New Beta SC will be available in a few days..

[Rudi De Vos]

Just need 1 or 2 persons that can do some test
PC--NAT <<---->>NAT-PC
-----------------------------------------------------------------

New UltraVnc SingleClick SC-VNC has been renamed to PcHelpWare.
It was the only significant name we found that still had a free .com
domain.

PcHelpWare or Ultra PHW is the combination of the older SC and Nat2Nat
software. The goal is the same as with the SC version, create a tool
that can easy give Remote Desktop Support to a distant PC. The difference with GotoMyPC, PcAnywhere and LogMeIn is that we don't need to proxy the traffic in 90% of the cases.

PHW use a nat punching technique that works with most nat routers.

UDP hole punching
-----------------
NAT traversal through UDP hole punching is a method for establishing bidirectional UDP connections between Internet hosts in private networks using NAT. It does not work with all type of NATs as their behavior is not standardized.

The basic idea is to have each host behind the NAT contact a third well-known server (www.uvnc.com) in the public address space and then, once the NAT devices have established UDP state information, to switch to direct communication hoping that the NAT devices will keep the states despite the fact that packets are coming from a different host.

In order to work this technique requires a full cone NAT device. It will not work across a symmetric NAT.

Different NAT routers
-----------------
With full cone NAT, also known as one-to-one NAT, all requests from the same internal IP address and port are mapped to the same external IP address and port. An external host can send a packet to the internal host, by sending a packet to the mapped external address.

With restricted cone NAT, all requests from the same internal IP address and port are mapped to the same external IP address and port. Unlike a full cone NAT, an external host can send a packet to the internal host only if the internal host had previously sent a packet to it.

With symmetric NAT all requests from the same internal IP address and port to a specific destination IP address and port are mapped to a unique external source IP address and port. If the same internal host sends a packet with the same source address and port to a different destination, a different mapping is used. Only an external host that receives a packet can send a UDP packet back to the internal host.
-----------------

PHW support full cone NAT and restricted cone NAT, a symmetric NAT can only be used
when the other site has a full cone NAT. Symmetric to symmetric NAT routers does not work for PHW.


PcHelpWare is a single exe. Viewer and Server application has been integrated in a single application that allow you to view or share a desktop. You can not share and view at the same time.

PcHelpWare connection is based on friend states. Only friends can view or share a desktop. You can compare it with the google talk connection engine. A central server keep track of the logged users and there friends. The status is shown in the application "friend window" as color state (red/green/yellow), once you have a green friend, you can select the user and press the share button. PHW only allow connections that are initiated by the person that want to share his desktop. The other party receive a invitation box to accept or deny the connection. It don't work
as service, only application mode.

PcHelpWare only support remote desktop viewing, keyboard, clipboard sync (including pictures and Rich text format) and Filetransfer. The buildin encryption use DH key-exchanche.


Licening
--------
PcHelpWare Beta is released as Freeware, don't ask for the sourcecode as it will not be released.
How can you release PHW as Freeware while UltraVnc is GPL ?
PHW is a complete rewrite, no rfb protocol and no backward compatiblity with vnc. All new, but a lot of code was extracted from an other commercial project, so bugs should be minimal.

Major differences
-------------
-Encoders are made with INtel IPP library
-Encryption is also provided via this lib
-The hookdll is based on MS accesibility API's
-Keyboard transfer has been changed to support unicode keyboards (German/Greek...), keycodes or not longer
translated to unix code.
-Clipboard does now also support other formats: bitmaps, metapics, rich text format (word), html
-Filetransfer (Will not work in the first Beta)
*Select a file/folder via ctr-alt-c
*paste remote via ctrl-v
To simplify the coding, we don't have a own Gui, it works like local copy/paste but with ctr-alt-c to copy. On ctrl-alt-c the local system create a in memory zipped copy of the files/folders, the data block
is then transferred to the remote system that temporal extract the data in %TEMP%PHW_temp. The clipboard
data on the local pc (this contain the files and subdirs) is send to the remote and the path is channged
to the temp dir. On ctr-v the files are copied from the tempdir to the final destination.
We only allow transfers up to 200MB, in memory(backend by paging) zip/extract would become to resource intensive for a 3GB.


