<?xml version="1.0" encoding="utf-8"?><!-- generator="wordpress/2.0.11" -->
<rss version="2.0" 
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
<channel>
	<title>Comments on: Free GotoMyPC-like VPN, traversing three firewalls!</title>
	<link>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/</link>
	<description>Hobbies, family, life, science</description>
	<pubDate>Wed, 20 Aug 2008 14:57:20 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.0.11</generator>

	<item>
		<title>by: phord</title>
		<link>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-35077</link>
		<pubDate>Wed, 19 Sep 2007 18:49:55 +0000</pubDate>
		<guid>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-35077</guid>
					<description>&lt;blockquote&gt;&lt;em&gt;check out www.dialINtomypc.com he basically provided a site of FREE vnc based remote support… it does what we are discussing but for free and no work!!&lt;/em&gt;&lt;/blockquote&gt;
The problem with that is that it requires me to set up the connection on both ends.  I don't want to have to be able to touch both computers to effect this connection.  I want to be able to connect from either side to either side on a whim.

However, that is a cool resource, and I'll probably use it for some one-off connections in the future.  Also, check out check out http://www.showmypc.com/.  Maybe I'll set up a server for this of my own!&lt;a rel="nofollow" href="http://www.dialintomypc.com/" / rel="nofollow"&gt;&lt;/a&gt;</description>
		<content:encoded><![CDATA[<blockquote><p><em>check out <a href="http://www.dialINtomypc.com" rel="nofollow">www.dialINtomypc.com</a> he basically provided a site of FREE vnc based remote support… it does what we are discussing but for free and no work!!</em></p></blockquote>
<p>The problem with that is that it requires me to set up the connection on both ends.  I don&#8217;t want to have to be able to touch both computers to effect this connection.  I want to be able to connect from either side to either side on a whim.</p>
<p>However, that is a cool resource, and I&#8217;ll probably use it for some one-off connections in the future.  Also, check out check out <a href="http://www.showmypc.com/." rel="nofollow">http://www.showmypc.com/.</a>  Maybe I&#8217;ll set up a server for this of my own!<a rel="nofollow" href="http://www.dialintomypc.com/" / rel="nofollow"></a>
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: phord</title>
		<link>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-35076</link>
		<pubDate>Wed, 19 Sep 2007 18:48:27 +0000</pubDate>
		<guid>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-35076</guid>
					<description>&lt;blockquote&gt;&lt;em&gt;That’s also highly unethical, probably illegal, and probably grounds for a lawsuit against you by your employer.&lt;/em&gt;&lt;/blockquote&gt;
It is not unethical.  Sorry.  Nothing I'm doing on this VPN is in violation of any ethical norms.

It's also not illegal, excepting that I am using company resources aberrant of corporate policy.  I am using the computer with their consent, though the case could be made that I am doing so in an unapproved manner.

It probably is grounds for termination.  That's why I included the caveat.  Dumbass.</description>
		<content:encoded><![CDATA[<blockquote><p><em>That’s also highly unethical, probably illegal, and probably grounds for a lawsuit against you by your employer.</em></p></blockquote>
<p>It is not unethical.  Sorry.  Nothing I&#8217;m doing on this VPN is in violation of any ethical norms.</p>
<p>It&#8217;s also not illegal, excepting that I am using company resources aberrant of corporate policy.  I am using the computer with their consent, though the case could be made that I am doing so in an unapproved manner.</p>
<p>It probably is grounds for termination.  That&#8217;s why I included the caveat.  Dumbass.
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: phord</title>
		<link>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-35075</link>
		<pubDate>Wed, 19 Sep 2007 18:44:42 +0000</pubDate>
		<guid>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-35075</guid>
					<description>&lt;em&gt;What is that ‘mechanism’ that you use to get to web pages on non-standard ports, may I ask?&lt;/em&gt;

I use SSH to connect to my public machine on the internet.  My SSH connection (Putty) supports SOCKS Proxy forwarding.  I point the web browser to my localhost SOCKS Proxy, and *bingo*, all my web traffic (on any port) goes through my extant SSH connection instead of through my corporate firewall packet filter.

The problem with this hack is that it requires you to have a server running somewhere to act as your proxy.  If you are using openVPN to connect to your home PC like I am, then you're practically done.  All you need to do is make that SSH connection and turn on Dynamic Tunneling.

