Re: tunneling through public IP destroys my network

HI!
The eventAlert create a new connection in random port in client side.
Therefore, outside the lan the server can´t connect to the event-server in
client-side, if the firewall drop this out-connection.
The interbase server hangs and firebird before 1.5 release too.

Bye!

                Omar L. M. Rosa
Diretor de Informática - Prismatec - RS

51 9189 6223   --   51 3388 1523

----- Original Message -----
From: "Dixon Epperson" <[email protected]>
To: <[email protected]>
Sent: Sunday, November 16, 2003 3:27 PM
Subject: RE: [Zebedee-talk] tunneling through public IP destroys my network


>
> Winston,
>
> Thankyou but I finally was able to resolve it.  I am using Firebird and
IBEventAlerter in my application and that was the hangup.  Inside the LAN I
kept the IBEventAlerter but for the remote clients, I switched it to a
Polled event.  After that I was able to tunnel quite successfully.
>
> However, I will revisit my config files to conform them to your
recommendations.
>
> Again, Thanks!
> Dixon Epperson
>
> -- "Neil Winton" <neil.winton-XZoyATsUNX5Wk0Htik3J/[email protected]> wrote:
> Hi,
>
> > I'm new to Zebedee, and tunneling for that matter, so while I
> > have a problem, I'm not real sure which question to ask.
> >
> > I set up Zebedee on a separate server, static IP, and then I set
> > up a client machine.  On the LAN side of my router, that is when
> > the IP address in the client is pointing to the zebedee server I
> > am able to connect to my firebird database do my business and
> > disconnect at will.  Seems to work good.
> >
> > However, when I take the client outside the network and try to
> > connect to the public address, I get a brief connection to the
> > database (just the login screen) (though it seems to take to long
> > to make the connection) and then I can't continue any further.
> > But here is the kicker.  After I make that connection, it throws
> > my whole network on the LAN side into disarray.  None of the
> > clients can connect to the Firebird database.
>
> I've never seen anything like this with Zebedee. It does sound more like a
> router configuration problem. There isn't some kind of looping in the
config
> is there? Having said that, there are some problems with the Zebedee
config
> files, more below ...
>
> > The database server and the Zebedee have a static IP address, but
> > all the other clients are getting a dynamic IP address from the router.
> >
> > The router is a Netopia 3346ent.  What we did on it was set up a
> > server list that said any traffic on this public IP address on
> > nnnnn port is to be sent to the private IP address of the Zebedee
server.
> >
> > From our ISP, we have 5 static addresses, the first useable is
> > a.b.c.194 up to a.b.c.198.  I used the a.b.c.194 as the ip the
> > client is trying to tunnel to.  this is the main address, would
> > that cause it to mess up my internal network.
> >
> > I dont know, maybe this should be a netopia question, but I have
> > to start somewhere.
> >
> > here is the client configuration file
> >
> > verbosity 1 # Basic messages only
> >
> > detached true # Detach from terminal
> > server false # It's a client
> > compression zlib:9 # Allow maximum zlib compression
> > include c:\zebedee\allam.key
> >
> > #tunnel 3051:a.b.c.197:3050 #public ip  was 194
> > tunnel 3051:192.168.1.83:3050  #private ip
>
> It's probably best here to replace that tunnel spec with this:
>
> serverhost a.b.c.194 # public IP address
> tunnel 3051:192.168.1.83:3050 # private IP
>
> As you only have a single permitted target in your server config then this
> would be OK too:
>
> tunnel 3051:192.188.1.83:3050
>
> Now for the server config ...
>
> > here is the server config file
> >
> > #
> > #  Config file to use on a Server running Firebird & ZeBeDee
> > #
> >
> > verbosity 2 # Slightly more than basic messages
> > detached true # free from console
> > server true # Yes, it's a server!
> > ipmode tcp # Operate only tcp
> > logfile         c:\zebedee\zebedee.log
> >
> > compression zlib:9 # Allow maximum zlib compression
> > keylength 256 # Allow keys up to 256 bits
> > keylifetime 36000 # Shared keys last 10 hours
> > maxbufsize 16383 # Allow maximum possible buffer size
> > keygenlevel 2 # Generate maximum strength private keys
> > checkidfile c:\zebedee\allam.id
> >
> > redirect 3050:192.168.c.d:3050  #Firebird port
> > targethost 192.168.c.d # Set up firebird server as the target
>
> It's generally better not to use the obsolete redirect and targethost
> keywords (and the syntax you are using isn't really right for the redirect
> spec). Instead I'd do this:
>
> tunnel 192.168.1.83:3050
>
> > I would appreciate any and all help on this
>
> Sorry it has taken so long.
>
> Regards,
> Neil
>
>
> ________________________________________________________________
> The best thing to hit the internet in years - Juno SpeedBand!
> Surf the web up to FIVE TIMES FASTER!
> Only $14.95/ month - visit www.juno.com to sign up today!
>
>
> -------------------------------------------------------
> This SF. Net email is sponsored by: GoToMyPC
> GoToMyPC is the fast, easy and secure way to access your computer from
> any Web browser or wireless device. Click here to Try it Free!
> https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl
> _______________________________________________
> Zebedee-talk mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/zebedee-talk



-------------------------------------------------------
This SF. Net email is sponsored by: GoToMyPC
GoToMyPC is the fast, easy and secure way to access your computer from
any Web browser or wireless device. Click here to Try it Free!
https://www.gotomypc.com/tr/OSDN/AW/Q4_2003/t/g22lp?Target=mm/g22lp.tmpl