IPTables, Linksys BEFSR41 and PCAnywhere

IPTables, Linksys BEFSR41 and PCAnywhere

[A. Clausen]

We are using netfilter to run a broadband wireless network.  For customers
wanting a public IP, we simply forward a public IP to an internal NAT IP.

We have one customer who wants to use PCAnywhere remotely to contact his
machine on the inside.  As usual, I simply forwarded a public IP to the
private IP.  On the private IP they have a Linksys BEFSR41 router.

Basically it looks like this:

public ip ---> Linux netfilter router ---> private ip ---> Linksys
router ---> customer's network

He is insisting that he needs to actually have a public IP, rather than just
having our Linux router forward a public IP to a private.  We have other
customers doing similiar things, one even opening up ports for MS-SQL
server, without a problem, so I'm presuming that this customer is coming
from a position of ignorance.  But before I start digging deeper, I need
confirmation that this Linksys router is not some bizarre piece of hardware.

-- 
A. Clausen

techlsits@alberni.net

Re: IPTables, Linksys BEFSR41 and PCAnywhere

[Alexis]

youre right, just dont forget that pc anywhere uses 2 ports, that i
think they are 5631 and 5631 tcp

the linksys is with nat enabled? (its just to know, forwarding the ports
is enough to work)


On Thu, 2004-01-15 at 15:06, A. Clausen wrote:
> We are using netfilter to run a broadband wireless network.  For customers
> wanting a public IP, we simply forward a public IP to an internal NAT IP.
> 
> We have one customer who wants to use PCAnywhere remotely to contact his
> machine on the inside.  As usual, I simply forwarded a public IP to the
> private IP.  On the private IP they have a Linksys BEFSR41 router.
> 
> Basically it looks like this:
> 
> public ip ---> Linux netfilter router ---> private ip ---> Linksys
> router ---> customer's network
> 
> He is insisting that he needs to actually have a public IP, rather than just
> having our Linux router forward a public IP to a private.  We have other
> customers doing similiar things, one even opening up ports for MS-SQL
> server, without a problem, so I'm presuming that this customer is coming
> from a position of ignorance.  But before I start digging deeper, I need
> confirmation that this Linksys router is not some bizarre piece of hardware.
-- 
Alexis <alexis@attla.net.ar>

Re: IPTables, Linksys BEFSR41 and PCAnywhere

[A. Clausen]

----- Original Message ----- 
From: "Alexis" <alexis@attla.net.ar>
To: <netfilter@lists.netfilter.org>
Sent: Thursday, January 15, 2004 10:18
Subject: Re: IPTables, Linksys BEFSR41 and PCAnywhere


> youre right, just dont forget that pc anywhere uses 2 ports, that i
> think they are 5631 and 5631 tcp
>
> the linksys is with nat enabled? (its just to know, forwarding the ports
> is enough to work)

That's good to hear.  The problem is that it was another company that
administrates their network and some specialized software, and he's
insisting that the Linksys won't do this, when I've seen D-links and
Livingstons work quite well.  I did research, and PCAnywhere works fine
through NAT networks, and I thought the claim pretty dubious, but sometimes
dubious claims are right.

-- 
A. Clausen

techlists@alberni.net

Re: IPTables, Linksys BEFSR41 and PCAnywhere

[Alexis]

i have a lot of customers with linksys devices and the port fowarding
works fine.

i dont know why they said that linksys will not work.



On Thu, 2004-01-15 at 15:30, A. Clausen wrote:
> ----- Original Message ----- 
> From: "Alexis" <alexis@attla.net.ar>
> To: <netfilter@lists.netfilter.org>
> Sent: Thursday, January 15, 2004 10:18
> Subject: Re: IPTables, Linksys BEFSR41 and PCAnywhere
> 
> 
> > youre right, just dont forget that pc anywhere uses 2 ports, that i
> > think they are 5631 and 5631 tcp
> >
> > the linksys is with nat enabled? (its just to know, forwarding the ports
> > is enough to work)
> 
> That's good to hear.  The problem is that it was another company that
> administrates their network and some specialized software, and he's
> insisting that the Linksys won't do this, when I've seen D-links and
> Livingstons work quite well.  I did research, and PCAnywhere works fine
> through NAT networks, and I thought the claim pretty dubious, but sometimes
> dubious claims are right.
-- 
Alexis <alexis@attla.net.ar>

Re: IPTables, Linksys BEFSR41 and PCAnywhere

[Unknown, Alistair Tonner]

