PCHW-SERVER setup for HTTPS-Proxy

[turnops]

Hi all,

maybe I'm getting something wrong, but I'm constantly failing to set up a PCHW configuration where server and viewer actually communicate via port 443 TCP (HTTPS).

The general network configuration is as outlined in the graphic below. The remote desktops (where PCHW server should run) do access the net via an HTTP/HTTPS-Proxy. No other outgoing ports are open.






When I configure the repeater, there is an option to use port 443 for both PCHW-Server AND PCHW-Viewer (and yes, port 443 is routed through the FW-NAT-Router to the machine running the repeater).





But when I try to generate a server that uses a HTTPS proxy with the server generation feature provided with PCHW viewer, I'm getting a connection string that uses the default port 5500. Apparently, there is no -sslproxy parameter with the PCHW server like it seems to exist with SSCIII.





Could anybody give me some hints how to set up PCHW server/repeater when the remote machine just has proxy HTTP(S) access to the net?

[redge]

disable UPnP automap, this the blocking bug.
as never worked for me and block a lot of users of pchelpware_viewer

[turnops]

Thanks for your hint.

Nevertheless, with the connection string given, the server tries to contact the repeater on port 5500 and NOT on port 443.

Should I just replace 5500 with 443?

[redge]

don't know, i never used proxy.
but only direct reverse connection.

[YY]

But when I try to generate a server that uses a HTTPS proxy with the server generation feature provided with PCHW viewer, I'm getting a connection string that uses the default port 5500. Apparently, there is no -sslproxy parameter with the PCHW server like it seems to exist with SSCIII.

The message you saw is normal. When there is the "-proxy" option in the helpdesk.txt, that mean the created server will try to make a connection via the https proxy.

When such a server is running, it will operate like this:
1. Lookup the registry, and retrieve the setting of the https proxy, and then try to connect to the repeater (using port 443) via the proxy server.
2. If the proxy setting is not found in registry, or somehow unable to reach the repeater via the proxy, it will try to switch back to normal method to connect to the repeater, and using the port you defined. (As shown in your diagram, the PcHelpWare uses the default port 5500)


Although not really can help you to build your setup, the thread [topic=9982]Proxy for viewer and server problem[/topic] has some info about what you will see when https proxy connection is working.