Hey Bruce,
(from linksys manual)
SPI (Stateful Packet Inspection) is your problem
. This feature checks the state of a packet to verify that the
destination IP address matches the source IP of the original request. To
use the firewall, select Enable; otherwise, select Disable to use the
NAT firewall.

Basically if a request from the internet that was not initiated by you
will be dropped. Turn it off and it should work for you.

Hope this helps,

Jesse Waters


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On
Behalf Of Bruce Douglas
Sent: Friday, January 17, 2003 5:50 PM
To: [EMAIL PROTECTED]
Subject: Linksys Routers..Port Forwarding...Putty.. VNC!!

Evening... (or morning...)

I can no longer tell!! Once again I'm faced with the issue of tunneling
through my router to get to my Vncserver box. (At one point I thought
this
was working. I rebuilt the Linux box, but this wouldn't/shouldn't have
affected the router.)

The Setup:

        +----------------+
        | External World |
        +----------------+
                 ^
                 |(12.222.33.11)
                 v
        +-----------------+
        | Firewall/Router | (198.222.33.1)
        |    (Linksys)    |<--------------+
        +-----------------+               |
                                        | (Internal Network)
                                        |
                                        v
                +------------------------------------------+
                |                                          |
                |                                          |
                v                                          v
           +--------------+                       +---------------+
           |              |                       |               |
           |  Linux Box   | (192.222.33.4)        | Windows 2K Box|
(192.222.33.5)
           | (VNCServer)  |                       | (VNC Client)  |
           |              |                       |  (PuTTY)      |
           +--------------+                       |               |
                                                  +---------------+



In keeping things simple, I decided to make sure I could use a Putty
client
to get to the Linux box. In the above scenario, I'm able to get to the
Linux
box from the Windows box with no problem. Using PuTTY, and staying
within
the Firewall, I'm able to hit the Linux box and log in ok. (Putty's
default
settings are used.)

When I attempt to use the PuTTY client from the Windows Box, and hit the
Linux box by going through the router, I have an issue. Within the
Putty, I
use the external address of the Router. I have the port forwarding set
so
that port 22 is forwarded to port 22 of the Linux Box. I would have
expected
this to work! However, PuTTY times out. At this point, I'm still using
the
default settings within Putty.

The default settings should be sufficient to allow this to work as I'm
not
trying to perform anything unusual, especially given the fact that it
works
if I hit the Linux box while inside the firewall!


My question: What might be preventing this from working?

The filter settings are:

  SPI:                      Enable x Disable
  Block WAN Request:        Enable x Disable
  Multicast Pass Through: x Enable   Disable
  IPSec Pass Through:     x Enable   Disable
  PPTP Pass Through:      x Enable   Disable
  Remote Management:        Enable x Disable
  Remote Upgrade:           Enable x Disable
  MTU:                    x Enable   Disable

My ultimate goal is to once and for all, get the router/VNC/PuTTY all
working to provide SSH access to the VNCServer on the Linux box from
outside
the Firewall.

Thanks...

-Bruce

(PS. I've spent a great deal of time trying to track down information
relating to this issue on the 'net. I also looked through some of the
past
VNC archives. I thought I had seen information relating to what I'm
experiencing, but I can't seem to find it now....)
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
http://www.realvnc.com/mailman/listinfo/vnc-list
_______________________________________________
VNC-List mailing list
[EMAIL PROTECTED]
http://www.realvnc.com/mailman/listinfo/vnc-list

Reply via email to