Export
------
This distribution includes cryptographic software. The country in
which you currently reside may have restrictions on the import,
possession, use, and/or re-export to another country, of
encryption software. BEFORE using any encryption software, please
check your country's laws, regulations and policies concerning the
import, possession, or use, and re-export of encryption software, to
see if this is permitted.

The U.S. Government Department of Commerce, Bureau of Industry and
Security (BIS), has classified this software as Export Commodity
Control Number (ECCN) 5D002.C.1, which includes information security
software using or performing cryptographic functions with asymmetric
algorithms.

The following provides more details on the included cryptographic
software:
Intel IPP crypto lib (CCATS# G025801 ECCN 5D002)


Next step
---------
Support of proxy server (repeater). Server extern hosted repeaters should be able to announce themself with the "database service". In case direct connection fails, the service should be able to redirect server/viewer to connect using an external repeater.
Some managment code need to be added
-log data traffic repeater based on ID
-be able to set a max /month traffic a repeater support
-try to find the fastest repeater (ping) for the connection.
....
Support for http proxy transfer
...

[crazysim]

Will some of these improvements be carried over to UltraVNC SC?

[eo]

Rudy,

Ping me - we can help test. Thanks.

[Rudi De Vos]

Will changes go in SC ?

Current phw is a combination of nat2nat and viewer/server.
When repeater code is added, i will try to add a helpdesk.txt loader
so it act almost identical to current SCII

Importing viewer/server changes in SC is almost imposisble as both have a seperate base code.
-----------------------------BETA--BETA--------------------------
http://sc.uvnc.com/PcHelpWare.zip

How to test.
****
PC A
1) Create new account --> logon with blank user
sample testme



PC B
1) Create new account --> test2


****
On PC A login as testme and add "Manage friends" test2

On PC B login as test2 and add "Manage friends" testme
ONLY if testme has friend test2 AND test2 has friend testme
connections are allowed

When all is ok, the status of the friends is shown.


When the friends is greeen, you can select the friend and a connect button appears




*This beta does not have a Working Filetransfer, will be for a next update
*password is send to uvnc.com as md5 hash
*viewer/server use buildin 256bit encryption with 512 prime DH key exchange
***Never trust the viewer, all password that travers the net can be unhashed, or trust the data on uvnc.com. Verify that you are connecting
to the right person.

Forgot, you can only download it when you are not in an embarged country... encryption... happy testing

[crazysim]

I know that it is a different codebase, but how will this help the UltraVNC SC project? As in, the open sourced version?

[Rudi De Vos]

Sinds the release of SC (1 1/2 year), only one person have send me a bug fix. Opensource or not, i seems that i'm the only one working on it.
Perhaps, when other people also make updates for SC,i will release part of the new code. It has to be two ways....

[redge]

prerequesite?
time limit allowed for do all steps for both side ?
username and password lenght ?
special caracters allowed éèàäüö, etc...?


change password
should indicate the username at top for know wish password user account to change


Refresh
| <--- only this bar appear !
(at bottom appear Loaded list of friends)


Cancel
pchelpware delete all account created from the current session ?
What life duration of account/password if not delete ? 1h ; 1 day ; 1 week ; 1 month ?

Invitation received
Delay for answer ?
Invitation to view desktop from "username"
<Yes> button, desktop flashing and nothing ... except SCNAT 2.0.0 log off at both side



I think, you could add 2 buttons supporter and partner (some word like that what the best word for beginner ?)
so current user know what their need to do it at their side.



