Celebrating the 22th anniversary of the UltraVNC: https://forum.uvnc.com/viewtopic.php?t=38031
Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: https://forum.uvnc.com/viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: https://forum.uvnc.com/viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Bluesky/AT Protocol: https://bsky.app/profile/ultravnc.bsky.social
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://x.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

NAT2NAT port

Post Reply
vpereyra
8
8
Posts: 8
Joined: 2004-12-23 19:44
Contact:

NAT2NAT port

Post by vpereyra »

Hi, i'm using NAT2NAT, which port does it use?, can i change it?

thanks
ipsec
Former moderator
Former moderator
Posts: 565
Joined: 2004-09-20 18:56
Contact:

Post by ipsec »

NAT2NAT require that outgoing ports are not blocked.
Corperate firewalls usual block most ports and even check
content on allowed ports.
Even standard window firewalls require manual
ack to let an application making an outgoing connection.

NAT2NAT only work when you can run multi-player games on that PC....if that fail, NAT2NAT also will not work.


this was from the thread - [topic=1622][/topic]

So basically you have to have no firewall blocking OUTGOING connections...
vpereyra
8
8
Posts: 8
Joined: 2004-12-23 19:44
Contact:

Post by vpereyra »

je , i see my instructions where hardly translated. :-D

so, is there any specific port where nat2nat sends the signal?
ipsec
Former moderator
Former moderator
Posts: 565
Joined: 2004-09-20 18:56
Contact:

Post by ipsec »

vpereyra wrote:je , i see my instructions where hardly translated. :-D

so, is there any specific port where nat2nat sends the signal?
run netstat -a when you start the program

you will see its pretty random.. at least it was for me.

and as far as changing a program without being able to get to the source.. im sure you could?? but it may not work with the NH.

Didnt mean to ignore your first question but I eluded to what I thought was going to be the second...
Last edited by ipsec on 2005-03-05 04:31, edited 2 times in total.
User avatar
Rudi De Vos
Admin & Developer
Admin & Developer
Posts: 6883
Joined: 2004-04-23 10:21
Contact:

Post by Rudi De Vos »

The nsc and ncv connect to www.uvnc.com using udp port 8195 (outgoing)

8195 is the internal port and get translated by the nat

Nat port is random
nsc (8195) is mapped by the router in (87565)
nvc (8195) is mapped by the router in (13765)
After initiation
nsc make a connection to port 13765 ip (nat router) who forward it to 8195 nvc
nvc make a connection to port 87565 ip (nat router) who forward it to 8195 nsv
vpereyra
8
8
Posts: 8
Joined: 2004-12-23 19:44
Contact:

is it posibble?

Post by vpereyra »

hi, thanks for the explanation, is there any way to change the nvc outgoing port (8195)?

thanks
jschilli

Re: is it posibble?

Post by jschilli »

vpereyra wrote:is there any way to change the nvc outgoing port (8195)?
I made some tests and saw about 5 or 7 different ports while opening and running a nat2nat connection. Cause many company firewalls close almost all outgoing ports, it would be very helpful, if there would be a sort of config file for configuration of all necessary ports of a nat2nat connection. A user could then configure the open firewall ports to use for ultravnc. Is there anything planned like that?
ipsec
Former moderator
Former moderator
Posts: 565
Joined: 2004-09-20 18:56
Contact:

Re: is it posibble?

Post by ipsec »

jschilli wrote: I made some tests and saw about 5 or 7 different ports while opening and running a nat2nat connection.
This is what I saw when doing a few test..

I asked this somewhere else and I think the response to anything behind any type of hardware firewall for corporate will not work and no plans to develop as of yet something that will work behind this type of firewall..

i could be wrong.
User avatar
Rudi De Vos
Admin & Developer
Admin & Developer
Posts: 6883
Joined: 2004-04-23 10:21
Contact:

Post by Rudi De Vos »

1 port is fixed, the udp port to the NH server.
But in faze 2 you need to connect to the NAT router of the
other party.

Nat routers just use random external ports to map a fixed internal port.

It is not possible with this approach. 1 outgoing port
would require that all data need to pass the NH.
NH need to handle double(in/out) bandwidth, and monthly traffic would be huge.

With the current approach we only need to handle the connection pings , vnc data is between server and viewer, NH is not involved
after connection has been initiated.
Guest

Post by Guest »

Rudi De Vos wrote:1 port is fixed, the udp port to the NH server.
But in faze 2 you need to connect to the NAT router of the
other party.
You are right, it was my misteake. The ports depend on the random NAT port of the other sides router. Unfortunately I don't know a solution for that problem. :-]
Post Reply