stunnel-users

2 participants
3307 discussions

using stunnel for smb networking
by David Bear 28 Dec '04

28 Dec '04

out of curiousity, has anyone been able to use stunnel as a cheap vpn for smb/cifs windows networks? We have a stupid firewall policy that blocks ALL port 139 traffic. Yes, thats good most of the time since microsoft rpc's are notoriously insecure. It does cause a problem when we have other units at other universities with different firewall policies however, so I was hoping to go around the different bureacracies and tunnel it myself. just curious. -- David Bear phone: 480-965-8257 fax: 480-965-9189 College of Public Programs/ASU Wilson Hall 232 Tempe, AZ 85287-0803 "Beware the IP portfolio, everyone will be suspect of trespassing"

1 0

Re: [stunnel-announce] Problem with stunnel 4.06 on FreeBSD andpossibly other systems
by Michal Trojnara 28 Dec '04

28 Dec '04

Jay W. Reffner wrote: > Could you explain the problem on FreeBSD? > Do you think the problems exists in OpenBSD as well? poll() call uses a negative parameter value to indicate an infinite timeout. On some systems (like Linux) any negative value is accepted, while some other systems (like FreeBSD or HP-UX) require -1 here. On affected systems stunnel starts an infinite loop and does not accept any connections. I'm not sure if OpenBSD is affected. Best regards, Mike

1 0

Re: [stunnel-announce] Problem with stunnel 4.06 on FreeBSD andpossibly other systems
by Michal Trojnara 28 Dec '04

28 Dec '04

1 0

Re: Gmail / Eudora / SpamPal and Stunnel
by Sebastien WILLEMIJNS 28 Dec '04

28 Dec '04

(i copy message i have send via google groups) > I am running Eudora 6.2.0.14, Stunnel-4.04, SpamPal 1,583 maybe try latest build ? > Gmail REQUIRES SSL > A connection to my university email will not SEND over IMAP as you, i cannot send to gmail servers he stops now at (i have used "protocol = smtp" in options) 2004.12.23 23:24:05 LOG7[16629555:16525099]: waitforsocket: FD=124, DIR=read 2004.12.23 23:24:05 LOG7[16629555:16525099]: waitforsocket: ok 2004.12.23 23:24:05 LOG7[16629555:16525099]: <- 220 2.0.0 Ready to start TLS. 2004.12.23 23:24:05 LOG5[16629555:16525099]: Protocol negotiation succeded 2004.12.23 23:24:05 LOG7[16629555:16525099]: SSL state (connect): before/connect initialization 2004.12.23 23:24:05 LOG7[16629555:16525099]: SSL state (connect): SSLv3 write client hello A 2004.12.23 23:24:05 LOG7[16629555:16525099]: waitforsocket: FD=124, DIR=read 2004.12.23 23:24:06 LOG7[16629555:16525099]: waitforsocket: ok 2004.12.23 23:24:06 LOG7[16629555:16525099]: SSL state (connect): SSLv3 read server hello A 2004.12.23 23:24:06 LOG7[16629555:16525099]: SSL state (connect): SSLv3 read server certificate A 2004.12.23 23:24:06 LOG7[16629555:16525099]: SSL state (connect): SSLv3 read server done A 2004.12.23 23:24:06 LOG7[16629555:16525099]: SSL state (connect): SSLv3 write client key exchange A 2004.12.23 23:24:06 LOG7[16629555:16525099]: SSL state (connect): SSLv3 write change cipher spec A 2004.12.23 23:24:06 LOG7[16629555:16525099]: SSL state (connect): SSLv3 write finished A 2004.12.23 23:24:06 LOG7[16629555:16525099]: SSL state (connect): SSLv3 flush data 2004.12.23 23:24:06 LOG7[16629555:16525099]: waitforsocket: FD=124, DIR=read 2004.12.23 23:24:06 LOG7[16629555:16525099]: waitforsocket: ok 2004.12.23 23:24:06 LOG7[16629555:16525099]: SSL state (connect): SSLv3 read finished A 2004.12.23 23:24:06 LOG7[16629555:16525099]: 1 items in the session cache 2004.12.23 23:24:06 LOG7[16629555:16525099]: 1 client connects (SSL_connect()) 2004.12.23 23:24:06 LOG7[16629555:16525099]: 1 client connects that finished 2004.12.23 23:24:06 LOG7[16629555:16525099]: 0 client renegotiatations requested 2004.12.23 23:24:06 LOG7[16629555:16525099]: 0 server connects (SSL_accept()) 2004.12.23 23:24:06 LOG7[16629555:16525099]: 0 server connects that finished 2004.12.23 23:24:06 LOG7[16629555:16525099]: 0 server renegotiatiations requested 2004.12.23 23:24:06 LOG7[16629555:16525099]: 0 session cache hits 2004.12.23 23:24:06 LOG7[16629555:16525099]: 0 session cache misses 2004.12.23 23:24:06 LOG7[16629555:16525099]: 0 session cache timeouts 2004.12.23 23:24:06 LOG6[16629555:16525099]: Negotiated ciphers: DES-CBC3-SHA SSLv3 Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1 else for mail.vfemail.net:465 /mail.gmx.net:465 without "protocol = smtp" it works well... > Yes I know Spampal and Gmail is "belt and braces" but I have a challenge > here!!!! > Justified "give up you can't" would be equally appreciated so i do... only for gmail...

1 0

ERROR: stunnel-4.06.exe file is linked to missing export ...
by Sebastien WILLEMIJNS 28 Dec '04

28 Dec '04

> When I try to start and test stunnel-4.06 on Windows ME, I get the > following error message: > The STUNNEL-4.06.EXE file is linked to missing export > WS2_32.DLL:freeaddinfo Same thing on Win98SE :X

1 0

stunnel 4.06 problems with service on XP
by Mat Leinmueller 28 Dec '04

28 Dec '04

Hi, I tried to upgrade an existing 4.04 stunnel service to 4.06 (uninstalled service, reinstalled with new version). The service gets registered correctly, when I try to start it, however, it seems not to find the stunnel.conf file. After downgrading to 4.04 everything works again. Any suggestions? Mat

2 1

Error when executing stunnel 4.06 Windows binaries as service
by Liron Newman 28 Dec '04

28 Dec '04

Hello, I'm trying to run the offical stunnel 4.06 Win32 binaries from stunnel.org as a service, but I get the following error: "The procedure entry point freeaddrinfo could not be located in the dynamic link library WS2_32.DLL" I looked it up a bit and it seems to have something to do with IPv6, but I don't use it.. stunnel 4.05 works fine as a service, and worked without a problem for months now. I'm using Win2k SP4 fully patched. Help? :)

2 1

Problem with stunnel 4.06 on FreeBSD and possibly other systems
by Michal Trojnara 28 Dec '04

28 Dec '04

Dear Users, Frank de Bot has found a bug in stunnel 4.06. I've attached the patch stunnel needs to work on FreeBSD (and possibly other) systems. It's not needed on Linux and WIN32 platforms. Best regards, Mike

2 1

ERROR: stunnel-4.06.exe file is linked to missing export ...
by Mike_Stunnel 26 Dec '04

26 Dec '04

When I try to start and test stunnel-4.06 on Windows ME, I get the following error message: The STUNNEL-4.06.EXE file is linked to missing export WS2_32.DLL:freeaddinfo Stunnel-4.05 runs fine and I have OpenSSL 0.9.7e How do I resolve this? Thanks, mz

1 0

Stunnel 4.06 released
by Michal Trojnara 25 Dec '04

25 Dec '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Here is the ChangeLog entry: Version 4.06, 2004.12.26, urgency: LOW: * New feature sponsored by SURFnet http://www.surfnet.nl/ - IPv6 support (to be enabled with ./configure --enable-ipv6). * New features - poll() support - no more FD_SETSIZE limit! - Multiple connect=host:port options are allowed in a single service section. Remote hosts are connected using round-robin algorithm. This feature is not compatible with delayed resolver. - New 'compression' option to enable compression. To use zlib algorithm you have to enable it when building OpenSSL library. - New 'engine' option to select a hardware engine. - New 'TIMEOUTconnect' option with 10 seconds default added. - stunnel3 perl script to emulate version 3.x command line options. - French manual updated by Bernard Choppy <choppy AT free POINT fr>. - A watchdog to detect transfer() infinite loops added. - Configuration file comment character changed from '#' to ';'. '#' will still be recognized to keep compatibility. - MT-safe getaddrinfo() and getnameinfo() are used where available to get better performance on resolver calls. - Automake upgraded from 1.4-p4 to 1.7.9. * Bugfixes - log() changed to s_log() to avoid conflicts on some systems. - Common CRIT_INET critical section introduced instead of separate CRIT_NTOA and CRIT_RESOLVER to avoid potential problems with libwrap (TCP Wrappers) library. - CreateThread() finally replaced with _beginthread() on Win32. - make install creates $(localstatedir)/stunnel. $(localstatedir)/stunnel/dev/zero is also created on Solaris. - Race condition with client session cache fixed. - Other minor bugfixes. * Release notes - Win32 port requires Winsock2 to work. Some Win95 systems may need a free update from Microsoft. http://www.microsoft.com/windows95/downloads/ - Default is *not* to use IPv6 '::' for accept and '::1' for connect. For example to accept pop3s on IPv6 you could use: 'accept = :::995'. I hope the new syntax is clear enough. Homepage: http://stunnel.mirt.net/ Download: ftp://stunnel.mirt.net/stunnel/ Best regards, Mike -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFBzf1b/NU+nXTHMtERAtUVAKD+41kLTFS/qrOleskfH1MZEkYr2ACfcJPZ 4QQk085XimnyplqENZaT7nk= =zIM2 -----END PGP SIGNATURE-----

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

stunnel-users