Koozali.org: home of the SME Server
Legacy Forums => General Discussion (Legacy) => Topic started by: Peter Jeffery on December 15, 1999, 01:41:29 AM
-
Hi Everybody,
I wondering if there is some way to get a computer on the internet (using IP addresses) to be able to talk with a computer behind the e-smith gateway?
I'd appreciate any insights to this
Thanks
Peter Jeffery
-
Peter Jeffery wrote:
> I wondering if there is some way to get a computer on the
> internet (using IP addresses) to be able to talk with a
> computer behind the e-smith gateway?
You won't have a proper firewall if you do that...
You mention PC Anywhere in the subject so I presume that is what you want to run. I don't know what protocol it uses, but if it is a single TCP stream and you only want to connect to a single computer behind the gateway, then the easiest way to set it up is to configure inetd on the e-smith server to accept the connection on that port, then start a simple TCP forwarder progrem (socket, netcat, numerous others) to create the
TCP connection to the machine and port you wish to connect to. Then from the outside just connect to the e-smith gateway, and the connection will be patched through to the inside computer.
Read the customisation doco at http://www.e-smith.org/custom/ and whatever networking/firewalling stuff you can find on the Internet or through your local Linux User Group.
Charlie
-
"The default pcAnywhere port numbers are 5631 (DataPort or TCP) and 5632 (StatusPort or UDP)." -> From norton's web site.
Based on this, you will need to open two ports on the firewall, one TCP and one UDP and have traffic from those ports routed to the machine which you need to access with the appropriate ports. Note that on the e-smith server one would noe necesairly need to open those ports, but for ease of use it would be better. Again, the ipmasqadm tool comes in handy. Downlaod the rpm and install it, and read the man page. Personally, I modified the cgi script from the e-smith web admin system to allow me, or rather the people at home when I am not here to easily "turn on" or "turn off" pcanywhere, that is, open and redirect the appropriate ports, and close them again to block all traffic again, a good idea for security reasons. Also be awawhere that if u do run pcanywhere to make damn sure you have it password protected, or else you might find some people port scanning you, noticing those ports are open and do god knows what to the pc. Cheers,
Steve