Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > VPN: Site to Site and Remote Access

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 06-17-2009, 09:21 PM
Junior Member
 
Join Date: Jun 2009
Posts: 16
Default problem with UVNC

I am trying to get ultravnc to work through Astaro so that I can remotely control my desktop while on the road, but the packet filter live log shows the incoming packets that would initiate the connection being dropped by the default rule.

I have a relaxed packet filter rule that is src = any, service = uvnc, dest = any, action = allow, at the top of the list. The uvnc service is 1:65535 - > 5959.

I also tried creating a generic proxy using interface = ext WAN, service = uvnc, host = 192.168.0.75 (on same net as ASG LAN IP), service = uvnc, allowed networks = external & internal, but that did not work either.

What am I missing?
Reply With Quote
  #2 (permalink)  
Old 06-17-2009, 10:35 PM
Moderator
 
Join Date: Jul 2001
Location: southern California
Posts: 5,153
Default

edit: nevermind

Barry
__________________
http://DealBert.net
Home & business end-user since v1.x
  • ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  • ASL 7.3x, Dell PE1550 Dual PIII 1GHz, 1GB RAM, 2 NICs, 50-IP Platinum License
  • ASL 7.5x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
    Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
    Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb

Last edited by BarryG; 06-17-2009 at 10:59 PM. Reason: didn't notice VPN
Reply With Quote
  #3 (permalink)  
Old 06-17-2009, 10:37 PM
BAlfson's Avatar
Moderator
 
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,393
Default

I notice that you're having issues with PPTP. The L2TP over IPsec VPN works extremely well in the US and the standard Windows VPN client works seamlessly with the Astaro implementation. That avoids you having to do any fancy stuff with proxies or DNATs and makes your implementation a bit more secure.

Once you've VPNd in, there should be no issue with blocked ports. You can use uvnc or the standard Windows RDP client (assuming we're talking about a Windows desktop).
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #4 (permalink)  
Old 06-18-2009, 03:12 PM
Junior Member
 
Join Date: Jun 2009
Posts: 16
Default

Quote:
Originally Posted by BAlfson View Post
I notice that you're having issues with PPTP. The L2TP over IPsec VPN works extremely well in the US and the standard Windows VPN client works seamlessly with the Astaro implementation. That avoids you having to do any fancy stuff with proxies or DNATs and makes your implementation a bit more secure.

Once you've VPNd in, there should be no issue with blocked ports. You can use uvnc or the standard Windows RDP client (assuming we're talking about a Windows desktop).
I started with PPTP because it is usually very easy to set up, especially if you are using the MS server as the endpoint. In this case, I don't want to expose the server to the DMZ/internet, so I am using the ASG as the endpoint.

Are there known problems with the ASG PPTP implementation?
Reply With Quote
  #5 (permalink)  
Old 06-19-2009, 03:37 PM
Junior Member
 
Join Date: Jun 2009
Posts: 16
Default

Ok, I got the ultravnc going by using DNAT, so case closed.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 07:39 PM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.