SV: low activity list

The question really is:
How far do you want to take this?

Allowing a temporary block of access to the internet while the computer is
connected to a remote LAN is not possible (without recoding functionality
inside Zebedee or some kind of user intervention). What you might want to
consider is completely blocking access to anything outside the computer
except THE specific IP/PORT combination for the Zebedee server? This would
thus mean that the client computer never would be able to 'see' the
internet.
The isolation of a computer is not that difficult. I've used a setup with a
firewall (Zonealarm Pro) in 'Expert' mode (FYI, ZoneAlarm Pro is not the
free version...). Here I've set up specific rules denying communication to
IP addresses outside a specific subnet (well, except a few things like
DHCP).

But if the computer is a laptop taken to/from the office and being plugged
into 'your' LAN, the internet or a remote LAN, this won't work. You would
probably like to be able to connect to 'your' domain controller, read mails
through Outlook etc.? If this is the case you will have other problems with
Zebedee as it can't connect to specific port unless you make a few 'hacks'.
Some ports are even impossible to connect to. As far as I remember Zebedee
has problems with port 135-139 and 445. In this case you need to find
another program. You could try OpenVPN (can be found on SourceForge)
instead. This is a more complicated product than Zebedee but it will allow
installation of a virtual network on server and client. In combination with
a correctly configured personal firewall (blocking anything than the virtual
network, allowing DHCP from the 'real' network) you would be able to login
on to your domain wherever you are in the world (even on another company's
LAN). This would in fact resemble a setup used by for instance CheckPoint.

Brgds

Henrik
-----Oprindelig meddelelse-----
Fra: zebedee-talk-admin-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
[mailto:zebedee-talk-admin-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org] På vegne af Lonnie
Cumberland
Sendt: 13. november 2003 22:16
Til: [email protected]
Cc: zebedee-cLejNk2QTU/[email protected]
Emne: [Zebedee-talk] low activity list

Hello All,

It seems that this list is a low activity list as I have not seen any mail
from
it.

I am trying to figure out how to isolate a remote machine from the internet
while the Zebedee VPN is established. This would, in effect, change the
remote
gateway and direct ALL of the remote ports down an established tunnel into a
subnet of servers that are to be protected behind a firewall.

I just do not want the remote machine to have access to any other Internet
sites while the tunnel is established with the subnet of servers and they
should be the only servers that can be seen by the tunneled remote machine.

Any ideas on how to set up Zebedee to handle this on the client (remote)
side
as well as the Server side?

Thanks,
Lonnie


__________________________________
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard
http://antispam.yahoo.com/whatsnewfree


-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/
_______________________________________________
Zebedee-talk mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/zebedee-talk



-------------------------------------------------------
This SF. Net email is sponsored by: GoToMyPC
GoToMyPC is the fast, easy and secure way to access your computer from
any Web browser or wireless device. Click here to Try it Free!
https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl