stunnel-users

3 participants
3308 discussions

Is anyone using Stunnel for tunnelling Voip?
by Errol Samuels 03 Jun '08

03 Jun '08

Hello All, I am currently researching a solution for tunnelling VoIP traffic since VoIP is blocked in the country concerned. It appears that the ISP is targeting OpenVPN and OpenSwan and blocking them so I want to try something different. My solution based on OpenVPN worked great until it got blocked by the ISP about a week ago. It was using an OpenVPN server hosted in a US Datacenter and the VPN clients were simply routers with third party Linux firmware with the OpenVPN client embedded in the firmware. I am also investigating the possibility of tunnelling OpenVPN through SSH but I have to watch my IP overheads here because the ISP watches the upload bandwidth as well! Has anyone attempted or had any success using stunnel for a similar scenario as I have mentioned? Thanks in Advance Regards, Errol

3 9

Can I put an accept+connect pair anywhere in the conf file?
by Ben Stover 02 Jun '08

02 Jun '08

The *.conf file is divided into several sections: [imaps] .... [pop3s] .... [smtps] ..... Are these "section headers" just comments and can I put my accept+connect pair on an arbitrary place in the *.conf file (as long as they are preceeded by their own section header [foobar] ? Ben

2 1

Connecting to mySQL from Windows
by Alistair Scott 02 Jun '08

02 Jun '08

Hi everyone I have a mySQL database that I need to connect to through SSH. I have successfully setup a connection to it using Plink. However, I'm running this from a batch file and I'd like a more elegant solution - that's where stunnel comes in I think. Rather than running a batch file, I'd like to run the connection as a Windows service - which I think this is achievable with stunnel. Trouble is, I can't work out how to do it. This is what I'm trying to achieve... Windows computer connects to mySQL server through SSH. Forwards a port to the mySQL server port 3306. Application on Windows computer connects to local forwarded port & therefore connects to the mySQL db at the remote end. I was hoping that someone could give me a pointer as to how I can set this up. Thanks in advance. Al

1 0

stunnel 4.25 released
by Michal Trojnara 01 Jun '08

01 Jun '08

Dear Users, Version 4.25, 2008.06.01, urgency: MEDIUM: * New features - Win32 DLLs for OpenSSL 0.9.8h. * Bugfixes - Spawning libwrap processes delayed until privileges are dropped. - Compilation fix for systems without struct msghdr.msg_control. Home page/download: http://stunnel.mirt.net/ sha1sum for stunnel-4.24.tar.gz file: fc6d61fad996f750c76ea627c5dd9f789af0eaf6 Best regards, Mike

1 0

Re: [stunnel-users] stunnel compatibility question
by Brian Hatch 30 May '08

30 May '08

Right around 2008-05-30 13:51 -0400, Patel Dippen-CDP054 suggested: > Is the true? I have a similar issue. I have never implemented SSL or > Stunnel. But, on whatever readup I have done so far, it seems Stunnel is > a tunneling protocol (IPnIP). So, you do have to have Stunnel on the > other end to extract the IP packet. Stunnel puts data inside SSL, inside TCP. Just like HTTPS is HTTP (data) inside SSL, inside TCP. You can think of the cleartext data inside the SSL tunnel for both of those examples. Yes, the data needs to be extracted from the SSL stream in both cases, but the application that gets it doesn't need to know diddly about it. > I mean if you are saying it will work, that's great news for me. It works if Stunnel is on one side and an SSL client or server is on the other side. > Our Server will have OpenSSL implementation but we plan to deploy > Stunnel on the Client machine. That's what Stunnel is for. -- Brian Hatch "Sorry, sorry, Systems and sorry, much apologizings." Security Engineer http://www.ifokr.org/bri/ Every message PGP signed

1 0

Need class name for stunnel
by Bill Murphy 28 May '08

28 May '08

I'm using stunnel to send and receive emails in a Microsoft Access 2007 application. I would like to be able to programmatically close stunnel when the user exits a form in the application which is used for sending and receiving emails. I can close other programs running in Windows with the code in this api: http://www.mvps.org/access/api/api0025.htm This code requires the "class name" of the application while it is running in Windows in order to close it. Stunnel.exe does not appear to have a class name. I've used the following additional api to display the class names of all currently running apps: http://www.mvps.org/access/api/api0013.htm Stunnel.exe does not show up in the list of running apps produced by this code. Is there another way to determine the stunnel class name? Bill

1 0

Re: [stunnel-users] Problem with Stunnel and OpenBSD
by Juan J. Martínez 23 May '08

23 May '08

Hello, I'm debugging with openssl s_client... >From inside the box: $ openssl s_client -connect blackshell.usebox.net:995 CONNECTED(00000004) depth=0 /C=ES/ST=Valencia/L=Valencia/O=usebox.net/OU=blackshell/CN=blackshell.usebox.net verify error:num=18:self signed certificate verify return:1 depth=0 /C=ES/ST=Valencia/L=Valencia/O=usebox.net/OU=blackshell/CN=blackshell.usebox.net verify return:1 ... And works fine. >From outside: $ openssl s_client -connect blackshell.usebox.net:995 CONNECTED(00000003) (and halts for n minutes) I hope this helps, even I don't know the difference between "CONNECTED(00...4)" and "CONNECTED(00...3)". Regards, Juanjo -- desarrollo y sistemas: http://www.usebox.net/ página personal: http://www.usebox.net/jjm/

1 1

STUNNEL: Thunderbird with Exchange and only inbound port 443
by Fatma 23 May '08

23 May '08

Hello All, A quick question regarding the stunnel ability to work with the following scenario. Scenario is: I have an Exchange Server sitting on the external perimeter with Outlook Web Access (OWA) enabled and it is the frontend and backend mail server as well. And I have a remote client which has a Thunderbird Client (for example) that I need it to connect to the Exchange Server to retrieve emails. The only inbound port to the Exchange Server from a network perspective is HTTPS-443 and no other ports are open on the firewall. Now the question is how can a client thunderbird connect to the Exchange Server/OWA with only 443 port open. So what i was thinking is and tell me if this works? If i install two instances of STUNNEL one on the remote client and one on the exchange server and the following happens. on the client the stunnel listens on port 25 SMTP and encrypts and forwards to port 443 then the server recieves and listens on port 443 and decrypts and forwards to port 110 POP3 will that work actually? hmmm i wish i explained that pretty well. if not then how can it work with the given scenario. cheerz.

1 0

Re: [stunnel-users] Wrapping a mail client - multiple servers
by Ludolf Holzheid 21 May '08

21 May '08

On Wed, 2008-05-21 14:39:42 +0100, Daniel James wrote: > [..] > > Can I, for example, put multiple [SSMTP] sections and multiple [POP3S] > sections in one stunnel.conf? I don't know. But if you can, you don't want to. The section headers don't specify a protocol. They simply give the section a name (for log output, e.g.). There is no problem in naming sections [first-POP3S] and [second-POP3S]. HTH, Ludolf -- --------------------------------------------------------------- Ludolf Holzheid Tel: +49 621 339960 Bihl+Wiedemann GmbH Fax: +49 621 3392239 Floßwörthstraße 41 e-mail: lholzheid(a)bihl-wiedemann.de D-68199 Mannheim, Germany ---------------------------------------------------------------

1 0

Wrapping a mail client - multiple servers
by Daniel James 21 May '08

21 May '08

I use a mail client that does not directly support SSL. I can use stunnel to provide the security layer when I connect to a SSMTP and/or POP3S server (under windows). This works fine, whether I run stunnel as a background application or as a Windows service. I'd like, however, to be able to connect to multiple mail servers over SSL. I'm not sure how I might achieve this? What would be nice would be get stunnel to forward POP3/SMTP communication on different local ports to POP3S/SSMTP on different remote servers. Can I do this? It appears to be possible to run multiple copies of stunnel as applications, and to get each copy to take its configuration from a different stunnel.conf file, so that different copies of stunnel could listen on different local ports and each could proxy the traffic it receives to a different remote server (I haven't tried this -- and it's not an ideal solution -- but it looks as though it should work). It does not appear to be possible, however, to create two instances of the stunnel service running with different configuration files. Is it possible to set up multiple listening ports proxying to different remote servers in a single configuration file? If so, what's the syntax for that? Cheers, Daniel.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

stunnel-users