[stunnel-users] stunnel with smb from 2 networks behind firewalls

Mon Mar 19 13:57:44 CET 2012

Hello,

Here is my setup :

[PCA]-------------[Firewall-A]---------------{INTERNET}-----------[45.212.56.178:21213|Firewall-B|192.168.0.1:8139]--------[PCB]

PCA : Windows 7
stunnel.conf :

[smb]
client = yes
accept = 10.232.232.232:139
connect = 45.212.56.178:21213

PCB : Ubuntu Oneiric 11.10
stunnel.conf :

[smb]
accept = 8139
connect = 139

When I try to connect a network drive from PCA to a remote drive of PCB

here are the stunnel.log of PCA :

2012.03.19 13:47:02 LOG5[3744:2564]: Reading configuration from file 
stunnel.conf
2012.03.19 13:47:02 LOG5[3744:2564]: FIPS mode is enabled
2012.03.19 13:47:02 LOG7[3744:2564]: Compression not enabled
2012.03.19 13:47:02 LOG7[3744:2564]: Snagged 64 random bytes from 
C:/.rnd
2012.03.19 13:47:02 LOG7[3744:2564]: Wrote 0 new random bytes to 
C:/.rnd
2012.03.19 13:47:02 LOG7[3744:2564]: PRNG seeded successfully
2012.03.19 13:47:02 LOG6[3744:2564]: Initializing SSL context for 
service smb
2012.03.19 13:47:02 LOG7[3744:2564]: Certificate: stunnel.pem
2012.03.19 13:47:02 LOG7[3744:2564]: Certificate loaded
2012.03.19 13:47:02 LOG7[3744:2564]: Key file: stunnel.pem
2012.03.19 13:47:02 LOG7[3744:2564]: Private key loaded
2012.03.19 13:47:02 LOG7[3744:2564]: SSL options set: 0x01000004
2012.03.19 13:47:02 LOG6[3744:2564]: SSL context initialized
2012.03.19 13:47:02 LOG5[3744:2564]: Configuration successful
2012.03.19 13:47:02 LOG7[3744:2564]: Service smb closed FD=200
2012.03.19 13:47:13 LOG5[3744:3940]: Service smb accepted connection 
from 10.232.232.232:50004
2012.03.19 13:47:13 LOG5[3744:3940]: connect_blocking: connected 
45.212.56.178:21213
2012.03.19 13:47:13 LOG5[3744:3940]: Service smb connected remote 
server from 192.168.3.4:50005
2012.03.19 13:47:43 LOG3[3744:3940]: readsocket: Connection reset by 
peer (WSAECONNRESET) (10054)
2012.03.19 13:47:43 LOG5[3744:3940]: Connection reset: 143 bytes sent 
to SSL, 0 bytes sent to socket

No logs on PCB

it seems that the SSL connection doesn't cross the firewall B, if not I 
would saw logs in stunnel.log of PCB isn't it ?
What can I do better to make this setup working ? Does the firewall B 
porforwarding is blocking the process ?

Best regards

Philippe