Connections thru Firewalls

[SeT]

Please forgive me if I'm acting an idiot here, but I just want to ask a few kwershuns...

I'm looking for something that will allow me to remotely admin client pcs/servers which happen to be behind firewalls. I will be connecting from a variety of locations, sometimes from behind a firewall, sometimes not. I also need to be able to connect without confirmation from the target computer (i.e. after hours, etc).

I've used VNC in the past, as well as Radmin and several other prgs. Most, though require opening/mapping of ports on either end of the connection.

I've seen some commercial packages that use email as a means of triggering an outbound connection from the server side. I don't know if this is possible w/ UltraVNC/Repeater or not (or whether it's the better way of accomplishing what I need to do).

SO, considering that YOU have probably diddled with UVNC more that myself, what do YOU think?

tia.

[Guest]

U can! Even when the controlled side is behind the firewall and you cant touch the gateway's settings to make portmapping.


A(Controller)--------->Gateway---------->B(Controlled)

First

In the A side:
1) go to the ultravnc dir.
2) run "vncviewer -listen 5900"

Second

In the B side:
1) run ultravnc server
2) add new client,type A's ip

I think as long as B can go to internet, u can use this way. If company admin only permit to access port 80, to overcome just set the A to listen port 80(first kill other app using port 80 if have),the B add new client A'sIP::80

[RobH]

Yes the above should work, but I think he wants to access B without anyone being there. Correct?

[cerb]

Sorry I don't see the problem. I do it all the time with UVNC.
Just run Zebedee (a tunnelling program that will pass trough your firewall) as a service.

Then when you want to call the remote connection you pass it trough the zedebee UVNC configuration file (there is also a ready-to-go example file for vnc in the zedebee distribution).

When you want to connect from other locations with no firewall, then you simply call the normal vncviewer

[Guest]

That's true but he never mentions running the zebedee tunnel.

[layrebayre]

Cerb, which version of zebedee are you recommending?

[RobH]

I would think you would want to run the newest version.
Search Zebedee and you'll get the main homepage.

[sgp]

I have a slightly different configuration but the same type of problem. Can zebedee help here?

I want to remotely PC A that sits behind a NAT/firewall. Event though PC A has its own unique IP, that's only true from the inside side of the NAT. When PC A is seen outside the NAT, it's given an "external" IP which is shared by a number of other PCs.
vnc viewer is on PC B, outside the NAT and with its own unique IP.

A(internal IP)<--->NAT<--->B(vncviewer)

[Leonard]

You either need to have the client connect to you or you need to map he port to forward the connection atempt to the client.

There are several names for this DNAT (Destination port Network Translation) In Linux speak I beleive.

[RobH]

I have a slightly different configuration but the same type of problem. Can zebedee help here?

I want to remotely PC A that sits behind a NAT/firewall. Event though PC A has its own unique IP, that's only true from the inside side of the NAT. When PC A is seen outside the NAT, it's given an "external" IP which is shared by a number of other PCs.
vnc viewer is on PC B, outside the NAT and with its own unique IP.

A(internal IP)<--->NAT<--->B(vncviewer)

sOMEONE FROM THE SERVER MACHINE SHOULD RIGHT CLICK ON THE ICON IN THE TRAY AND SELECT ADD NEW CLIENT, ENTER YOUR IP OR DNS NAME.
YOU HAVE THE VIEWER WAITING IN LISTEN MODE.
YOU NUST HAVE PORT 5500 FORWARDED TO YOUR IP FOR IT TO WORK.
THE SERVER BEING BEHIND NAT DOESN'T MATTER UNLESS THEY ARE BLOCKING OUTBOUND TRAFFIC. NOT LIKELY THE CASE.