gmane.comp.security.zebedee.general

identity with key

Mohsen Pahlevanzadeh — 2012-03-25T06:29:24

Dear all,

I have zebedee server and want to get permission to my friends, of
course limited (4). The don't use registered IP that i validate them
with checaddress directive.So i need to key validation.
I perform the following job:
in client side:
zebedee -p > client.key
zebedee -P -f cleint.key > clients.id
scp clients.id root< at >myserver:~
edit client.zbd:
add :
include "./client.key"
in server side:
zebedee -p > srv.key
zebedee -P -f srv.key > srv.id
add :
include "./srv.key"
include "./cliens.id"
---
install squid and run it.
run zebedee such as:
nohup ./zebedee -s -U &
and run zebedee in client such as :
./zebedee 80:myserver:3128
Note: before i add include directives, my connection is OK and i get
data successfully, but after above changes, mu zebedee doesnt work!

--mohsen



------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure_________________________________________

Re: Zebedee and two differend tunnels.

Tom Sneddon — 2011-12-14T04:21:26

Josef,

I too am using a different Zebedee process for each server that I tunnel 
to and it works fine.  I've included server and client configuration 
examples below.  These are derived from a working tunnel.  Maybe you 
will find a clue to your problem by looking at a working example.

Please report back to the mail list what eventually solves the issue.

Thanks,
    Tom Sneddon


Here's an example server:
-------------------------
verbosity 2          # Slightly more than basic messages.
detached true        # Detach from the command line console.
server true          # Yes, it's a server!
serverport xxxxx     # Listen on this port.  Need hole in firewall.
ipmode both          # Operate in mixed TCP/UDP mode
compression zlib:9   # Allow maximum zlib compression
keylength 256        # Allow keys up to 256 bits
keylifetime 36000    # Shared keys last 10 hours
maxbufsize 2048      # Default is 8192.  16384 dorks up zebedee.
keygenlevel 2        # Generate maximum strength private keys
checksumlevel 3      #

Re: Zebedee and two differend tunnels.

Josef Karliak — 2011-12-06T14:25:43

   Hellou,
   thanks for answer. It is on the same network, same path, only there  
is an another target for mssql

   I've:
   telnet-server (1.2.3.4) <=> zebedee_server (linux router) <=>  
internet <=> zebedee_client (linux router) <=> telnet clients (5.6.7.x)
   I need:
telnet-server (1.2.3.4) and mssql-server (1.2.3.5) <=>  
zebedee_server(linux router) <=> internet <=> zebedee_client (linux  
router) <=> telnet clients and mssql clients (5.6.7.x)

   So I'll look on the second target and start zebedee with -u (with UDP)

   Thanks
   J.K.


Cituji Magnus Wedberg <mw-kS3XZJ7wmUo< at >public.gmane.org>:

Re: Zebedee and two differend tunnels.

Magnus Wedberg — 2011-12-06T10:44:30

Josef Karliak wrote, On 2011-12-06 11:37:

If the second target is on the same net, you should be able to add 
another target without using a different process.

I have never used multiple processes on the same server host, so I don't 
know if something special is needed.

A complete network chart (client/server, targets and nets) should be 
helpful...

Zebedee and two differend tunnels.

Josef Karliak — 2011-12-06T10:37:09

   Hi there,
   I'm tunneling telnet thru zebedee tunnel, I need now another  
tunelling for MSSQL (that uses udp) and target is different too. I  
made some configs (port, target, ...) changes into a different config  
files (client and server of course), in init startup scipts changed  
names of config and "/var/lock/subsys/zebedee2". But : when I start  
second tunnel, first telnet tunnel is down, both port of the  
"serverport" are avaible, so sockets of zebedees are open.
   So where I made a mistake ?
   Thanks and best regards
   J.K.

[PRIVATE] reserve tunnel for zebedee

Pierre ARTAUD — 2011-06-23T08:11:22

Hello everyone,
I would have just one question: is it possible to reverse a tunnel (as 
ssh) ?
To have a communication between server to client for user ?
Thanks greetings.
Pierre.

