Re: trying to target multiple host? can it be done?
Tom Sneddon <zebedee-list-4XgCj7/[email protected]> Sun, 12 Jul 2009 23:02:03 -0400
| Newsgroups | gmane.comp.security.zebedee.general |
|---|---|
| Message-ID | <[email protected]> |
Sometimes getting another set of eyeballs looking at the problem is all it takes to discover the problem. Please forgive me if I'm stating the obvious stuff that you already know, but here's what I notice. I'm assuming from tunnel 5900:192.168.1.65:5898 that your Zebedee client is trying to connect to 192.168.1.65 on port 5898. This disagrees with a commented line in the server config, "#redirect 5900-5901:192.168.1.69:5898 #UltraVNC to Stephanies", that implies 192.168.1.69 port 5898 is where you want to connect to. What is the real IP of the destination? >From the server error "ERROR: client requested redirection to a disallowed target (192.168.1.60:5898/tcp)" it appears that your new client is trying to talk to VNC on 192.168.1.60 using port 5898. I'm not sure why that is happening. I did notice that you've commented out the redirect configuration on the server. That should redirect any port, but you never know... Maybe try adding redirect lines. For the server config try: # Only redirect these ports redirect 3050 # Firebird redirect 5898-5901 # VNC # Allowable destinations for these ports target 192.168.1.60:3050/tcp # Old Firebird client target 192.168.1.60:5900/tcp # Old VNC client target 192.168.1.60:5901/tcp # Old VNC client (port #2) target 192.168.1.69:5898/tcp # New VNC client # The following line ensures that the default target host # is the local machine. The last named host becomes the # default so leaving this here ensures that "localhost" is, # the default unless overridden on the command line. target localhost A long time ago (2006-03-15) I posted about a similar situation. That may also be of some help to you. Try http://sourceforge.net/mailarchive/forum.php? forum_name=zebedee-talk&max_rows=25&style=nested &viewmonth=200603&viewday=15 I've had to split the address up into three lines. Just cut and paste them together. Please keep us posted on how you resolve this issue. Thanks, Tom Sneddon E.D. Epperson wrote: > I've been using Zebedee for a number of years for both FirebirdSql and > WinVNC. I'm using 2.41. > > Now I need to set up an additional host for a WinVNC connection so that > a different person in our office can tunnel directly into their > machine. But I cant get it to work. (I hope it can be done) > > here is my client.zbd file > > verbosity 2 # Basic messages only > server false # It's a client > detached true # Detach from terminal > compression bzip2:1 # Allow maximum compression > logfile C:\ZeBeDee\Client.log > timestamplog true > tunnel 5900:192.168.1.65:5898 > include c:\zebedee\Keys\Stephanie.key > (note: when I set the tunnel to 5900:192.168.1.65:5900, it works, but > goes to the wrong machine for this client) > > here is the significant portion of client error log: > ZeBeDee(3600/3036): 2009-07-11-13:42:00: reading config file > 'c:\zebedee\Keys\Stephanie.key' at level 2 > ZeBeDee(3600/3036): 2009-07-11-13:42:00: Listening on local port 5900 > ZeBeDee(3600/3036): 2009-07-11-13:42:00: waiting for client connection > ZeBeDee(3600/3036): 2009-07-11-13:42:12: accepted connection from 127.0.0.1 > ZeBeDee(3600/3036): 2009-07-11-13:42:12: waiting for client connection > ZeBeDee(3600/3392): 2009-07-11-13:42:12: ERROR: server refused request > for redirection to 192.168.1.65:5898 > here is the server.zbd file: > verbosity 2 # Slightly more than basic messages > detached true # free from console > server true # Yes, it's a server! > ipmode tcp # Operate only tcp > tcptimeout 600 > logfile c:\zebedee\zebedee.log > timestamplog true > compression bzip2:1 # Allow maximum zlib compression > keylength 256 # Allow keys up to 256 bits > keylifetime 36000 # Shared keys last 10 hours > maxbufsize 16383 # Allow maximum possible buffer size > keygenlevel 2 # Generate maximum strength private keys > checkidfile c:\zebedee\IDs\keys.id > > #redirect 3050:192.168.1.60:3050 #Firebird port > #redirect 5900-5901:192.168.1.69:5898 #UltraVNC to Stephanies > #redirect 5900-5901:192.168.1.60:5900-5901 #UltraVNC > #target 192.168.1.60 > #redirect 3050,5898,5900,5901 > target 192.168.1.60:3050 > target 192.168.1.69:5898 > target 192.168.1.60:5900 > target 192.168.1.60:5901 > (as you can see, I've been fiddling with this, trying different option > to get it to work) > > and here is the significant part of the server log: > zebedee(2960/2720): 2009-07-11-13:41:33: ERROR: failed to detach from > console (Win32 error = 87) > zebedee(2960/2720): 2009-07-11-13:41:33: waiting for connection on port > 11965 > zebedee(2960/2720): 2009-07-11-13:42:11: accepted connection from > 192.168.1.101 > zebedee(2960/2720): 2009-07-11-13:42:11: waiting for connection on port > 11965 > zebedee(2960/1520): 2009-07-11-13:42:11: ERROR: client requested > redirection to a disallowed target (192.168.1.60:5898/tcp) > zebedee(2960/1520): 2009-07-11-13:42:11: ERROR: initial protocol > exchange failed > I'll be out of the office till Monday. I appreciate any help given and > will respond then if more information is needed. > > Thanks > E. D. Epperson Jr. > > > > > > > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------------ > Enter the BlackBerry Developer Challenge > This is your chance to win up to $100,000 in prizes! For a limited time, > vendors submitting new applications to BlackBerry App World(TM) will have > the opportunity to enter the BlackBerry Developer Challenge. See full prize > details at: http://p.sf.net/sfu/Challenge > > > ------------------------------------------------------------------------ > > _______________________________________________ > Zebedee-talk mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/zebedee-talk ------------------------------------------------------------------------------ Enter the BlackBerry Developer Challenge This is your chance to win up to $100,000 in prizes! For a limited time, vendors submitting new applications to BlackBerry App World(TM) will have the opportunity to enter the BlackBerry Developer Challenge. See full prize details at: http://p.sf.net/sfu/Challenge