Re: [Zebedee-announce] Problem using zebedee - ERROR: client requested redirection to a disallowed target

Ian Stocks <[email protected]> Sun, 10 Sep 2006 21:45:49 +0100
Newsgroups gmane.comp.security.zebedee.general
Message-ID <[email protected]>
Denis Morozov wrote:
> Hello,
> 
> I'm trying to use zebedee for the simple example: I want to login to the 
> icq server through zebedee.
> 
> I'm running zebedee client and server on my windows-machine using the 
> following commands ( 64.12.200.89 <http://64.12.200.89> is login.icq.com 
> <http://login.icq.com>):
> 
> zebedee -s -o srv.log 20000:64.12.200.89:5190 <http://64.12.200.89:5190>
> 
> zebedee -o client.log 21000:localhost:20000
> 
> Then I set connection address and port in my icq client as localhost:21000
> 
> After I'm trying to connect I get the following error in the zebedee 
> server error log:
> 
> zebedee(2480/2360):  accepted connection from 127.0.0.1 <http://127.0.0.1>
> zebedee(2480/2360):  waiting for connection on port 11965
> zebedee(2480/3232): ERROR: client requested redirection to a disallowed 
> target ( 0.0.78.32:20000/tcp <http://0.0.78.32:20000/tcp>)
> zebedee(2480/3232): ERROR: initial protocol exchange failed
> 
> 
> I don't know what to do and what I'm doing wrong. Please help!
> 
> Best Regards,
> Denis Morozov.


on the server it is interpreting 20000 as an ip address ((78*256)+32 = 
20000).

for the server you just specify where the server can connect to. so :-

zebedee -s -o srv.log 64.12.200.89:5190

and the client needs to say which port it wants redirecting to :-

zebedee -o client.log 21000:localhost:5190

you should then be able to connect to localhost port 21000 and get 
redirected to 64.12.200.89 port 5190

the communication between the zebedee client and server will by default 
be on port 11965. if you want to change this add '-T <port_num>' to both 
the client and server.

Hope that helps.

Ian.

(resent to zebedee-talk rather than announce)

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642