XP pro sp2 --> no firewall -- LAN -- NAT cayaman 3347WG -- Internet
XP Home sp2 --> no firewall -- unlimited EDGE -- NAT (no control) --- Internet

[Rudi De Vos]

user creation/passwd change/ friends are save on uvnc.com

Code: Select all

-----test2 record----
[user]
ID=6
passwd=AD0234829205B9033196BA818F7A872B
p1ID=5
p1name=testme
p2ID=0
p2name=
p3ID=0
p3name=
-----------------------

User and passwd last used are saved local (via ms crypto api)
Local, the real passwd is saved encrypted and md5 hash is used
to verify with the database.

time limit allowed for do all steps for both side ?

unlimited
But....relogin is needed after you make changed to the record.
The records on uvnc.com are saved on disk, while the active connection is runnning in memory. Changes to records are not auto updated in memory.
In other words, the account and friend relation creation is a one time
action. Once done, you never need to do it again..

username and password lenght ?

64
passwd is saved as md5 hash on uvnc.com

special caracters allowed éèàäüö, etc...?

not tested

should indicate the username at top for know wish password user account to change

You only can change the passwd for the user
you are current logged in. This option is only available after logon.

| <--- only this bar appear !

This indicate database
and memeory is not synced and relogon is needed.

CANCEL pchelpware delete all account created from the current session ?

it only close the application.

What life duration of account/password if not delete ? 1h ; 1 day ; 1 week ; 1 month ?

The app save the user/passwd local (last login). this is never erased
Uvnc.com has the account info in a file, never erased
Even after restart of uvnc.com, info is read back from files.
The application send a alive poll every 60sec, in case of a broken connection (not logout) it can take 60 seconds before the status is
changed on the server.

Invitation received
Delay for answer ?
Invitation to view desktop from "username"
<Yes> button, desktop flashing and nothing ... except SCNAT 2.0.0 log off at both side

That's the tricky part, the actual hole punching and connection happen there. The status line give some info, but hard to tell why it fails.

This build is the master app. When everything is working, a limited
version without account creation/change passd/manage friends is better
for fast support.

You create the accounts and friends relation in advanced. Send the limited version and that person only need to logon, wait green and connect.

[redge]

debug mode available for troubleshoot ?

[Rudi De Vos]

Forgot that one

What's the last thing you see as status

1 2 3 4 punch A 5 6 punch B 7 8

Do you see server icon after 8?

Don't work in a terminal session, still trying to findout way.

Colordepth=32 best performance and less data

Ports used
udp 8200(control) 8202(data transfer)
tcp 5950 5952 (loopback)

[redge]

Do you see server icon after 8?

No

notebook and static-pc are both 32bit colors depth

[redge]

tested funny connection SCNAT2.0.0

XP Home SP2 notebook over 56k modem (45.2kbit/s)
XP Pro SP2 desktop over ADSL 3500/300 kbit/s IP net
and inverse server-viewer both works

viewer forced readonly, not myself (not able to interact keyb+mouse)

Vdacc Systray appear to novice, client =required help
scserver windows appear to advisor, consultant =helper

2 minutes... and autoclosed, I think, inactivity of keyboard+mouse) and log off

[redge]

SCNAT 2.0.0 require d3d9.dll missing for DirectX 6.1 require DirectX 9.0
DirectX 9.0c is installed on Win98se, Login button had no effect.
status: SCNAT 2.0.0

[redge]

OS: Vista Ultimate RC1 build 5600 + XP SP2 Home
network: LAN + Netopia 3347WG ADSL 3500/300 <--> Unlimited EDGE PC-card

PCHelpWare just log off after connect and Yes for accept remote control/support
both ways fail

[rich2033]

I have found the following
1. when first starting there is a message ctrl+alt+n in the status bar
2. Pressing esc closes the program
3. after setting a user and password then when you try to login it works but if you log out and then try again you get a bad password message - if you then reinput the password it does login correctly
4. The reconnect needed to update friends list message is confusing - does it mean to exit the program and reconnect or to refresh - however if I logout or refresh then when I return there is only one name in the friends list.
5. when you refresh the friends list becomes the first and last letter of the friends name and a pipe | - log out (again) and log in and one is there and green - but then choose Connect and you get "Request Tunnell Connection" and then after while this message goes and nothing more....
6. I cannot add more friends only one.
Thanks
Richard

[redge]

you use old old beta, please use new beta available here
[topic=7747][/topic]
http://sc.uvnc.com/pchelpware5.zip