Re: A question regarding usage of Zebedee
Arnoldas <[email protected]> Thu, 8 Feb 2018 11:02:02 +0200
| Newsgroups | gmane.comp.security.zebedee.general |
|---|---|
| Message-ID | <CAF9cfGKtVPPjYy=sgN4UPmi0YRSJHVUs78OcgVAjv4kEHkJbNA@mail.gmail.com> |
--===============1665559762410243195== Content-Type: multipart/alternative; boundary="001a1144d72c4924480564afaa9f" --001a1144d72c4924480564afaa9f Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hello Vasily, thanks for your help. It's a bit closer to reality, I managed to get it doing the stuff I need. I tested with TCP port 80 redirection (webserver running on same host as zebedee). It works nice. Then I switched to 3128/TCP (which I launched the OpenVPN on) and it doesn't work. This looks like to be some issue with OpenVPN itself. Will look deeper to find what's the actual problem is. Thanks for your assistance! 2018-02-07 13:35 GMT+02:00 Ovchinnikov Vasily <[email protected]>: > Arnoldas =D0=BF=D0=B8=D1=88=D0=B5=D1=82 07.02.2018 12:43: > > >> This should look like this: >> >> Client -> connection to 127.0.0.1:5555 <http://127.0.0.1:5555> -> [[[[[ >> Zebedee tunneling over UDP ]]]]] -> Server side -> connection to server'= s >> lo interface, port 5555 >> Any hints on how my server and client config files should look like? >> >> > Client > -> connection to 127.0.0.1:5555 <http://127.0.0.1:5555> > -> [[[[[ Zebedee tunneling over UDP ]]]]] > -> Server side (*:15555 for example) > -> connection to server's lo interface, port 5555 > > > #----------------------------------------------------------- > ------------------------------- > #Server config > #----------------------------------------------------------- > ------------------------------- > > verbosity 2 # Slightly more than basic messages > detached true # You will probably want this 'true' for normal > # use but I want to make sure that you see the > # preceding message if you haven't edited this. > > server true # Yes, it's a server! > ipmode udp # Operate in mixed TCP/UDP mode > compression zlib:9 # Allow maximum zlib compression > keylength 256 # Allow keys up to 256 bits > keylifetime 36000 # Shared keys last 10 hours > maxbufsize 16383 # Allow maximum possible buffer size > logfile '/var/log/zebedee.log' > keygenlevel 2 # Generate maximum strength private keys > serverport 15555 > redirect 5555 > # > # if servers - target (UDP/5555) and zebedee (UDP/15555) are on the same > host > # > target localhost > # > # else if target (UDP/5555) server is different host > # target SERVER_5555_IP > # > timestamplog true > #checkidfile '/usr/lib/zebedee/client.id' > > > #----------------------------------------------------------- > ------------------------------- > #Client config > #----------------------------------------------------------- > ------------------------------- > verbosity 2 # Slightly more than basic messages > detached true # You will probably want this 'true' for normal > # use but I want to make sure that you see the > # preceding message if you haven't edited this. > > server false # Not a server! > ipmode udp # Operate in mixed TCP/UDP mode > compression zlib:9 # Allow maximum zlib compression > keylength 256 # Allow keys up to 256 bits > keylifetime 36000 # Shared keys last 10 hours > maxbufsize 16383 # Allow maximum possible buffer size > logfile 'zebedee5555.log' > keygenlevel 2 # Generate maximum strength private keys > redirect none > target localhost > serverhost ZEBEDEE_SERVER_IP > serverport 15555 > timestamplog true > # > # if servers - target UDP *:5555 and zebedee *:15555 are on the same host > tunnel 5555:*:5555 > # > # else if servers - target UDP *:5555 and zebedee *:15555 are different > hosts > # tunnel 5555:SERVER_5555_IP:5555 > # > privatekey "your_zebedee_client_privat_key_here" > #----------------------------------------------------------- > ---------------------- > > For example: > > LAN1: > 192.168.1.50 - client, internet access via WAN_GATE1. > > WAN_GATE1 > 192.168.1.1 - WAN_GATE1_LOCAL_IP > WAN_GATE1 REMOTE_IP > > ******* > *** internet here *** > ******* > > ----------------------- > WAN_GATE2 REMOTE_IP > 192.168.2.1 - WAN_GATE2 LOCAL_IP > WAN_GATE2 > ----------------------- > LAN2: > 192.168.2.50 - zebedee server (UDP/15555 listener) > 192.168.2.100 - target UDP-server (UDP/5555 listener) > servers with internet access via WAN_GATE2 (or 192.168.2.100 may have no > default gate at all) > > And for this example net config: > 1) ZEBEDEE_SERVER_IP in client config is WAN_GATE2 REMOTE_IP > 2) WAN_GATE2 must have virtual server config for UDP/15555 to 192.168.2.5= 0 > 3) SERVER_5555_IP is 192.168.2.100 > > Or if zebedee+UDP server is the same host just one param needed: > 1) ZEBEDEE_SERVER_IP in client config is WAN_GATE2 REMOTE_IP > > > -- > Regards, > Ovchinnikov Vasily > ova at tkvc ru > > > > > ------------------------------------------------------------ > ------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > _______________________________________________ > Zebedee-talk mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/zebedee-talk > --001a1144d72c4924480564afaa9f Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr">Hello=C2=A0Vasily,<div><br></div><div>thanks for your help= . It's a bit closer to reality, I managed to get it doing the stuff I n= eed.</div><div>I tested with TCP port 80 redirection (webserver running on = same host as=C2=A0zebedee).</div><div>It works nice.</div><div>Then I switc= hed to 3128/TCP (which I launched the OpenVPN on) and it doesn't work. = This looks like to be some issue with OpenVPN itself.</div><div>Will look d= eeper to find what's the actual problem is.</div><div><br></div><div>Th= anks for your assistance!</div></div><div class=3D"gmail_extra"><br><div cl= ass=3D"gmail_quote">2018-02-07 13:35 GMT+02:00 Ovchinnikov Vasily <span dir= =3D"ltr"><<a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]</= a>></span>:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .= 8ex;border-left:1px #ccc solid;padding-left:1ex">Arnoldas =D0=BF=D0=B8=D1= =88=D0=B5=D1=82 07.02.2018 12:43:<br> <br> <blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p= x #ccc solid;padding-left:1ex"><span class=3D""> <br> This should look like this:<br> <br></span> Client -> connection to <a href=3D"http://127.0.0.1:5555" rel=3D"norefer= rer" target=3D"_blank">127.0.0.1:5555</a> <<a href=3D"http://127.0.0.1:5= 555" rel=3D"noreferrer" target=3D"_blank">http://127.0.0.1:5555</a>> -&g= t; [[[[[ Zebedee tunneling over UDP ]]]]] -> Server side -> connectio= n to server's lo interface, port 5555<span class=3D""><br> Any hints on how my server and client config files should look like?<br> <br> </span></blockquote> <br> Client<br> -> connection to <a href=3D"http://127.0.0.1:5555" rel=3D"noreferrer" ta= rget=3D"_blank">127.0.0.1:5555</a> <<a href=3D"http://127.0.0.1:5555" re= l=3D"noreferrer" target=3D"_blank">http://127.0.0.1:5555</a>><span class= =3D""><br> -> [[[[[ Zebedee tunneling over UDP ]]]]]<br></span> -> Server side (*:15555 for example)<span class=3D""><br> -> connection to server's lo interface, port 5555<br> <br> <br></span> #-----------------------------<wbr>------------------------------<wbr>-----= -------------------------<wbr>-<br> #Server config<br> #-----------------------------<wbr>------------------------------<wbr>-----= -------------------------<wbr>-<br> <br> verbosity 2=C2=A0 =C2=A0 =C2=A0# Slightly more than basic messages<br> detached true=C2=A0 =C2=A0# You will probably want this 'true' for = normal<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 # use but I want to= make sure that you see the<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 # preceding message= if you haven't edited this.<br> <br> server true=C2=A0 =C2=A0 =C2=A0# Yes, it's a server!