Re: Will zedebee work for me?

Yves Smolders <[email protected]> Sun, 13 May 2007 11:53:53 +0200
Newsgroups gmane.comp.security.zebedee.general
Message-ID <[email protected]>
There's no need for that?

You can have multiple connections from your client machine (or even 
other client machine in the client LAN) to the zebedee client - this 
client connects to the server via the serverhost key.  The tunnels you 
define can go to any machine in the server's LAN

I use a single zebedee server instance to reach POP3/SMPT/IMAP4 on a 
different server at the server's LAN.  I can also RDP to every server at 
the server's LAN using that single connection, and use SAP clients over 
Zebedee.

I listen to a localhost IP (127.0.0.2) to avoid conflicts on existing 
listening ports.  Not using this listenip will make the client listen on 
0.0.0.0 - This is a security risk because other machines on the LAN of 
the client can tunnel to the server over this machine.  (In fact, I 
sometimes use this function to make mail gateways for entire LANs sometimes)

Example for a client:

#
# SAPlogon Tunnel Client
#

verbosity 2                     # Standard Logging
server false                # Nooooo it's a client!
udpmode false               # Are we operating in UDP mode?  Don't think so!
serverport 2005                 # Alternative serverport...
detached false
timestamplog true
listenip            127.0.0.2

include 'clipri'                     # identification key of the client

Serverhost PUBLIC.IP.ADDRESS.SERVER        # This is the IP address of 
the server LAN's firewall.  Port 2005 is portmapped to the zebedee 
server inside on this firewall

Tunnel 3299:10.1.1.5:3299       # Mapping 3299 to internal SAP router
Tunnel 3025:10.1.1.253:25    # Mapping 3025 to internal SMTP server
Tunnel 3143:10.1.1.253:143    # Mapping 3143 to internal IMAP4 server
Tunnel 8091:10.1.1.1:3389
Tunnel 8092:10.1.1.2:3389
Tunnel 8093:10.1.1.3:3389
Tunnel 8094:10.1.1.4:3389
Tunnel 8095:10.1.1.5:3389

I use IP's instead of fully qualified domain names, because the client 
can't resolve the internal DNS names of the server's LAN.  I use IP 
addresses in the corresponding server config file as well.

Yves


Tim Uckun schreef:
>> A client instance of zebedee can only connect to one server instance of
>> zebedee, but it can ask the server to connect to other machines.
>>     
>
> Ah this was the missing piece. Although I am a little disapointed that
> I will have to create a different service for every connection to
> another machine I was able to set it all up and test it.
>
> Thanks for all your help everybody.
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________
> Zebedee-talk mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/zebedee-talk
>
>
>   

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/