[ale] pcAnywhere through an ipchains firewall

[Patrick Jones]

PCAnywhere uses two ports - 5631 for TCP and
5632 for UDP.  You can redirect these to any port
you want.  That just requires some registry settings.
The symantec website has all the information.
I have two machines running PCAnywhere, one on the
standard ports and one on a separate set of ports.
My DSL router uses NAT since we only have one public
IP address.  I just forward all incomming requests on
those ports to the appropriate internal IP address.

Patrick Jones
Grunt Monkey

> -----Original Message-----
> From:	Joe Knapka [SMTP:jknapka at earthlink.net]
> Sent:	Thursday, August 10, 2000 2:46 AM
> To:	Jay Finch
> Cc:	ale at ale.org
> Subject:	Re: [ale] pcAnywhere through an ipchains firewall
> 
> If pcAnywhere uses a single port, or a static collection of
> ports (nothing weird like FTP's dynamic port assignments),
> then it's easy: from outside, you ssh to the firewall and
> have ssh forward a local port to the pcAnywhere port on the
> machine behind the firewall. Private IPs behind the firewall
> are fine for this, and the across-the-public-Internet part
> of the path is encrypted by ssh.
> 
> If pcAnywhere uses IP in a way that makes it difficult or
> impossible to use a portforwarding solution, then a stopgap
> measure would be to use VNC rather than pcAnywhere, which
> will definitely work in such a situation, and is available
> free. Some people say its performance under Windows is not
> as good as pcAnywhere, and it doesn't provide some of
> the pcAnywhere frills like built-in file-transfer function,
> but you can always forward a passive FTP or NetBIOS session
> through the firewall if you need to move files around.
> 
> http://www.uk.research.att.com/vnc
> 
> HTH,
> 
> -- Joe
> 
> Jay Finch wrote:
> > 
> > Depending on your firewall, you will need to enable IPSec Routing...
> > 
> > I know that's what I had to do running IP Chains here at my house in
> order
> > to VPN and PC Anywhere to my work...
> > 
> > The Linux VPN Masquerade HOWTO helped me a lot:
> >
> ftp://ftp.rubyriver.com/pub/jhardin/masquerade/VPN-howto/VPN-Masquerade.ht
> ml
> > 
> > Cheers!
> > Jay
> > 
> > At 09:33 PM 8/9/00 -0400, Gary S. Mackay wrote:
> > >Sorry for so many questions lately. Has anyone had any success routing
> > >pcAnywhere through an ipchains firewall? I have a good size university
> that
> > >didn't know that all of the machines on one of their departments are
> wide open
> > >to the world. They want a firewall soon BUT, they say, four of their
> employees
> > >come in through the internet via pcAnywhere and connect to their
> workstations.
> > >A whole bunch of IP's will be free'd up when the internal addressing
> gets
> > >changed to the 192.168 group, so, I envision assigning several of the
> IP's to
> > >the linux box and using ipmasqadm (I guess?) forward traffic to each
> users
> > >machine. I've tried it with one of my closer clients but can't seem to
> get it
> > >to work. Are there any docs that explain this?
> > >
> > >- Gary
> > >
> > >
> > >--
> > >Edison Information Technologies
> > >P.O. Box 554
> > >Milan, OH  44846-0554
> > >419.499.7040
> > >www.EdisonInfo.com
> > >Gary at EdisonInfo.com
> > >--
> > >To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in
> message
> > >body.
> > 
> > --
> > To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message
> body.
> 
> -- 
> *** Joseph Knapka ***
> In any formula, constants (especially those obtained from handbooks)
> are to be treated as variables.
> --
> To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message
> body.
--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.