I have VNC setup on my Laptop and I can view the VNC from other computers on the network by typing in the IP address of the laptop. however, i cannot seem to configure it to let me connect from an outside source on the internet, for example, from my girlfriends house.
i have a no-ip.org account and i have set up the host and the DUC client on my server machine (the laptop), but still cannot figure out how to get it to work..
what am i missing here?
EDIT:
more info:
i am using RealVNC Server on the laptop
I am trying to view with RealVNC viewer
see that's where it gets tricky i think. what i have for an internet connection is as follows:
1) new wave communications cable comes in through the cable line
2) goes into the modem
3) modem is routed into a Netgear FVS318 Firewall
4) Port 1 on the firewall then goes into a Netgear MR814v2 Wireless Router (this router provides an internet connection for the downstairs computers. 2 laptops, 1 desktop)
5) Port 8 on the firewall is connected to a 100ft Cat5 cable that is run underneath the house and up through the garage, into my room, where it is plugged into a Linksys WRT54G Wireless Router (for internet access upstairs. 2 desktops and the laptop that im setting as server)
Which router/firewall do i log into to forward the ports? I've done it on all three and that doesn't seem to have worked.
So the Neatgear FVS318 is doing PAT (NAT) to an internal address I assume right? So public to private. Then the WRT54G is also doing PAT from private to private right?
So you have three segments that are relevant. Sounds like the segment on the MR814 isn't needed for this service right? Since the server is off the WRT54G. And in fact it can't be used, not without using a different port range.
Off the top of my head I think VNC uses 5900. You might want to double check that.
So you need to have the first Netgear PAT from your public address to the private address.
So let's say 24.1.1.1:5900 to 192.168.0.1:5900. 192.168.0.1 being the address of the WRT54G and 24.1.1.1 being your public IP.
The WRT54G is then going to perform PAT to go from 192.168.0.1:5900 to 192.168.1.1:5900, your second segment off the WRT54G.
Make sense?
__________________
Always read stuff that will make you look good if you die in the middle of it.
I think it makes sense, but I don't really know how to make all the changes happen. I don't know what the options are that I need to select from within the router.
It does make sense to me that the Netgear MR814 shouldn't need to be used.
alright, i think i've made the connections correctly. i can still access the vnc server over the network, through the IP address, but I dont really have a way to check it over the internet right now.
check my work:
1) (on the Netgear Firewall) Forwarded Port 5900 to 192.168.1.1 (address of Linksys WRT54G)
2) (on Linksys WRT54G) Forwarded Port 5900 to 192.168.1.104 (address of server)
My set up is a little simpler, why so many fire walls?
I have a cable modem with the DMZ set to my server. All you need to do is find the real world IP address, the one assigned to your cable modem. Put that into your call address, then its up to the modem and firewalls to do the port forwarding. DMZ is a little easier to set up than port forwarding..
Don't forget that firewalls block in both directions incomming and outgoing. I use to do IPCHAINS in linux and it was a pain.
If I were you the next time I was home alone I would connect my PC directly to the modem and get that to work, then start reconnecting things and configure as I go.
alright, i think i've made the connections correctly. i can still access the vnc server over the network, through the IP address, but I dont really have a way to check it over the internet right now.
Just use your IP address from inside your house. It will go outside to the wold and back. I've done that several times.
My set up is a little simpler, why so many fire walls?
I didnt set it up. It was done that way because my mom uses VPN to connect to her work servers, and she had someone come and set that up for her.
I'm going to test the connection now, I have to go out anyway, so I'll check from a remote computer.
2) Configure the DMZ of the WRT54G to be your server. Same basic instructions as in step #1.
Here is what happens. Some unknown packets show up with the modem's IP address and it sends them to the FS318. It has no idea where they are from so it sends them to the WET54G (DMZ) the WRT54G doesn't know what to do so it passes them to its DMZ, your server.
The bad news: This makes your server unprotected by firewall and effectively out in the either.
The good news: You can put any server you want on your system and get at it from anywhere in the world.
Added note: Once you get it to work then some security, like a firewall on your PC can be added. But you need to get it to work first. Sometimes the Cable companies block your ports for you. For example I know somebody who's cable company block his port 80 so he can not run a web server, but he can run a secure web server on 8080.........
alright, i think i've made the connections correctly. i can still access the vnc server over the network, through the IP address, but I dont really have a way to check it over the internet right now.
check my work:
1) (on the Netgear Firewall) Forwarded Port 5900 to 192.168.1.1 (address of Linksys WRT54G)
2) (on Linksys WRT54G) Forwarded Port 5900 to 192.168.1.104 (address of server)
Are you sure the address of the Linksys router is 192.168.1.1 on the FIRST LAN?
I think the address is something else, so (1) is probably wrong.
When you've configured it correctly go to http://www.whatismyip.com and connect to that IP (your public, internet IP) from home for testing purposes (The no-ip address should also work). The packets will leave your home and go in through the internet way.
You shouldn't mess with DMZ's unless you run OpenBSD.
Are you sure the address of the Linksys router is 192.168.1.1 on the FIRST LAN?
I think the address is something else, so (1) is probably wrong.
When you've configured it correctly go to http://www.whatismyip.com and connect to that IP (your public, internet IP) from home for testing purposes (The no-ip address should also work). The packets will leave your home and go in through the internet way.
You shouldn't mess with DMZ's unless you run OpenBSD.
Yeah, from within the Linksys Routers settings, it is telling me that the local IP address is 192.168.1.1
The IP addresses being used are:
Netgear Firewall- 192.168.0.254
Linksys Router- 192.168.1.1
Netgear Router- 192.168.0.250
192.168.1.1 is the local IP address not your real world address. That is the address you would put in IE to get to the router. Hopefully the other router is 192.168.0.1 When you go there and go into the router set up you should be able to see its real world IP address.
I have a WGR614 and I enter the url in IE 192.168.1.1 and I get a login to the routher enter account admin and password and the netgear set up comes up. Select basic settings then the IP address appears under Internet address. in the center pane
right, my local IP addresses are the ones that I listed above, i just checked again to make sure, and yeah, when i type each one into IE, i get the logon screen for each different piece of hardware.