<br> ipmode udp=C2=A0 =C2=A0 =C2=A0 # Operate in mixed TCP/UDP mode<br> compression zlib:9=C2=A0 =C2=A0 =C2=A0 # Allow maximum zlib compression<br> keylength 256=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0# Allow keys up to 25= 6 bits<br> keylifetime 36000=C2=A0 =C2=A0 =C2=A0 =C2=A0# Shared keys last 10 hours<br> maxbufsize 16383=C2=A0 =C2=A0 =C2=A0 =C2=A0 # Allow maximum possible buffer= size<br> logfile '/var/log/zebedee.log'<br> keygenlevel 2=C2=A0 =C2=A0# Generate maximum strength private keys<br> serverport 15555<br> redirect 5555<br> #<br> # if servers - target (UDP/5555) and zebedee (UDP/15555) are on the same ho= st<br> #<br> target localhost<br> #<br> # else if target (UDP/5555) server is different host<br> # target SERVER_5555_IP<br> #<br> timestamplog true<br> #checkidfile '/usr/lib/zebedee/<a href=3D"http://client.id" rel=3D"nore= ferrer" target=3D"_blank">client.id</a>'<br> <br> <br> #-----------------------------<wbr>------------------------------<wbr>-----= -------------------------<wbr>-<br> #Client config<br> #-----------------------------<wbr>------------------------------<wbr>-----= -------------------------<wbr>-<br> verbosity 2=C2=A0 =C2=A0 =C2=A0# Slightly more than basic messages<br> detached true=C2=A0 =C2=A0# You will probably want this 'true' for = normal<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 # use but I want to= make sure that you see the<br> =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 # preceding message= if you haven't edited this.<br> <br> server false=C2=A0 =C2=A0 # Not a server!<br> ipmode udp=C2=A0 =C2=A0 =C2=A0 # Operate in mixed TCP/UDP mode<br> compression zlib:9=C2=A0 =C2=A0 =C2=A0 # Allow maximum zlib compression<br> keylength 256=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0# Allow keys up to 25= 6 bits<br> keylifetime 36000=C2=A0 =C2=A0 =C2=A0 =C2=A0# Shared keys last 10 hours<br> maxbufsize 16383=C2=A0 =C2=A0 =C2=A0 =C2=A0 # Allow maximum possible buffer= size<br> logfile 'zebedee5555.log'<br> keygenlevel 2=C2=A0 =C2=A0# Generate maximum strength private keys<br> redirect none<br> target localhost<br> serverhost ZEBEDEE_SERVER_IP<br> serverport 15555<br> timestamplog true<br> #<br> # if servers - target UDP *:5555 and zebedee *:15555 are on the same host<b= r> tunnel 5555:*:5555<br> #<br> # else if servers - target UDP *:5555 and zebedee *:15555 are different hos= ts<br> #=C2=A0 tunnel 5555:SERVER_5555_IP:5555<br> #<br> privatekey "your_zebedee_client_privat_ke<wbr>y_here"<br> #-----------------------------<wbr>------------------------------<wbr>-----= -----------------<br> <br> For example:<br> <br> LAN1:<br> 192.168.1.50 - client, internet access via WAN_GATE1.<br> <br> WAN_GATE1<br> 192.168.1.1=C2=A0 - WAN_GATE1_LOCAL_IP<br> WAN_GATE1 REMOTE_IP<br> <br> *******<br> ***=C2=A0 internet here ***<br> *******<br> <br> -----------------------<br> WAN_GATE2 REMOTE_IP<br> 192.168.2.1=C2=A0 - WAN_GATE2 LOCAL_IP<br> WAN_GATE2<br> -----------------------<br> LAN2:<br> 192.168.2.50 - zebedee server (UDP/15555 listener)<br> 192.168.2.100 - target UDP-server (UDP/5555 listener)<br> servers with internet access via WAN_GATE2 (or 192.168.2.100 may have no de= fault gate at all)<br> <br> And for this example net config:<br> 1) ZEBEDEE_SERVER_IP in client config is WAN_GATE2 REMOTE_IP<br> 2) WAN_GATE2 must have virtual server config for UDP/15555 to 192.168.2.50<= br> 3) SERVER_5555_IP is 192.168.2.100<br> <br> Or if zebedee+UDP server is the same host just one param needed:<br> 1) ZEBEDEE_SERVER_IP in client config is WAN_GATE2 REMOTE_IP<br> <br> <br> -- <br> Regards,<br> Ovchinnikov Vasily<br> ova at tkvc ru<br> <br> <br> <br> <br> ------------------------------<wbr>------------------------------<wbr>-----= -------------<br> Check out the vibrant tech community on one of the world's most<br> engaging tech sites, Slashdot.org! <a href=3D"http://sdm.link/slashdot" rel= =3D"noreferrer" target=3D"_blank">http://sdm.link/slashdot</a><br> ______________________________<wbr>_________________<br> Zebedee-talk mailing list<br> <a href=3D"mailto:[email protected]" target=3D"_blank">Zeb= [email protected]<wbr>.net</a><br> <a href=3D"https://lists.sourceforge.net/lists/listinfo/zebedee-talk" rel= =3D"noreferrer" target=3D"_blank">https://lists.sourceforge.net/<wbr>lists/= listinfo/zebedee-talk</a><br> </blockquote></div><br></div> --001a1144d72c4924480564afaa9f-- --===============1665559762410243195== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot --===============1665559762410243195== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Zebedee-talk mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/zebedee-talk --===============1665559762410243195==--