-
Ask a question and get free supportUnlock new privileges and see hidden discussionsWin prizes and earn reputation
-
Question of the day ~ How often do you braai?
-
Afristay giveaway.Win a 2-night stay for two people at an establishment of your choice with R1,000 in spending money. Enter here.
Sign up with GoogleIPCOP and administer it from RED network
- Thread starter KenHall
- Start date
Yes.
Firewall -> External Access
Setup a rule to allow your source IP to port 445 (for gui) and 222 (for ssh) if you need it.
I would not recommend allowing a source of any.
---
The way that I do this, rather than having external access rules, is under port forwarding, to allow port 3389 to forward to one of my internal machines, allowing only my work ip addy through.
I can then use windows terminal services to get into my home desktop and administer the firewall from there.
Firewall -> External Access
Setup a rule to allow your source IP to port 445 (for gui) and 222 (for ssh) if you need it.
I would not recommend allowing a source of any.
---
The way that I do this, rather than having external access rules, is under port forwarding, to allow port 3389 to forward to one of my internal machines, allowing only my work ip addy through.
I can then use windows terminal services to get into my home desktop and administer the firewall from there.
Okay, I have a DSL192 connection thru Telkom. It is a Marconi Router that is then connected to the RED side of IPCOP and my home network is on the Green side (naturally). How do I address the home computers that are sitting on a 192.168.1.0 network?
I'm assuming that the marconi router is set to bridge mode (ie, it's not doing any firewalling itself).
The easiest thing to do is to setup dynamic dns on IPCop. I personally use dyndns.
That way, you always know what your machine name is regardless of the IP.
Each machine in your green network has an IP address (hopefully either static, or assigned statically via DHCP from your IPCop) - If your GREEN workstation addresses are dynamic, you will have an impossible time trying to do this.
Say you have three machine on your green network: asterix, obelix and getafix for arguments sake. Asterix is running a web server, obelix is your windows XP desktop, and getafix is another Windows XP desktop.
(I'm basically describing my own LAN setup here).
Now, I want to access all my machines for various services from outside. I want to get to the web server on asterix, and the remote desktops on the other two machines.
My IPCop box is setup with a dynamic dns name, so it's always updated with the current ip. We'll call this name ipcop.homeip.dom.
I setup port forwarding in IPCop:
default ip, source port 80 to destination ip asterix, destination port 80.
default ip, source port 3389 to destination ip obelix, destination port 3389
default ip, source port 3333 to destination ip getafix, destination port 3389
Now, to access the web server on asterix, I type 'http://ipcop.homeip.dom' in my browser at work, and voila, I get my web page on asterix.
I want to remote desktop to obelix, so I open up remote desktop, and type in 'ipcop.homeip.dom' and voila, I get a connection to obelix.
I want to remote desktop to getafix, so I type 'ipcop.homeip.dom:3333' and voila, I've got a remote desktop connection to getafix.
It's that easy. If you want to be more secure, I would suggest changing the SOURCE port. The Source port is not actually the port the data is coming FROM, as you would logically think. It's actually the port you would connect TO on the ipcop box, which would then forward through to the DESTINATION port of whatever IP address you specify as the destination.
Anyway, hope this explanation helps.
The easiest thing to do is to setup dynamic dns on IPCop. I personally use dyndns.
That way, you always know what your machine name is regardless of the IP.
Each machine in your green network has an IP address (hopefully either static, or assigned statically via DHCP from your IPCop) - If your GREEN workstation addresses are dynamic, you will have an impossible time trying to do this.
Say you have three machine on your green network: asterix, obelix and getafix for arguments sake. Asterix is running a web server, obelix is your windows XP desktop, and getafix is another Windows XP desktop.
(I'm basically describing my own LAN setup here).
Now, I want to access all my machines for various services from outside. I want to get to the web server on asterix, and the remote desktops on the other two machines.
My IPCop box is setup with a dynamic dns name, so it's always updated with the current ip. We'll call this name ipcop.homeip.dom.
I setup port forwarding in IPCop:
default ip, source port 80 to destination ip asterix, destination port 80.
default ip, source port 3389 to destination ip obelix, destination port 3389
default ip, source port 3333 to destination ip getafix, destination port 3389
Now, to access the web server on asterix, I type 'http://ipcop.homeip.dom' in my browser at work, and voila, I get my web page on asterix.
I want to remote desktop to obelix, so I open up remote desktop, and type in 'ipcop.homeip.dom' and voila, I get a connection to obelix.
I want to remote desktop to getafix, so I type 'ipcop.homeip.dom:3333' and voila, I've got a remote desktop connection to getafix.
It's that easy. If you want to be more secure, I would suggest changing the SOURCE port. The Source port is not actually the port the data is coming FROM, as you would logically think. It's actually the port you would connect TO on the ipcop box, which would then forward through to the DESTINATION port of whatever IP address you specify as the destination.
Anyway, hope this explanation helps.
ardiadrianadri
New Member
- Joined
- Dec 30, 2009
- Messages
- 1
Hello ThisGeek:
I'm new using IPCOP and I have a similar problem that you have explained in this thread. I want to configure my lan to allow remote desk connection between my computer (192.168.1.250) and a remote computer (83.35.83.188). My port forwarding configuration is:
Proto: TCP
Source: IP DEFAULT: 3389
Destination: 192.168.1.250:3389
and when I try a connection the log of IPCOP firewall shows me the next message:
IN=eth0 OUT=eth2 SRC=192.168.1.250 DST=81.38.27.175 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=63685 DF PROTO=TCP SPT=3389 DPT=4479 WINDOW=65535 RES=0x00 ACK SYN URGP=0
Where is my mistake?
Thank you in advance for your help
I'm new using IPCOP and I have a similar problem that you have explained in this thread. I want to configure my lan to allow remote desk connection between my computer (192.168.1.250) and a remote computer (83.35.83.188). My port forwarding configuration is:
Proto: TCP
Source: IP DEFAULT: 3389
Destination: 192.168.1.250:3389
and when I try a connection the log of IPCOP firewall shows me the next message:
IN=eth0 OUT=eth2 SRC=192.168.1.250 DST=81.38.27.175 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=63685 DF PROTO=TCP SPT=3389 DPT=4479 WINDOW=65535 RES=0x00 ACK SYN URGP=0
Where is my mistake?
Thank you in advance for your help