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a 
definitive record of customers, application performance, security 
threats, fraudulent activity and more. Splunk takes this data and makes 
sense of it. Business sense. IT sense. Common sense.. 
http://p.sf.net/sfu/splunk-d2d-c1

Re: windows server 2008 RC2 64bit

Ray — 2011-05-26T23:14:53

<snip>
<eric.hand< at >...> writes:
UAC was off so that wasn't the issue. I ended up moving the executable and
the config file to its own folder off of the root drive, instead of being
placed in the c:\windows\system32\ folder.. and now it works.
Weird permissions issues I guess. I had written files, etc into there as a
test, but clearly something else under the hood was preventing it. 
</snip>

The issue isn't 'permissions' as such, it's Windows File Virtualization.

File Virtualization Filter Driver is part of UAC, but not disabled just
because you turn off UAC.
(The actual driver is: %SystemRoot%\System32\Drivers\Luafv.sys)

The system in Windows-7/Server 2008 will aggressively prevent you from writing
(even temporarily) to %WinDir%, %ProgramFiles%, and several other locations.
This will break many applications that expect to be able to write to the same 
directory the executable resides in. It 'helpfully' will redirect many write 
actions to the 'approved' locations, but not all.

There are multiple workaroun

Re: windows server 2008 RC2 64bit

2011-04-22T14:46:55

UAC was off so that wasn't the issue. I ended up moving the executable and the config file to its own folder off of the root drive, instead of being placed in the c:\windows\system32\ folder.. and now it works. Weird permissions issues I guess. I had written files, etc into there as a test, but clearly something else under the hood was preventing it. 

Thanks for the help!
-Eric

-----Original Message-----
From: Magnus Wedberg [mailto:mw-kS3XZJ7wmUo< at >public.gmane.org] 
Sent: Thursday, April 21, 2011 9:56 PM
To: zebedee-talk-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
Subject: Re: [Zebedee-talk] windows server 2008 RC2 64bit

eric.hand-Ltcrj8B0+EnQT0dZR+AlfA< at >public.gmane.org wrote, On 2011-04-21 17:59:

Sounds like UAC or a permissions issue, I run several instances of 
Zebedee with config files on 2008 R2 (I guess you mean that and not 
RC2). Works perfectly!

Re: windows server 2008 RC2 64bit

Magnus Wedberg — 2011-04-22T02:55:57

eric.hand-Ltcrj8B0+EnQT0dZR+AlfA< at >public.gmane.org wrote, On 2011-04-21 17:59:

Sounds like UAC or a permissions issue, I run several instances of 
Zebedee with config files on 2008 R2 (I guess you mean that and not 
RC2). Works perfectly!

Re: windows server 2008 RC2 64bit

2011-04-21T16:40:22

I'm running 64-bit Windows 7 myself now. I'll try to get the tooling installed to make a 64-bit build.

Neil

From: eric.hand-Ltcrj8B0+EnQT0dZR+AlfA< at >public.gmane.org [mailto:eric.hand-Ltcrj8B0+EnQT0dZR+AlfA< at >public.gmane.org]
Sent: 21 April 2011 16:59
To: zebedee-talk-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
Subject: [Zebedee-talk] windows server 2008 RC2 64bit

Anyone been successful running Zebedee on this platform? I'm using the 32bit pre-compiled version.(last stable ver)
I'm able to run it with a simple 'zebedee.exe localhost', but I'm unable to pass in a .zbd config file like we did in 2003(32bit) with a -f parameter.
It says that it cannot open the config file (doesn't exist). It definitely does. I've tried giving fully qualified paths, with and without quotes, running from the same directory.. everything. Nada. I figure there are probably some tricks to getting it to work on this platform. Any help would be appreciated. The user running the Zebedee.exe certainly does have access to the folder

windows server 2008 RC2 64bit

2011-04-21T15:59:15

Anyone been successful running Zebedee on this platform? I'm using the 32bit pre-compiled version.(last stable ver)
I'm able to run it with a simple 'zebedee.exe localhost', but I'm unable to pass in a .zbd config file like we did in 2003(32bit) with a -f parameter.
It says that it cannot open the config file (doesn't exist). It definitely does. I've tried giving fully qualified paths, with and without quotes, running from the same directory.. everything. Nada. I figure there are probably some tricks to getting it to work on this platform. Any help would be appreciated. The user running the Zebedee.exe certainly does have access to the folder containing the .zbd config file. I checked on that.

