sure about configuring a ZBD server but I want to allow access
> to only specific ports (VNC specifically) and block access to all others
> (like MS-DS 445, NetBIOS, etc).
>
> Can someone show me an example of how to do this.  I think someone used ZBD
> to access the fileshares on one of my hosts.
>
> Thanx in advance.
> Jeff
>
> --
> No virus found in this outgoing message.
> Checked by AVG Anti-Virus.
> Version: 7.0.300 / Virus Database: 266.5.0 - Release Date: 2/25/2005
>
>
>
> -------------------------------------------------------
> SF email is sponsored by - The IT Product Guide
> Read honest & candid reviews on hundreds of IT Products from real users.
> Discover which products truly live up to the hype. Start reading now.
> http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
> _______________________________________________
> Zebedee-talk mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/zebedee-talk
>


-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click