[Recently I was able to get my Cisco/Linksys WRT54GL router to act as a VPN for me running OpenVPN and OpenWRT.  Then I installed srelay on it for SOCKS Proxying.  And it worked!  Sweet!]</description>
		<content:encoded><![CDATA[<p><em>What is that ‘mechanism’ that you use to get to web pages on non-standard ports, may I ask?</em></p>
<p>I use SSH to connect to my public machine on the internet.  My SSH connection (Putty) supports SOCKS Proxy forwarding.  I point the web browser to my localhost SOCKS Proxy, and *bingo*, all my web traffic (on any port) goes through my extant SSH connection instead of through my corporate firewall packet filter.</p>
<p>The problem with this hack is that it requires you to have a server running somewhere to act as your proxy.  If you are using openVPN to connect to your home PC like I am, then you&#8217;re practically done.  All you need to do is make that SSH connection and turn on Dynamic Tunneling.</p>
<p>[Recently I was able to get my Cisco/Linksys WRT54GL router to act as a VPN for me running OpenVPN and OpenWRT.  Then I installed srelay on it for SOCKS Proxying.  And it worked!  Sweet!]
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: AA</title>
		<link>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-34550</link>
		<pubDate>Thu, 13 Sep 2007 02:30:06 +0000</pubDate>
		<guid>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-34550</guid>
					<description>That's also highly unethical, probably illegal, and probably grounds for a lawsuit against you by your employer.</description>
		<content:encoded><![CDATA[<p>That&#8217;s also highly unethical, probably illegal, and probably grounds for a lawsuit against you by your employer.
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: mandy</title>
		<link>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-33203</link>
		<pubDate>Wed, 22 Aug 2007 23:22:30 +0000</pubDate>
		<guid>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-33203</guid>
					<description>check out www.dialINtomypc.com he basically provided a site of FREE vnc based remote support... it does what we are discussing but for free and no work!!</description>
		<content:encoded><![CDATA[<p>check out <a href="http://www.dialINtomypc.com" rel="nofollow">www.dialINtomypc.com</a> he basically provided a site of FREE vnc based remote support&#8230; it does what we are discussing but for free and no work!!
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: JR101</title>
		<link>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-30695</link>
		<pubDate>Thu, 19 Jul 2007 19:00:22 +0000</pubDate>
		<guid>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-30695</guid>
					<description>I have a Windows VPN server which works great (with most machines connected to it from work and home).  However, the work wireless gateway will not allow outbound VPN connections.  Is there a way for my laptop to get out through the firewall somehow and connect to the VPN port on the external machine?  You mentioned getting to web pages on non-standard ports.. can you tell us which solution you used, and would it work for this purpose?</description>
		<content:encoded><![CDATA[<p>I have a Windows VPN server which works great (with most machines connected to it from work and home).  However, the work wireless gateway will not allow outbound VPN connections.  Is there a way for my laptop to get out through the firewall somehow and connect to the VPN port on the external machine?  You mentioned getting to web pages on non-standard ports.. can you tell us which solution you used, and would it work for this purpose?
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: mus51</title>
		<link>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-27890</link>
		<pubDate>Mon, 18 Jun 2007 17:04:10 +0000</pubDate>
		<guid>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-27890</guid>
					<description>Phord says:
"...sometimes I do need to bypass work firewalls to get to web pages, for example, on non-standard ports. For this I use another mechanism which is not VPN-related"

What is that 'mechanism' that you use to get to web pages on non-standard ports, may I ask?
-mus51</description>
		<content:encoded><![CDATA[<p>Phord says:<br />
&#8220;&#8230;sometimes I do need to bypass work firewalls to get to web pages, for example, on non-standard ports. For this I use another mechanism which is not VPN-related&#8221;</p>
<p>What is that &#8216;mechanism&#8217; that you use to get to web pages on non-standard ports, may I ask?<br />
-mus51
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: Randy</title>
		<link>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-14742</link>
		<pubDate>Sat, 17 Mar 2007 05:42:13 +0000</pubDate>
		<guid>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-14742</guid>
					<description>So anyways, I'm curious if any of you folk can help me.  See, my problem is that I'm trying to play a game which doesn't support NAT routers.  The obvious solution is port forwarding, but I'm in an apartment which doesn't do that for nice people like me.  So after they told me to go screw myself, I did a bit of research.  The game I'm trying to play uses all peer-to-peer connections, so I have to be able to get through the NAT firewall to a bunch of different ports.  I was wondering if I could use OpenVPN to get through all my NAT problems and play against thousands of people without error.  I'm not really that great with computers compared to the whole lot of ya, but I'd love some responses.  =]  

