Re: Will zedebee work for me?
Yves Smolders <[email protected]> Sun, 13 May 2007 11:53:53 +0200
| Newsgroups | gmane.comp.security.zebedee.general |
|---|---|
| Message-ID | <[email protected]> |
There's no need for that? You can have multiple connections from your client machine (or even other client machine in the client LAN) to the zebedee client - this client connects to the server via the serverhost key. The tunnels you define can go to any machine in the server's LAN I use a single zebedee server instance to reach POP3/SMPT/IMAP4 on a different server at the server's LAN. I can also RDP to every server at the server's LAN using that single connection, and use SAP clients over Zebedee. I listen to a localhost IP (127.0.0.2) to avoid conflicts on existing listening ports. Not using this listenip will make the client listen on 0.0.0.0 - This is a security risk because other machines on the LAN of the client can tunnel to the server over this machine. (In fact, I sometimes use this function to make mail gateways for entire LANs sometimes) Example for a client: # # SAPlogon Tunnel Client # verbosity 2 # Standard Logging server false # Nooooo it's a client! udpmode false # Are we operating in UDP mode? Don't think so! serverport 2005 # Alternative serverport... detached false timestamplog true listenip 127.0.0.2 include 'clipri' # identification key of the client Serverhost PUBLIC.IP.ADDRESS.SERVER # This is the IP address of the server LAN's firewall. Port 2005 is portmapped to the zebedee server inside on this firewall Tunnel 3299:10.1.1.5:3299 # Mapping 3299 to internal SAP router Tunnel 3025:10.1.1.253:25 # Mapping 3025 to internal SMTP server Tunnel 3143:10.1.1.253:143 # Mapping 3143 to internal IMAP4 server Tunnel 8091:10.1.1.1:3389 Tunnel 8092:10.1.1.2:3389 Tunnel 8093:10.1.1.3:3389 Tunnel 8094:10.1.1.4:3389 Tunnel 8095:10.1.1.5:3389 I use IP's instead of fully qualified domain names, because the client can't resolve the internal DNS names of the server's LAN. I use IP addresses in the corresponding server config file as well. Yves Tim Uckun schreef: >> A client instance of zebedee can only connect to one server instance of >> zebedee, but it can ask the server to connect to other machines. >> > > Ah this was the missing piece. Although I am a little disapointed that > I will have to create a different service for every connection to > another machine I was able to set it all up and test it. > > Thanks for all your help everybody. > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > _______________________________________________ > Zebedee-talk mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/zebedee-talk > > > ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/