Connecting to PC behind ADSL modem/router

[tycho]

Guys, I have a Linksys adsl modem/wifi router with my pc connected not using NAT as far as I am aware. The modem has a public ip address and the pc a private one. The pc is running XP pro. Is there any way of remotely logging onto it from a pc over the net? Not sure if it can with a private ip but would like to be proved wrong.

[RobDickinson]

Sounds like you ARE using NAT - otherwise you;d need a public IP for the PC.


You need to set up port forwarding on the router to forward incoming connections on the specific port(s) to the local IP address.


Not sure what remote software your going to use so dont know which ports.

[pdV6]

Also, you'd need to be careful about how you set up the firewall (you have got one, haven't you? ) so that only you will be able to connect in from the 'net, and not all and sundry.

[fatsteve]

Tyco,

This is fairly easy to do, your router should have a port direction function on it. Simply choose an app you want to use to use for remote admin (eg VNC), and add the port it uses (5900)together with your PC's IP address (will need to be static) to your routers config.

Personally, I'd be cautious above this type of access given Microshites inherent security flaws. If you can, use something like ssh and tunnel the connection.

HTH

Steve

[tycho]

Cheers guys. I have got a hardware firewall on the router and the xp sp2 firewall on my machine. I will probably use pc anywhere for accessing it.

[john_p]

What about Remote Desktop?

[fatsteve]

john_p said:

What about Remote Desktop?

Probably a better option than PC anywere. This runs on port 3389. Would still recommend the tunnel method though (ensures both ends are encrypted)

Steve

[tycho]

So all I do is set the port remote desktop etc uses to my internal pc's ip and connect to the external ip of my router on that port then, hey presto, it should connect tothe internal pc.

[fatsteve]

Yep, but here's the gotcha; you'll only be able to test this from a PC outside of your network (ie use dial-up). ie trying to access you PC via your hide address (external IP) from within your network won't work.

[RobDickinson]

But its ok, leave it overnight and someone will have tested it for you...

[tycho]

RobDickinson said:

But its ok, leave it overnight and someone will have tested it for you...

What about if I am using zone alarm? How secure would it be?

[fatsteve]

tycho said:

RobDickinson said: But its ok, leave it overnight and someone will have tested it for you... What about if I am using zone alarm? How secure would it be?

Not much good, I'm afraid since it would be able to distiguish between you and a.n.other user.

You could use IP lockdown (if your router supports it), however, will be limit where you access you PC remotely from (plus you'll need to use static IP's)

[tycho]

What about a really good password and obscure username which can't be dictionary cracked? Would people bother with this kind of hassle?

[squirrelz]

Don't forget you still need to set up port forwarding on the router.

Preferably just the ports you want to use.

And preferably from just the source IP addresses you'll be using.....