On January 15, 2004 01:52 pm, Alexis wrote:
> i have a lot of customers with linksys devices and the port fowarding
> works fine.
>
> i dont know why they said that linksys will not work.
>
> On Thu, 2004-01-15 at 15:30, A. Clausen wrote:
> > ----- Original Message -----
> > From: "Alexis" <alexis@attla.net.ar>
> > To: <netfilter@lists.netfilter.org>
> > Sent: Thursday, January 15, 2004 10:18
> > Subject: Re: IPTables, Linksys BEFSR41 and PCAnywhere
> >
> > > youre right, just dont forget that pc anywhere uses 2 ports, that i
> > > think they are 5631 and 5631 tcp
> > >
> > > the linksys is with nat enabled? (its just to know, forwarding the
> > > ports is enough to work)
> >
> > That's good to hear.  The problem is that it was another company that
> > administrates their network and some specialized software, and he's
> > insisting that the Linksys won't do this, when I've seen D-links and
> > Livingstons work quite well.  I did research, and PCAnywhere works fine
> > through NAT networks, and I thought the claim pretty dubious, but
> > sometimes dubious claims are right.


	Unh.
	the company I work for has over 50 of these in the field supporting *both* 
	VPN and pcanywhere connections to remote sites.  -- I don't use these connections
	myself, but I've seen them used by the support staff for the devices on the other end.

	Once programmed and locked up correctly they work wonderfully.

	-- could be our network support staff *might* have done something interesting to the 
	code on board by I *highly* doubt that....


	Alistair

AW: IPTables, Linksys BEFSR41 and PCAnywhere

[misiu_]

Hi,

I don't know if it helps you, but I tryed this @ work.
Ich had the following setup

myworkstation ---->> PCwithIPTABLES ---->Corporate LAN ----->>> LAPTOP

I made Masquerading for myworkstation and 'casuse I had 2 adresses I made
a static nat corporateip-----NAT---->>>myworkstation_myadressrange

PC-Anywhere works fine. So ot should not be the IPTABLES.

hope that helps
misiu
-----Ursprüngliche Nachricht-----
Von: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]Im Auftrag von A. Clausen
Gesendet: Donnerstag, 15. Januar 2004 19:30
An: 'Netfilter Mailing List'
Betreff: Re: IPTables, Linksys BEFSR41 and PCAnywhere



----- Original Message -----
From: "Alexis" <alexis@attla.net.ar>
To: <netfilter@lists.netfilter.org>
Sent: Thursday, January 15, 2004 10:18
Subject: Re: IPTables, Linksys BEFSR41 and PCAnywhere


> youre right, just dont forget that pc anywhere uses 2 ports, that i
> think they are 5631 and 5631 tcp
>
> the linksys is with nat enabled? (its just to know, forwarding the ports
> is enough to work)

That's good to hear.  The problem is that it was another company that
administrates their network and some specialized software, and he's
insisting that the Linksys won't do this, when I've seen D-links and
Livingstons work quite well.  I did research, and PCAnywhere works fine
through NAT networks, and I thought the claim pretty dubious, but sometimes
dubious claims are right.

--
A. Clausen

techlists@alberni.net

Re: IPTables, Linksys BEFSR41 and PCAnywhere

[Caracal - G. Hostettler]

Mmhhh, just a typo,

IANA says 5631 and 5632 TCP and UDP. But you can forget UDP.

GH

----- Original Message ----- 
From: "Alexis" <alexis@attla.net.ar>
To: <netfilter@lists.netfilter.org>
Sent: Thursday, January 15, 2004 7:18 PM
Subject: Re: IPTables, Linksys BEFSR41 and PCAnywhere


> youre right, just dont forget that pc anywhere uses 2 ports, that i
> think they are 5631 and 5631 tcp
>
> the linksys is with nat enabled? (its just to know, forwarding the ports
> is enough to work)
>
>
> On Thu, 2004-01-15 at 15:06, A. Clausen wrote:
> > We are using netfilter to run a broadband wireless network.  For
customers
> > wanting a public IP, we simply forward a public IP to an internal NAT
IP.
> >
> > We have one customer who wants to use PCAnywhere remotely to contact his
> > machine on the inside.  As usual, I simply forwarded a public IP to the
> > private IP.  On the private IP they have a Linksys BEFSR41 router.
> >
> > Basically it looks like this:
> >
> > public ip ---> Linux netfilter router ---> private ip ---> Linksys
> > router ---> customer's network
> >
> > He is insisting that he needs to actually have a public IP, rather than
just
> > having our Linux router forward a public IP to a private.  We have other
> > customers doing similiar things, one even opening up ports for MS-SQL
> > server, without a problem, so I'm presuming that this customer is coming
> > from a position of ignorance.  But before I start digging deeper, I need
> > confirmation that this Linksys router is not some bizarre piece of
hardware.
> -- 
> Alexis <alexis@attla.net.ar>
>
>