Re: [Zebedee-announce] Problem using zebedee - ERROR: client requested redirection to a disallowed target
Ian Stocks <[email protected]> Mon, 11 Sep 2006 19:50:59 +0100
| Newsgroups | gmane.comp.security.zebedee.general |
|---|---|
| Message-ID | <[email protected]> |
I dont understand why if it connected once, it wont connect again. Is there nothing in the log for the second attempted connection? It would be interesting to see the time between lines 3 & 4 of your log file, try adding '-t' to both the server and client. The zebedee manual says that the tcp connections will never timeout. To ensure it is set to not timeout try adding '-x"idletimeout 0"' to the zebedee commands e.g. :- zebedee -s -t -x"idletimeout 0" -o srv.log 64.12.200.89:5190 I'm not entirely sure I understand what you are trying to do, I can only assume your are running both server and client on a single PC for testing, and that once you are happy it works, you will move the server or client to another machine. Otherwise your encryted tunnel is only between the two copies of zebedee on the same machine. Please stop sending mail to the zebedee-announce list. Discussion should be on the zebedee-talk list. Ian. Denis Morozov wrote: > Hello, > > I've done what you said and have the following text in server.log: > > zebedee(9570/16386): tunnel established to target 64.12.200.89 > <http://64.12.200.89>, port 5190 > zebedee(9570/16386): compression level 0x9, key length 256 > zebedee(9570/16386): entering filter lo op > zebedee(9570/16386): connection closed or timed out > zebedee(9570/16386): read 304 bytes (403 expanded) in 4 messages > zebedee(9570/16386): wrote 479 bytes (576 expanded) in 7 messages > zebedee(9570/16 386): connection closed > > It seems that connection was established correctly, but my icq client > after some time trying to connect goes offline, and cannot connect. > I've set connection settings in my icq client as: localhost, port 21000 > and no proxy. > > Then if I set in my icq client connection settings as 64.12.200.89 > <http://64.12.200.89>, port 5190 it works fine. > > Don't you know what else may be wrong? > > Best Regards, > Denis Morozov > > On 9/11/06, *Ian Stocks* <[email protected] > <mailto:[email protected]>> wrote: > > Denis Morozov wrote: > > Hello, > > > > I'm trying to use zebedee for the simple example: I want to login > to the > > icq server through zebedee. > > > > I'm running zebedee client and server on my windows-machine using the > > following commands ( 64.12.200.89 <http://64.12.200.89> < > http://64.12.200.89> is login.icq.com <http://login.icq.com> > > <http://login.icq.com>): > > > > zebedee -s -o srv.log 20000: 64.12.200.89:5190 > <http://64.12.200.89:5190> <http://64.12.200.89:5190> > > > > zebedee -o client.log 21000:localhost:20000 > > > > Then I set connection address and port in my icq client as > localhost:21000 > > > > After I'm trying to connect I get the following error in the zebedee > > server error log: > > > > zebedee(2480/2360): accepted connection from 127.0.0.1 > <http://127.0.0.1> < http://127.0.0.1 <http://127.0.0. 1>> > > zebedee(2480/2360): waiting for connection on port 11965 > > zebedee(2480/3232): ERROR: client requested redirection to a > disallowed > > target ( 0.0.78.32:20000/tcp <http://0.0.78.32:20000/tcp> > <http://0.0.78.32:20000/tcp>) > > zebedee(2480/3232): ERROR: initial protocol exchange failed > > > > > > I don't know what to do and what I'm doing wrong. Please hel p! > > on the server it is interpreting 20000 as an ip address ((78*256)+32 = > 20000). > > for the server you just specify where the server can connect to. so :- > > zebedee -s -o srv.log 64.12.200.89:5190 <http://64.12.200.89:5190> > > and the client needs to say which port it wants redirecting to :- > > zebedee -o client.log 21000:localhost:5190 > > you should then be able to connect to localhost port 21000 and get > redirected to 64.12.200.89 <http://64.12.200.89> port 5190 > > the communication between the zebedee client and server will by default > be on port 11965. if you want to change this add '-T <port_num>' to > both > the client and server. > > Hope that helps. > > Ian. > > ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642