Topic: pcAnywhere and e-smith

[Gerald Jansen]

Has anyone used pcAnywhere, by Symantec, to go from one Windows workstation behind an e-smith server to control a pcAnywhere host setup on another Windows/NT Workstation setup behind another e-smith server. Both servers have a dedicated highspeed connection and static ip.

[Darrell May]

Gerald Jansen wrote:
>
> Has anyone used pcAnywhere, by Symantec, to go from one
> Windows workstation behind an e-smith server to control a
> pcAnywhere host setup on another Windows/NT Workstation setup
> behind another e-smith server. Both servers have a dedicated
> highspeed connection and static ip.

Can't be done without getting very messy.  Here are some basics to consider:

pcAnywhere v7.51 and below use ip ports 65301 and 22.
pcAnywhere v7.5.2 and above use ip ports 5631 and 5632.
workstations behind e-smith servers do not have valid static ips.
You would have to open ports and implement port forwarding.

Try using the built-in VPN remote capability of e-smith 4.1 then try to access the workstation over the VPN.

Darrell

[hanscees]

hmm,
e smith has ipmasqadm loaded right?

pcanywhere uses tcp 5631 and udp 5632
so somewhere in a script you could do some ipmasqadm rules like

ipmasqadm -a -P tcp -R youripexternal 5631 -L youripinternal 5631

also for udp and it should go. Itworks on a lrp floppy.

It is also messy, but hey, so is the world
hc

[Gerald Jansen]

I would really perfer to use the VPN capability. However, I have been told it can't be used by a WS behind one e-smith server to another e-smith server. If there we away around that problem I would really like to know it. Any ideas would be greatly appreiciated.

Gerald

[hanscees]

I have no idea how this vpn works, but i think it is pptp based (which is pretty bad actually because ipsec is a lot safer, however this also depends on the version of pptp.). But I am right now behind a pptp line and also masquaraded (I am at 192.168.0.1) so i think that is possible.
It could be that it is not possible to start a vpn tunnel from your masquaraded host. But I might be missing the point here.

hc

[Gerald Jansen]

I believe that is the point. It doesn't seem possible to start a VPN tunnel from behind e-smith. I have no problem when using VPN from a straight WindowsX VPN client. I am now toying with the idea of having a dedicated Windows Workstation with a static routable IP sitting behind the same Cisco 675 router as the e-smith server. Then programming the Cisco with a second static ip that would point directly to the Workstation through a 100MB switch. This would allow the e-smith server and the WS to share the same internect access. It would only open the WS up to hacking.

[Stone Linton]

FREESCO will allow PPTP to pass through.  E-Smith is yet to implement this feature.  I currently use 4.1's VPN features and dial up to my isp and VPN to my e-smith server then pcAnyWhere to what ever workstation is behind the server . . . this works for me.

[Gerald]

I now have the client setup so she can VPN to the e-smith host. Now how do you drill through to a workstation behind the e-smith. Do you  use "ipmasqadmin' as suggested by hanscees?
 TIA

Jerry

[Gerald]

I am using 4.1.1 and attempted to execute the command you suggested from /usr/lib/ipmasqadm and received the message, "...no such file or directory.." On doing a "whereis" I noticed a ipmasqadm tar file. Could it be that ipmasqadm isn't installed automatically? I don't want to untar and install what is there and mess something up.

[Stone Linton]

No need to drill through . . . just use the ip ofyour internal workstation . . . may have to assign a static ip so it won't change . . . but then you just dial up to your isp, vpn to your e-smith box, upon connecting your pptp server's dhcp service assigns you, the remote computer an ip address on your local subnet, then you should be able to ping/telnet/pcanywhere to any internal device that you know the ip address of.  Machine names don't seem to work via this process, so use the ip address.

[Gerald]

Thanks, that worked as long as I didn't use a password with pcAnywhere. That should be no problem because the VPN will provide the wrapper and security. Now, have you had any luck using at&t's VNC (http://www.uk.research.att.com/vnc/ from a workstation behind and e-smith  through VPN to another workstation also behind an e-smith server? This would allow pcAnywhere functionality without the cost of pcAnywhere

[Mark Fleeson]

Hi,

I use vnc to control a network in Hong Kong from the UK using e-smith, vpn and vnc. It's really very good. Can be little slow on updates if the 'net connections slow but otherwise ok. Doesn't have file transfer capabilities though and it's best to assign static IP's, i.e find your pc's network hardware address and enter as a host in e-smith to ensure you get dhcp to always allocate a fixed ip.