Thanks,
Eric A. Hand
Security Administrator
Information Systems
Casey's General Stores, Inc.
One Convenience Blvd
Ankeny, IA  50021
Phone: (515) 965-6122
Fax: (515) 965-6205
E-Mail: eric.hand-Ltcrj8B0+EnQT0dZR+AlfA< at >public.gmane.org<mailto:eric.hand-Ltcrj8B0+EnQT0dZR+AlfA< at >public.gmane.org>
_____________________________

Re: "Client to remote host" connection with UDP tunneling through intermediate host

Magnus Wedberg — 2011-03-15T23:16:17

You seem to lack a target or redirect keyword -- you must specify 
allowed targets for when traffice leaves the tunnel (it must match 
exactly at both sides). Fix this and everything will be a-OK :-)

"Client to remote host" connection with UDP tunneling through intermediate host

Namikaze Minato — 2011-03-14T19:05:22

Hello everybody.

My question will perhaps seem trivial to answer, and I hope it will,
but please take a few minutes to help me if you can.


I am trying to connect to a remote host (named "endhost") I cannot
access except going through a proxy, and that proxy prevents me to use
the ports I need (UDP 5000 - 5200).

I used to make a ssh SOCKS tunneling to an intermediate host (named
"intermediate") using putty+proxifier to redirect everything my
computer (named "client") sent to the "intermediate" host, which
allowed me to bypass the proxy.
I am now trying to do the same with zebedee because the game I want to
connect through that proxy uses UDP ports 5000 to 5200 and ssh
tunneling can't work on UDP Datagrams. I guess that if a TCP
connection can reach the host "endhost", an UDP datagram will too.
This is why I tried to create a TCP tunnel from "client" to
"intermediate", in order to reach "endhost".

What I tried is following :

Client-side :
zebedee.exe  -o clientlog -U 1080:intermediate:1080
proxifier co

Re: zebedeee server with 2 IPs

Magnus Wedberg — 2010-06-22T10:00:36

Josef Karliak wrote, On 2010-06-22 11:33:

Not that I know of, but you could easily run two services, start only 
one as standard, and stop it/initiate the other using scripting means 
(for example if #1 stops responding to ping, initiate the other)

zebedeee server with 2 IPs

Josef Karliak — 2010-06-22T09:33:50

   Hi guys,
   my zebedee server will have 2 IP (main and redundant internet  
connections). Is there possible to define zebedee client 2  
"serverhost" ?
   Thanks.
   J.Karliak.

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate 
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the 
lucky parental unit.  See the prize list and enter to win: 
http://p.sf.net/sfu/thinkgeek-promo_______________________________________________
Zebedee-talk mailing list
Zebedee-talk-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f< at >public.gmane.org
https://lists.sourceforge.net/lists/listinfo/zebedee-talk

Re: How to set up zebedee for playing to a UDP gameserver

Jorrit Tyberghein — 2010-02-08T11:47:26

On Mon, Feb 8, 2010 at 11:50 AM, Gerard Bulger
<gerard-7SZ9aVKjU3imJqUEOav01LVCufUGDwFn< at >public.gmane.org> wrote:

Doesn't that require another windows computer on which I can run the
game client?
I don't have such a computer where I can connect too. I only have the
intermediate server
(which is linux).

Also not sure if VNC supports 3D acceleration? The game requires that.


In my case the firewall is on my end. So I need to connect FROM a machine
that is behind a firewall.

But thanks for the advice in any case.

