RE: Re: Reverse Tunneling with ZBD
"William Hazelrig" <[email protected]> Fri, 30 Jan 2004 06:22:48 -0600
| Newsgroups | gmane.comp.security.zebedee.general |
|---|---|
| Message-ID | <000001c3e72b$c7484c80$6563a8c0@HelpdeskTest> |
That shouldn't be necessary, unless the video conferencing software's port
selections are hard-coded. If you can persuade the software either that it
should listen on a different port, or that it should send to a different
port on the "remote" host, you can use different local ports for the
tunnels. I believe you'll need to adjust port mappings at both ends.
Say you have the video conference software set to send on port X and to
receive on port Y:
[local port X] ---> [local-to-remote Zebedee tunnel] ---> [remote port Y]
[local port Y] <--- [remote-to-local Zebedee tunnel] <--- [remote port X]
From the perspective of the Zebedee client on each end (regardless of
listenmode setting), the tunnel spec is:
tunnel X:*:Y
From the perspective of the Zebedee server on each end (regardless of
clienthost option), the target spec is:
Target localhost:Y
The serverhost and clienthost options used by the initiator of the
connections would be identical and should both specify the the waiting party
in the connection. If you want to insure the connection can only be
initiated from a particular host or from one of a particular set of hosts,
the waiting host should either hard-code the serverhost to match the
intended initiator ("single partner" setup), or use Identity Checking to
confirm that the actual initiator is an authorized partner.
- w.h.
-----Original Message-----
From: zebedee-talk-admin-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
[mailto:zebedee-talk-admin-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org] On Behalf Of Matthis
Sent: Friday, January 23, 2004 11:43 AM
To: [email protected]
Subject: [Zebedee-talk] Re: Reverse Tunneling with ZBD
Just a message to say that I have figured out to do some kind of
reverse forwarding with ZBD using the -c and -l options, but because my
objective is video conferencing, my problem is that I need to do both
at the same time. Now, if I try to run both a client and server on the
same machine, I get an error saying that the port is already in use
(and I only have one port available.) Does anyone now how to forward
both ways at the same time through one single tunnel?
Matthis
On 21 Jan 2004, at 19:16, Matthis wrote:
> Hello, being behind a very restrictive firewall, (only port 80 is
> open), I thought ssh port forwarding would be exactly what I needed,
> but as my final goal was to do video/chat conference, UDP ports were
> necessary, so I decided to switch to zebedee.
> Now, although I have successfully been able to send the audio and
> video through the firewall to the host running zebedee server; I have
> no clue how I can get the other person's audio/video back through the
> firewall to me.... (with ssh I would have used "reverse" forwarding,
> but I haven't grasped how this works with zebedee, if it is indeed
> possible.)
>
> All of this is happening between two mac os X systems, and the
> conference uses ohphoneX.
>
> Could anyone help me on how to get zebedee to work tunnel connections
> both ways? If that's not possible, does anyone know of a way to
> combine it with ssh so that in the end I would be able to forward udp
> ports both ways?
>
> Thank you for any help,
>
> Matt
>
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Zebedee-talk mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/zebedee-talk
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn