DMZ Attempt

[waynrayn]

Hi Folks:

I'm trying to help a friend who is behind a wireless router. I'm also behind a wireless router.

The solution seems to be to have the friend, as a Server, send me a request to access their computer using "Add Client." This should come through their wireless router with no adjustments at their end.

So if I can adjust the router settings at my end, the request should come through. I tried port forwarding, no go. I've now put my laptop in the DMZ, with a static address.

This has been successful as far as my browser and email working. But when the friend tries to add me as a client, no go.

I know my router's address by using IP chicken. I know my static address behind the router. I have the Viewer in in listening mode, at port 5500.

But when I try the router addess with the extension ":5500" it still doesn't work, even in the DMZ.

Any suggestions? Any idea what I might be doing wrong?

Thanks,

Wayne

[B]

First, from your DMZd viewer PC, try a port scan at ShieldsUp at http://grc.com .

See if port 5500 is really open to the world.

If your router has any additional "firewalling", traffic shaping, Stateful Packet Inspection (SPI), or "VoIP" features, turn them off (none of them are necessary for security).

And put that machine back to normal (non-DMZd) as soon as you can.

Also, eliminate local software firewalling issues -- try to do a test to that listening viewer from another machine on the SAME local network from a similar "Add Client" WINVNC server....

[waynrayn]

Hi B:

I tested my ports, and found that 5500 is showing as "Stealth." Not quite sure what that means, as opposed to Open or Closed?

Also, there are no additonal settings in my wireless router (a D-Link WBR-1310), such as SPI, VOIP, or traffic shaping, that I can see.

I'll try to be back to this post within the day, but I'll have to go to work now.

Thanks,

Wayne

[B]

"Stealth", in their vernacular, means that the port doesn't seem to exist -- it didn't respond at all.

This is arguably good for a security-minded person, but completely <b>wrong</b> for what you're doing. Your supposed DMZ setting is <b>not</b> working.

Or your PC has an overly aggressive software firewall.

Or you're not really listening on port 5500 after all. Please see my suggestion for a test above.

You could also (a) do a netstat -an on your machine to make sure it's really got port 5500 open and/or (b) telnet to yourself on port 5500 to see if you get a response and/or (c) run a winvnc server on your machine and try to Add Client to yourself (you'll have to enable loopback).

[waynrayn]

Hi B:

Thanks again for your suggestions.

I'm going to borrow another laptop, and test UltraVNC both in and out of my network.

If I cannot connect inside my network, then it's a firewall issue. If I can, then it's a router issue.

I'll be back...

Thanks,

Wayne