Greetings,

How to set up zebedee for playing to a UDP gameserver

Jorrit Tyberghein — 2010-02-05T12:11:53

Hi all,

I have a question about how to set up zedebee. I'm rather bad with
networking stuff
so things like forwarding and so on are all very unknown to me. Basically I have
the following situation:

- I have a game server at address 'laanx.fragnetics.com' on port 7777
with UDP protocol.
- I have a shell server at address 'www.crystalspace3d.org' for which
I have SSH access.
- I have a local windows Vista computer.

zebedee is installed on the Windows machine and on the Crystal Space
shell server.
On the Windows machine I also have putty which can do the ssh
tunneling if that would
be needed.

The windows machine is also behind a firewall but that I can get
through that using socks4.

Given all the information above how can I set it up so that my game
client can find the
server through UDP? I tried several things but couldn't get it working.

Greetings and thanks in advance,

Re: maxbufsize

Lee Meng — 2009-11-02T01:59:52

The default maxbufsize is 8192 bytes. Thanks Tom and Tim for the
reminder. I haven't had Zebedee crash, but I have been experiencing
occasional disconnects. My maxbufsize is set to 16383 (probably copied
from another template). I'm going to try 8192 or less.


maxbufsize

    This specifies the size, in bytes, of the buffer Zebedee will use
to read data from applications. The actual size of buffer used will be
the minimum of the client’s and server’s values.

    By default Zebedee attempts to read data from the client or server
programs at each end of the tunnel in chunks of 8192 bytes. There may
be occasions when you want to decrease this if, for example, you have
a highly interactive application and the response seems sluggish
because you end up waiting for large data transfers. You can reduce
the buffer size to one byte, but unless you are trying to debug
misbehaviour or have time to waste I don’t recommend it! Conversely,
you may increase the buffer size up to a maximum of 16383 bytes to
attempt t

Re: Crash operating through proxy server

2009-11-01T23:37:34


Here's my client config file.

++++++++++++++++++++++++++++
#
# Zebedee configuration file to start up a tunnelled VNC session
#
#

verbosity 5
#logfile zebedee.log

server false             # It's a client
detached false             # stay on console window (at this stage anyway)
listenip 127.0.0.1           # forbid connection from other machines
serverhost suthers.no-ip.org # home dynamic IP address
tunnel 5900:*:5900           # take local port 5900 & tunnel to remote machine
5900
serverport 443               # use the https port for the tunnelled connection
httpproxy 127.0.0.1:8080     # spec of our ISA server - ACTUALLY the port of
NTLMAPS, which is handling the proxy authentication



message "THIS IS THE CLIENT!!!!!!"

compression zlib:6# Request normal Zlib compression
++++++++++++++++++++++++++++++++

Thanks again

Bill



------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer eve

Re: Crash operating through proxy server

Suthers Spam Account — 2009-11-01T02:14:30

Thanks for your replies Tom & Tim,

I do not have 'maxbufsize' specified in either server or client config files.  What does it default to?

Here's the server config file.  I can post the client one when I get to work.

+++++++++++++++++++++++
#
# Zebedee server sample config file for tunnelling VNC traffic.
# Edited by Bill

verbosity 5
logfile zebedee.log

server true# Yes, it's a server!
detached true# Convert to daemon if possible

# Set up allowed VNC targets on localhost.
# By default this only allows tunnels to ports 5900 and 5901.

target localhost:5900-5901/tcp
serverport 443# Listen on https port for incoming tunnels

# Other parameters

compression zlib:9# Allow maximum Zlib compression
keylength 256# Allow key length up to 256 bits
++++++++++++++++++++++

Thanks again

Bill

== On 2009-10-31 Tim Uckun (timuckun-Re5JQEeQqe8AvxtiuMwx3w< at >public.gmane.org) wrote: ==


I think I remember having the same problem a while ago. I stick with 8192.

--------------------------------------------------

Re: Crash operating through proxy server

Tim Uckun — 2009-10-31T08:17:30

I think I remember having the same problem a while ago. I stick with 8192.

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Zebedee-talk mailing list
Zebedee-talk< at >lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/zebedee-talk