DG834G netgear Router

[Darksun]

ok done some searches but nothing really helpfull came up so I am starting this thread.

I have the Netgear DG834G Wirelss router etc.
I want to be able to VNC to my box when ever i need to frmo my office.
I have a DNS name from www.dyndns.com

when Pining the router i get a request time out.
Do i need to make any changes on the Router ?
the other problem could be from my office side. will have to get a mate to see if he can ping from his home pc.

step 2. if he is unable to ping the pc what changes then do i need to do ?
do i need enable port forwarding to allow VNC to connect ?
and do i need to kill windows firewall and run on the router firewall ?

Thanks

 

[rellik]

Yep you need to forward the correct ports to you ip. The default port is 5900. I suggest forwarding 5800 - 5900. That will enable java connection as well. I have the same setup and it works like a bomb

 

[Gambit]

By default you won't be able to ping your router from the internet. You can enable it in the "Wan setup" menu in your router configuration by checking the "Respond to Ping on Internet WAN Port" checkbox. I would recommend you do not do this. If your router is pingable then the kids will know your ip is in use and therefore might try hack you.

 

[Nickste]

I had a bit of trouble getting port forwarding to work on my Netgear DG834GT, and needed VNC to work. So I enabled DMZ and pointed it to my pc. Not so great security wise - but works as a last resort.

Cheers, Nick

 

[DeonH]

Hi there,

below follows my solution to the same difficulty you experience. This is my reply on www.ultravnc.com

Hi there,

thanx for everyone who tried to help me. I eventually solved my connection and am VERY HAPPY and relieved. Very Happy

This is what did it:

Step 1
Forward ports 5800 & 5900 as per reply from redge:
add:
service definition
name: uvnc
Type: TCP
Start port: 5900
Finish Port:

add:
service definition:
name: uvnc_http
Type: TCP
Start port: 5800
Finish Port: 5800

Inbound Services
Service: uvnc
Action: ALLOW always
Send to LAN Server: 192.168.0.11
WAN Users: Any

Inbound Services
Service: uvnc_http
Action: ALLOW always
Send to LAN Server: 192.168.0.11
WAN Users: Any
You don't have to use x.x.x.11 (I have set myne to 6)

Step 2
Remember, with this router you cannot view from another computer which shares the same public IP as you, even if it's on the same network as your computer you want to access; you have to do it from another Inernet Connection

Step 3
Lastly I registered my computer's DNS with www.dyndns.org - it's free and I think this is what did the trick, eventually.

Thanx again for everyone's help and patience. I'm connected, 7 weeks after having to replace my D-Link Router after lightning cooked it.

Regards,
Deon

I am more than sure this will work for you. I have chosen not to go with the option to use the DMZ (De Militarized Zone) for the reason mentioned in the previous thread.

Regards,

Deon

 

[Nickste]

Thanks Deon,

Will try it soon

 

[bertelberry]

A much more secure way would be tunnel vnc through ssh, see
http://www.uk.research.att.com/archive/vnc/sshvnc.html
and you only need to open port 22

I have just bought a DG834G, and did a port scan on it, and found port 5190 open. The default incoming rule does not seem to block all ports. Adding a manual rule to block all incoming ports does block the port correctly however. (I have not scanned all 65535 ports so there may be others open). Does anyone know anything about this?

--
Rob