Setting routes through the Firewall of a Router

Hi,

I have a Netgear router and have a route to manage, with Screen Sharing,
access one of the Macs on the network. This also applies to SFTP so I can
collect files remotely.

What I’d really like to do is to be able to manage more than one internal
device. Either Screen Sharing or SFTP etc.

On a Netgear router you can set a route on port 5900 [the nominated VNC
port] to a specified internal IP address, but only one route.

Is there a way I can setup up a route to more than one Mac?

Currently I’m using a Dynamic DNS service to track any change on my
Broadband IP address, I’m with ntl/Virgin so I’ve not had a not change for
about four years, but ADSL connections change frequently. This means I can
have a publicly available domain [such as fredflintstone.dyndns.org or
peter.is-a-stonemason.com etc] to link to my network.

Any ideas??

Best wishes Peter

================================
Peter Tucker, Oxford UK email@hidden


offtopic mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

If you only have one external IP address, then you will have to use a
non-standard port to reach the 2nd through nth Mac. The way you would
do this is to set up port 5900 to map to 192.168.1.130:5900, then set
port 5901 to map to 192.168.1.131:5900, and so on. Your router should
be able to work out the return route correctly. You would then need
to specify the non-standard port in your VNC software when trying to
connect to one of the other machines. The client Macs would not need
to be configured any differently on the VNC server side.

Walter

On Mar 31, 2008, at 2:22 PM, Peter Tucker wrote:

Is there a way I can setup up a route to more than one Mac?


offtopic mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

on 31/03/2008 19:30, Walter Lee Davis at email@hidden wrote:

If you only have one external IP address, then you will have to use a
non-standard port to reach the 2nd through nth Mac. The way you would
do this is to set up port 5900 to map to 192.168.1.130:5900, then set
port 5901 to map to 192.168.1.131:5900, and so on. Your router should
be able to work out the return route correctly. You would then need
to specify the non-standard port in your VNC software when trying to
connect to one of the other machines. The client Macs would not need
to be configured any differently on the VNC server side.

Cheers, I’d thought of that work around, but the router will not allow
adding ports to the end of the Firewall rules.

Might it work with [a more flexible] VPN solution?

Best wishes Peter

================================
Peter Tucker, Oxford UK email@hidden


offtopic mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

Hmmm. Maybe if you had a router which could run the open-source
firmware, like this one:

<http://www.netgear.com/Products/RoutersandGateways/GWirelessRouters/
KWGR614.aspx>

Or, if you can find an older Linksys WRT54GL (v4 or lower) then that
would be the easiest.

Walter

On Mar 31, 2008, at 3:03 PM, Peter Tucker wrote:

on 31/03/2008 19:30, Walter Lee Davis at email@hidden wrote:

If you only have one external IP address, then you will have to use a
non-standard port to reach the 2nd through nth Mac. The way you would
do this is to set up port 5900 to map to 192.168.1.130:5900, then set
port 5901 to map to 192.168.1.131:5900, and so on. Your router should
be able to work out the return route correctly. You would then need
to specify the non-standard port in your VNC software when trying to
connect to one of the other machines. The client Macs would not need
to be configured any differently on the VNC server side.

Cheers, I’d thought of that work around, but the router will not allow
adding ports to the end of the Firewall rules.

Might it work with [a more flexible] VPN solution?

Best wishes Peter

================================
Peter Tucker, Oxford UK email@hidden


offtopic mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options


offtopic mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

(Sorry, the whole conversation appears to be missing from the thread)

Genuine Question:
The actual port would carry through, would it not? If a ping hit the WAN side of the firewall at: 52.123.123.123:5901 and a redirect rule pointed that to LAN: 192.168.1.101, would not that be the equivalent of: 192.168.1.101:5901? If so, then the VNC could then be set to listen on a different port number.


offtopic mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

That is a good point. Yes, if you could somehow configure your VNC
server on that machine to listen on a non-standard port, then it
would work as it should.

Walter

On Apr 1, 2008, at 10:29 AM, Weaver wrote:

(Sorry, the whole conversation appears to be missing from the thread)

Genuine Question:
The actual port would carry through, would it not? If a ping hit
the WAN side of the firewall at: 52.123.123.123:5901 and a redirect
rule pointed that to LAN: 192.168.1.101, would not that be the
equivalent of: 192.168.1.101:5901? If so, then the VNC could then
be set to listen on a different port number.


offtopic mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options


offtopic mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options

on 31/03/2008 20:24, Walter Lee Davis at email@hidden wrote:

Hmmm. Maybe if you had a router which could run the open-source
firmware, like this one:

<http://www.netgear.com/Products/RoutersandGateways/GWirelessRouters/
KWGR614.aspx>

Or, if you can find an older Linksys WRT54GL (v4 or lower) then that
would be the easiest.

Cheers Walter, I’ve checked by my router does not support open-source
Firmware.

I’m going to attempt the VPN rout next, I’ll let you know how it goes …

Best wishes Peter

================================
Peter Tucker, Oxford UK email@hidden


offtopic mailing list
email@hidden
Update your subscriptions at:
http://freewaytalk.net/person/options