Problem connecting from within multiple firewalls to outside

[Guest]

Here's my setup, I live out in the middle of nowhere and I finally have broadband but it's through a wireless mesh network connection. I'm having problems connecting from within my network to outside of it. Here's a diagram:

(ME 192.168.0.147) ---> (MY Router 192.168.0.1) ---> (Router provided by ISP for the Mesh Network 192.168.1.1) ---> (a static IP 230.a.b.c) ---> (INTERNET) ---> (My inlaws computer with an IP of w.x.y.z)

What ports do I need opened for outbound connections? Is it the same 5900 and 5800? Shouldn't I be able to use the java viewer no matter what ports are opened on my end to access their computer if I type w.x.y.z:5800 in a browser? Sorry I really have looked through the forums for an answer to this problem, and I see a million setups the other way around but nobody seems to have this problem. Maybe this issue is self-inflicted.

[mortenchristensen]

Here's my setup, I live out in the middle of nowhere and I finally have broadband but it's through a wireless mesh network connection. I'm having problems connecting from within my network to outside of it. Here's a diagram:

(ME 192.168.0.147) ---> (MY Router 192.168.0.1) ---> (Router provided by ISP for the Mesh Network 192.168.1.1) ---> (a static IP 230.a.b.c) ---> (INTERNET) ---> (My inlaws computer with an IP of w.x.y.z)

What ports do I need opened for outbound connections? Is it the same 5900 and 5800? Shouldn't I be able to use the java viewer no matter what ports are opened on my end to access their computer if I type w.x.y.z:5800 in a browser? Sorry I really have looked through the forums for an answer to this problem, and I see a million setups the other way around but nobody seems to have this problem. Maybe this issue is self-inflicted.

It ought to make no difference, if you are on a public ip-adress, behind 1 router or behind 2 routers.

It depends on, which port your inlaw's vncserver is listening on (the default is 5900 and 5800 for java-connection). Does he have a firewall, blocking that incoming port, or is there a firewall somewhere on your way out on the public net, that is blocking outgoing connections on that port.

[ipsec]

in addition to what morten is saying..

Does your inlaws have a router on their end like you have locally? If the answer = Yes then Set up port forwarding on their end, If the answer =no then check firewalls. TURN THEM OFF FOR TESTING ONLY!!!!! turn them back on if it fails or succeeds.. this way you can figure out that it is or isnt the firewall.

Its okay to test with them down.. just dont keep them down if that is their only line of defense from the internet.

To answer your origonal question -
Normally you dont have to open ports up to the internet - if you a computer and it requests a port from a specific IP address to be connected - by default that local router and computer opens that port since it is initiated from a "Trusted" host. However if the second router is more of a proxy rather than a router - it may be blocking the port you are trying to initiate.

Good rule of testing - if you dont know if its opening up properly - port forward the port to your local computer and do a port scan from the internet to see if your port is actually open or not.