Re: trying to target multiple host? can it be done?

Tom Sneddon <zebedee-list-4XgCj7/[email protected]> Sun, 12 Jul 2009 23:02:03 -0400
Newsgroups gmane.comp.security.zebedee.general
Message-ID <[email protected]>
Sometimes getting another set of eyeballs looking at the problem is all
it takes to discover the problem.  Please forgive me if I'm stating the
obvious stuff that you already know, but here's what I notice.

I'm assuming from tunnel 5900:192.168.1.65:5898 that your Zebedee client
is trying to connect to 192.168.1.65 on port 5898.  This disagrees with
a commented line in the server config, "#redirect
5900-5901:192.168.1.69:5898 #UltraVNC to Stephanies", that implies
192.168.1.69 port 5898 is where you want to connect to.  What is the
real IP of the destination?

>From the server error "ERROR: client requested redirection to a
disallowed target (192.168.1.60:5898/tcp)" it appears that your new
client is trying to talk to VNC on 192.168.1.60 using port 5898.  I'm
not sure why that is happening.  I did notice that you've commented out
the redirect configuration on the server.  That should redirect any
port, but you never know...  Maybe try adding redirect lines.

For the server config try:

# Only redirect these ports
redirect 3050                   # Firebird
redirect 5898-5901              # VNC
# Allowable destinations for these ports
target 192.168.1.60:3050/tcp    # Old Firebird client
target 192.168.1.60:5900/tcp    # Old VNC client
target 192.168.1.60:5901/tcp    # Old VNC client (port #2)
target 192.168.1.69:5898/tcp    # New VNC client
# The following line ensures that the default target host
# is the local machine. The last named host becomes the
# default so leaving this here ensures that "localhost" is,
# the default unless overridden on the command line.
target localhost

A long time ago (2006-03-15) I posted about a similar situation.  That
may also be of some help to you.  Try

http://sourceforge.net/mailarchive/forum.php?
forum_name=zebedee-talk&max_rows=25&style=nested
&viewmonth=200603&viewday=15

I've had to split the address up into three lines.  Just cut and paste
them together.

Please keep us posted on how you resolve this issue.

Thanks,
   Tom Sneddon


E.D. Epperson wrote:
> I've been using Zebedee for a number of years for both FirebirdSql and
> WinVNC.  I'm using 2.41.
>  
> Now I need to set up an additional host for a WinVNC connection so that
> a different person in our office can tunnel directly into their
> machine.  But I cant get it to work.  (I hope it can be done)
>  
> here is my client.zbd file
>  
> verbosity 2  # Basic messages only
> server false  # It's a client
> detached true  # Detach from terminal
> compression bzip2:1 # Allow maximum  compression
> logfile   C:\ZeBeDee\Client.log
> timestamplog  true
> tunnel 5900:192.168.1.65:5898
> include c:\zebedee\Keys\Stephanie.key
> (note: when I set the tunnel to 5900:192.168.1.65:5900, it works, but
> goes to the wrong machine for this client)
>  
> here is the significant portion of client error log:
> ZeBeDee(3600/3036): 2009-07-11-13:42:00:   reading config file
> 'c:\zebedee\Keys\Stephanie.key' at level 2
> ZeBeDee(3600/3036): 2009-07-11-13:42:00:  Listening on local port 5900
> ZeBeDee(3600/3036): 2009-07-11-13:42:00:  waiting for client connection
> ZeBeDee(3600/3036): 2009-07-11-13:42:12:  accepted connection from 127.0.0.1
> ZeBeDee(3600/3036): 2009-07-11-13:42:12:  waiting for client connection
> ZeBeDee(3600/3392): 2009-07-11-13:42:12: ERROR: server refused request
> for redirection to 192.168.1.65:5898
> here is the server.zbd file:
> verbosity 2 # Slightly more than basic messages
> detached true # free from console
> server true # Yes, it's a server!
> ipmode tcp # Operate only tcp
> tcptimeout 600
> logfile         c:\zebedee\zebedee.log
> timestamplog true
> compression bzip2:1 # Allow maximum zlib compression
> keylength 256  # Allow keys up to 256 bits
> keylifetime 36000 # Shared keys last 10 hours
> maxbufsize 16383 # Allow maximum possible buffer size
> keygenlevel 2  # Generate maximum strength private keys
> checkidfile   c:\zebedee\IDs\keys.id
> 
> #redirect 3050:192.168.1.60:3050 #Firebird port
> #redirect 5900-5901:192.168.1.69:5898 #UltraVNC to Stephanies
> #redirect 5900-5901:192.168.1.60:5900-5901 #UltraVNC
> #target 192.168.1.60
> #redirect 3050,5898,5900,5901
> target 192.168.1.60:3050
> target 192.168.1.69:5898
> target 192.168.1.60:5900
> target 192.168.1.60:5901
> (as you can see, I've been fiddling with this, trying different option
> to get it to work)
>  
> and here is the significant part of the server log:
> zebedee(2960/2720): 2009-07-11-13:41:33: ERROR: failed to detach from
> console (Win32 error = 87)
> zebedee(2960/2720): 2009-07-11-13:41:33:  waiting for connection on port
> 11965
> zebedee(2960/2720): 2009-07-11-13:42:11:  accepted connection from
> 192.168.1.101
> zebedee(2960/2720): 2009-07-11-13:42:11:  waiting for connection on port
> 11965
> zebedee(2960/1520): 2009-07-11-13:42:11: ERROR: client requested
> redirection to a disallowed target (192.168.1.60:5898/tcp)
> zebedee(2960/1520): 2009-07-11-13:42:11: ERROR: initial protocol
> exchange failed
>  I'll be out of the office till Monday.  I appreciate any help given and
> will respond then if more information is needed.
>  
> Thanks
> E. D. Epperson Jr.
>  
>  
>  
>  
>  
> 
> 
> ------------------------------------------------------------------------
> 
> ------------------------------------------------------------------------------
> Enter the BlackBerry Developer Challenge  
> This is your chance to win up to $100,000 in prizes! For a limited time, 
> vendors submitting new applications to BlackBerry App World(TM) will have
> the opportunity to enter the BlackBerry Developer Challenge. See full prize  
> details at: http://p.sf.net/sfu/Challenge
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Zebedee-talk mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/zebedee-talk


------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time, 
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge