RE: [stunnel-users] stunnel connect success even if remote side do

This is a discussion on RE: [stunnel-users] stunnel connect success even if remote side do within the Stunnel Users forums, part of the Networking and Network Related category; This is a multi-part message in MIME format. --===============1952034531== Content-Type: multipart/alternative; boundary="----=_NextPart_000_0049_01C60BB8.775A4350" This ...

		Usenet Forums > Networking and Network Related > Stunnel Users
RE: [stunnel-users] stunnel connect success even if remote side do

LinkBack

Thread Tools

Search this Thread

Display Modes

#1 (permalink)

12-28-2005

Michal Trojnara

Posts: n/a

RE: [stunnel-users] stunnel connect success even if remote side do

This is a multi-part message in MIME format.

--===============1952034531==
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0049_01C60BB8.775A4350"

This is a multi-part message in MIME format.

------=_NextPart_000_0049_01C60BB8.775A4350
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit

There's no way to know with BSD sockets details of the connection to be
accepted (for access control) without actually accepting it.

Best regards,
Mike

_____

From: stunnel-users-bounces@mirt.net [mailto:stunnel-users-bounces@mirt.net]
On Behalf Of Nadav, Erez
Sent: Tuesday, December 27, 2005 3:29 PM
To: stunnel-users@mirt.net
Subject: [stunnel-users] stunnel connect success even if remote side do
notexist

i have a question:

I conbfigure the stunnel to work as tcp wrapper.
I configure stunnel for accept on 2003 and connect to 10.1.1.1:2003 (not
exist address).

I see that any TCP connect to 2003 always succeed.
I expect that the TCP connect will fail if the remote side connection
failed.

Is there a way to make it happen

Nadav Erez
R&D
Verint Systems Inc
Phone: +972+9-9624753
Cellular: +972-54-7784753
Email: Erez.Nadav@verint.com
Web: www.verint.com <http://www.verint.com/>

__________________________________________________ __________________________
______________
This electronic message contains information from Verint Systems, which may
be privileged and confidential.
The information is intended to be for the use of the individual(s)or entity
named above.
If you are not the intended recipient, be aware that any disclosure,
copying, distribution or use of the contents of this information is
prohibited.
If you have received this electronic message in error, please notify us by
replying to this email (1).

------=_NextPart_000_0049_01C60BB8.775A4350
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.2900.2802" name=3DGENERATOR></HEAD>
<BODY>
<DIV dir=3Dltr align=3Dleft><FONT face=3DArial color=3D#0000ff =
size=3D2><SPAN=20
class=3D734143512-28122005>There's no way to know with BSD =
sockets details of=20
the connection to be accepted (for access control) without actually =

accepting it.</SPAN></FONT></DIV>
<DIV dir=3Dltr align=3Dleft><FONT face=3DArial color=3D#0000ff =
size=3D2><SPAN=20
class=3D734143512-28122005></SPAN></FONT> </DIV>
<DIV dir=3Dltr align=3Dleft><FONT face=3DArial color=3D#0000ff =
size=3D2><SPAN=20
class=3D734143512-28122005>Best regards,</SPAN></FONT></DIV>
<DIV dir=3Dltr align=3Dleft><FONT face=3DArial color=3D#0000ff =
size=3D2><SPAN=20
class=3D734143512-28122005>    =
Mike</SPAN></FONT></DIV><BR>
<DIV class=3DOutlookMessageHeader lang=3Dpl dir=3Dltr align=3Dleft>
<HR tabIndex=3D-1>
<FONT face=3DTahoma size=3D2><B>From:</B> stunnel-users-bounces@mirt.net =

[mailto:stunnel-users-bounces@mirt.net] <B>On Behalf Of </B>Nadav,=20
Erez<BR><B>Sent:</B> Tuesday, December 27, 2005 3:29 PM<BR><B>To:</B>=20
stunnel-users@mirt.net<BR><B>Subject:</B> [stunnel-users] stunnel =
connect=20
success even if remote side do notexist<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D417091914-27122005>i have =
a=20
question:</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN=20
class=3D417091914-27122005></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D417091914-27122005>I =
conbfigure the=20
stunnel to work as tcp wrapper.</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D417091914-27122005>I =
configure stunnel=20
for accept on 2003 and connect to 10.1.1.1:2003 (not exist=20
address).</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN=20
class=3D417091914-27122005></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D417091914-27122005>I see =
that any TCP=20
connect to 2003 always succeed.</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D417091914-27122005>I =
expect that the=20
TCP connect will fail if the remote side connection =
failed.</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2><SPAN=20
class=3D417091914-27122005></SPAN></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2><SPAN class=3D417091914-27122005>Is =
there a way to=20
make it happen</SPAN></FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV dir=3Dltr align=3Dleft><STRONG><FONT face=3Dv size=3D2>Nadav=20
Erez</FONT></STRONG></DIV>
<DIV dir=3Dltr align=3Dleft><STRONG><FONT =
size=3D2>R&D</FONT></STRONG></DIV>
<DIV dir=3Dltr align=3Dleft><STRONG><FONT size=3D2>Verint Systems=20
Inc</FONT></STRONG></DIV>
<DIV dir=3Dltr align=3Dleft><STRONG><FONT size=3D2>Phone:=20
+972+9-9624753</FONT></STRONG></DIV>
<DIV dir=3Dltr align=3Dleft><STRONG><FONT size=3D2>Cellular:=20
+972-54-7784753</FONT></STRONG></DIV>
<DIV dir=3Dltr align=3Dleft><STRONG><FONT size=3D2>Email: <A=20
href=3D"mailto:Erez.Nadav@verint.com">Erez.Nadav@v erint.com</A></FONT></S=
TRONG></DIV>
<DIV dir=3Dltr align=3Dleft><STRONG><FONT size=3D2>Web: <A=20
href=3D"http://www.verint.com/">www.verint.com</A></FONT></STRONG></DIV>
<DIV> </DIV>
<TABLE>
<TBODY>
<TR>
<TD bgColor=3D#ffffff><FONT=20
=
color=3D#000000>__________________________________ _______________________=
_________________________________<BR>This=20
electronic message contains information from Verint Systems, which =
may be=20
privileged and confidential. <BR>The information is intended to be =
for the=20
use of the individual(s)or entity named above. <BR>If you are not =
the=20
intended recipient, be aware that any disclosure, copying, =
distribution or=20
use of the contents of this information is prohibited. <BR>If you =
have=20
received this electronic message in error, please notify us by =
replying to=20
this email =
(1).<BR><BR></FONT></TD></TR></TBODY></TABLE></BODY></HTML>

------=_NextPart_000_0049_01C60BB8.775A4350--

--===============1952034531==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
stunnel-users mailing list
stunnel-users@mirt.net
http://stunnel.mirt.net/mailman/listinfo/stunnel-users

--===============1952034531==--

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are Off [IMG] code is Off HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

All times are GMT +1. The time now is 07:47 PM.