-Randy</description>
		<content:encoded><![CDATA[<p>So anyways, I&#8217;m curious if any of you folk can help me.  See, my problem is that I&#8217;m trying to play a game which doesn&#8217;t support NAT routers.  The obvious solution is port forwarding, but I&#8217;m in an apartment which doesn&#8217;t do that for nice people like me.  So after they told me to go screw myself, I did a bit of research.  The game I&#8217;m trying to play uses all peer-to-peer connections, so I have to be able to get through the NAT firewall to a bunch of different ports.  I was wondering if I could use OpenVPN to get through all my NAT problems and play against thousands of people without error.  I&#8217;m not really that great with computers compared to the whole lot of ya, but I&#8217;d love some responses.  =]  </p>
<p>-Randy
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: phord</title>
		<link>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-13822</link>
		<pubDate>Thu, 01 Mar 2007 13:48:27 +0000</pubDate>
		<guid>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-13822</guid>
					<description>&lt;i&gt;Wait, so you set up the OpenVPN server on your webserver that lives out in the open somewhere and then put clients on your work PC (behind your corporate firewall) and on your home PC (behind your several routers) and then once both the work PC and the home PC were connected to the VPN as clients, they could see each other by virtue of the fact that they were both connected as clients?&lt;/i&gt;

Yes.

&lt;i&gt;Did you have to use IP addresses with VNC or could you resolve hostnames?&lt;/i&gt;

I have to use IP addresses.  In fact I have to use IP addresses assigned by the VPN, so there's no name server that even knows these.  I could add the names to my "etc\hosts" file since the IPs are static for each client.

&lt;i&gt;Was your main goal to be able to control the work PC from home and vice versa&lt;/i&gt;

Yes.

&lt;i&gt;or was it to be able to “break out” of the corporate VPN and make outside connections as if they were coming from the webserver machine?&lt;/i&gt;

No.  In fact, I haven't been able to do this.  I think if I set up routes and enabled traffic forwarding on the web server I might be able to make this work, but it hasn't been a feature I need.

Well, sometimes I do need to bypass work firewalls to get to web pages, for example, on non-standard ports.  For this I use another mechanism which is not VPN-related.</description>
		<content:encoded><![CDATA[<p><i>Wait, so you set up the OpenVPN server on your webserver that lives out in the open somewhere and then put clients on your work PC (behind your corporate firewall) and on your home PC (behind your several routers) and then once both the work PC and the home PC were connected to the VPN as clients, they could see each other by virtue of the fact that they were both connected as clients?</i></p>
<p>Yes.</p>
<p><i>Did you have to use IP addresses with VNC or could you resolve hostnames?</i></p>
<p>I have to use IP addresses.  In fact I have to use IP addresses assigned by the VPN, so there&#8217;s no name server that even knows these.  I could add the names to my &#8220;etc\hosts&#8221; file since the IPs are static for each client.</p>
<p><i>Was your main goal to be able to control the work PC from home and vice versa</i></p>
<p>Yes.</p>
<p><i>or was it to be able to “break out” of the corporate VPN and make outside connections as if they were coming from the webserver machine?</i></p>
<p>No.  In fact, I haven&#8217;t been able to do this.  I think if I set up routes and enabled traffic forwarding on the web server I might be able to make this work, but it hasn&#8217;t been a feature I need.</p>
<p>Well, sometimes I do need to bypass work firewalls to get to web pages, for example, on non-standard ports.  For this I use another mechanism which is not VPN-related.
</p>
]]></content:encoded>
				</item>
	<item>
		<title>by: M</title>
		<link>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-13809</link>
		<pubDate>Thu, 01 Mar 2007 04:56:33 +0000</pubDate>
		<guid>http://www.philhord.com/phord/free-gotomypc-like-vpn-traversing-three-firewalls/#comment-13809</guid>
					<description>Wait, so you set up the OpenVPN server on your webserver that lives out in the open somewhere and then put clients on your work PC (behind your corporate firewall) and on your home PC (behind your several routers) and then once both the work PC and the home PC were connected to the VPN as clients, they could see each other by virtue of the fact that they were both connected as clients?

Did you have to use IP addresses with VNC or could you resolve hostnames?

Was your main goal to be able to control the work PC from home and vice versa, or was it to be able to "break out" of the corporate VPN and make outside connections as if they were coming from the webserver machine?

Thanks -- just trying to understand what you did here!</description>
		<content:encoded><![CDATA[<p>Wait, so you set up the OpenVPN server on your webserver that lives out in the open somewhere and then put clients on your work PC (behind your corporate firewall) and on your home PC (behind your several routers) and then once both the work PC and the home PC were connected to the VPN as clients, they could see each other by virtue of the fact that they were both connected as clients?</p>
<p>Did you have to use IP addresses with VNC or could you resolve hostnames?</p>
<p>Was your main goal to be able to control the work PC from home and vice versa, or was it to be able to &#8220;break out&#8221; of the corporate VPN and make outside connections as if they were coming from the webserver machine?</p>
<p>Thanks &#8212; just trying to understand what you did here!
</p>
]]></content:encoded>
				</item>
</channel>
</rss>
