LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 03-03-2007, 12:37 PM   #1
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Rep: Reputation: 60
Remote Control Acces simplified


Everytime I go to a client site I either have to configure port forwarding on the firewall and port 5900 or 3389 for VNC or RDP to work or a tedious VPN if the site has that technology in the compliance or OPENVPN but I was looking for an application like DELL support connect(you start the program and then they give you tech ID and then they can connect to you, I think what happens is that you establish a connection and then they connect remotely)Using some like this I can just tell the client to download this and install it then bam I am in. Is there an opensource version of this. thanks
 
Old 03-03-2007, 12:50 PM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
have a look at using a reverse ssh tunnel: http://articles.techrepublic.com.com...ml?tag=nl.e011 this way a client can run a script from their side to hit your predefined location and let you then directly connect to whatever local ports on their box are forwarded.

you might also like to look into freenx, which is a really interesting developement of vnc, in that it's not only totally tunnelled through ssh, but the ssh framework built into it starts the freenx desktop connection during the login, so no session is running at all, and on service has to start by default.

these two MAY fit together well, not sure to be honest. i can imagine the customer could ssh to you and then only provide you with a tunnel of their ssh port. i.e. your local port of, say 51234 could be remote customer number 1234's ssh server when connected. then you can just throw freenx at that and bring up everything you need as you can then tunnel back to them and bring up any tunnelled ports you wish to make use of.

thinking about it, freenx is probably OTT, *IF* the reverse tunnel idea appeals to you. as you can then configure their X server to always offer a VNC connection on localhost, as (i think) as far as the customers concerned you will appear to be coming from localhost anyway.

make sense?
 
Old 03-03-2007, 12:59 PM   #3
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Original Poster
Rep: Reputation: 60
That is good stuff but what if I am trying to connect to a windows machine. Would they have to have Putty SSH to me and then remote to them over SSH. I am little confused.
 
Old 03-03-2007, 01:07 PM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
well putty can do a reverse tunnel too, afaik, so the concept is acutally the same.
 
Old 03-03-2007, 01:14 PM   #5
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Original Poster
Rep: Reputation: 60
I will look into this, once again thanks. you the greatest. Dude, I see that you are from the UK, forgive me for I failed Geography but Ozzy is from that neck of the woods so you must at least be an OZZY fan!
 
Old 03-03-2007, 01:37 PM   #6
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
well Ozzy is from birmingham (the real one, not the one in alabama) which is 10 minutes down the road... but no, not really a favourite. warpigs is great an all that though.
 
Old 03-03-2007, 02:07 PM   #7
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Original Poster
Rep: Reputation: 60
one more questionI promise this is the last one)

1 - ok, let say I have a client and I have them install putty. I would have them create a tunnel session to my ssh server and then I could vnc viewer into there machine given they have VNC server on there computer running on the same port as ssh? I want them to connect to my server and then I want the ablility to connect to there computer from my server securely so that I can help them out! Is that what reverse tunneling is? Remember most of the boneheads here in the states are using windows!

Last edited by metallica1973; 03-03-2007 at 02:12 PM.
 
Old 03-03-2007, 02:13 PM   #8
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
that's basially it, but you can use standard ports all the way. from your customers perspective it's that they connect to you and if you connect to port 51234 on your OWN computer that connection will be forwarded to their computer. the normal version of an ssh tunnel is that if you ssh to somewhere and include a tunnel configured in it, then connceting to your own comoputer on a certain port makes the connection go down ssh and leave for a given destination at the server side, that could be the machine you connect to, a machine in their lan, or even google.com or whatever. the reverse tunnel is when that exact logic still happens but it's from the server to the client, not the client to the server.
 
Old 03-03-2007, 02:29 PM   #9
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Original Poster
Rep: Reputation: 60
so how would I configure Putty on the client end? would I port forward anything under the tunnel section? or after they have SSHed to me would I just vnc to them? I am a bit confused. To many good times like OZZY!

I think I get it now, I would put this under tunneling under PUTTY on the clients local machine and add a line like this

PHP Code:
ssh USER@SSH_SERVER_IP -R 5900:127.0.0.1:5900 
and that would redirect my vnc viewer to her vnc server running on her machine locally?right?

Last edited by metallica1973; 03-03-2007 at 02:38 PM.
 
Old 03-03-2007, 03:02 PM   #10
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
yeah essentially that'd be it. i'd certainly suggest an additional tunnel for ssh access itself, so you have a base level way to modify these sorts of things without needing vnc etc...
 
Old 03-03-2007, 04:48 PM   #11
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Original Poster
Rep: Reputation: 60
ok I think I get it how about this in the Putty client

PHP Code:
ssh -nNT -R 5900:local.mydomain.com:5900 remote.mydomain.com 
But where the Putty client would you add this statement, I cant find it?
 
Old 03-03-2007, 05:33 PM   #12
metallica1973
Senior Member
 
Registered: Feb 2003
Location: Washington D.C
Posts: 2,190

Original Poster
Rep: Reputation: 60
Never mind ladies and gents here is a simple how to that will clarify everyting. Take a peap

PHP Code:
 http://www.vbforums.com/showthread.php?t=399880 
acid_kewpie

you are mr reliable and many kudos to yourself and most of your staff.

Last edited by metallica1973; 03-04-2007 at 10:30 AM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
nat, bandwith throttling, and acces control vverheijen Linux - Networking 0 01-28-2007 04:14 PM
Controlling remote acces SSH Wimpie22 Linux - Security 9 07-27-2005 04:33 PM
Remote acces to my x session eloicases Linux - Networking 2 06-15-2004 06:49 AM
I only have read acces on remote connection Stuartb21 Linux - Networking 1 02-12-2004 05:45 PM
remote acces newbe45 Linux - Newbie 5 07-22-2003 05:42 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 09:56 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration