Topic: Remote Access Question

[flagg0204]

I can access a command prompt without any problems.  I just forward port 22 from my linksys over to my SME box.  however I would like to also have access to the Web GUI while I am at work.  Our work is behind a proxy server, and according the documentation I need to specify which networks (or individual IP's) will have access to the SME web interface.  Is there a way to allow ANYONE to connect to the SME box?

[mbachmann]

I don't get the network layout clearly, so i'm guessing: check server-manager local networks (there should be an entry already like 10.0.0.1/24 which you may have to alter or to add) and remote access.

[BoZz]

Hello,

I've found the easiest and safe way to do this is to tunnel it through SSH. More info can be found here
http://forums.contribs.org/index.php?topic=24844.0

[dmac]

I had the same problem as you.  There isn't any real easy way to determine the outside address of your works proxy server, unless you are tight with the IT people and they will supply you with the correct address.  What I ended up doing was creating a new ibay and accessing the Ibay from work, then used the httpd access log to find the address that accessed that Ibay.  Added that address with a subnet of 255.255.255.255 to prevent any access except from that one IP to the remote access part of the SME Server manager web page.  One more thing, make sure that you enable on secure communication when accessing the server manager (ie HTTPS://)

THT,

Darin

[cc_skavenger]

you could vpn into your server and then use the lan address to access the server manager.

[cydonia]

you could vpn into your server and then use the lan address to access the server manager.

Yeh, that method is good, that is the way i accomplish it.

[dmac]

VPN would be a good idea, but some companies block outgoing ports at the firewall.  In my case the outgoing ports are limited to 80, 8080, 443, and 21.  There might be a couple more but these are the ones I know I can use.

Darin

[Damian]

How about ....

On the client use ssh -X -C -L 5400:INTERNAL-SME-IP:443 root@external-server-hostname

(e.g...  /usr/bin/ssh -X -C -L 5400:192.168.1.50:443 root@mysme.dydns.org)

Then from the client go to: https://localhost:5400/server-manager/

Damian