[iodine-users] Unable to Connect - Can't Login to Server

[Victor Hooi]

heya,

Hmm, well, I've noticed I can connect to it from a DMZ box.

I suspect it's something to do with my firewall setup. May have to ask our
nets guys.

Is it normal to have DNS delegation blocked?

I tried the troubleshooting command from the wiki (
http://dev.kryo.se/iodine/wiki/HowtoSetup), and the last part doesn't seem
to be able to query the remote server. I.e.:

dig @ns1.everydns.net -t NS tunnel.mydomain.com

; <<>> DiG 9.7.0-P1 <<>> @ns1.everydns.net -t NS tunnelmydomain.com
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

What could this mean? I read about something called "split DNS" Ty Miller's
paper at BlackHat 08 (
http://www.blackhat.com/presentations/bh-usa-08/Miller/BH_US_08_Ty_Miller_Reverse_DNS_Tunneling_Shellcode.pdf),
could that be what is happening here? Any way to find out definitively?

Cheers,
Victor

2010/8/18 Tomasz Chmielewski <mangoo at wpkg.org>

> On 17.08.2010 16:27, Victor Hooi wrote:
>
>     Error: Make sure iodined is running and the firewall accepts UDP
>>    port 53. Also check any port forwards in use.
>>
>
> And this is a good suggestion.
>
> Try to see with tcpdump on your server if any packets actually get to it.
>
>
> --
> Tomasz Chmielewski
> http://wpkg.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wpkg.org/pipermail/iodine-users/attachments/20100820/c3b5fb57/attachment-0003.html>