Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Okay, I'm at a complete loss...

Okay, I'm at a complete loss...

Scheduled Pinned Locked Moved The Lounge
workspacesysadminwindows-adminhelpquestion
33 Posts 14 Posters 3 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • realJSOPR realJSOP

    I'm trying to set my system at home (XP64) up to allow remote connections. Here's my setup: - DSL with static IPs - Router configured as DHCP server, and IP's are assigned according to MAC address (so the same computer always gets the same internal IP) - NAT is turned on, assigning specific external IPs to associated LAN boxes The things I've done: - Remote Connection is configured to use a specific port (I changed the registry to set this port value, and I've verified after a reboot that the desired port is still specified). - Router firewall is configured to forward all TCP/IP traffic on the specified port to the desired LAN box. - Allow remote connections is turned on. - The desired user accounts have been added to the list of accounts that are allowed to remote in. When I try to connect from work (using Vista64, and typing the IP:port), I get the message: This computer can't connect to the remote computer If I try the same thing on one of my computers at home (a XP-32 laptop), it works fine (and yes, it's going out of the router and back in because it has a different IP address). The systems folks here at work say they're not blocking any outbound traffic, so that leads me to believe that I have a configuration problem somewhere. What have I missed?

    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
    -----
    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

    M Offline
    M Offline
    Mladen Jankovic
    wrote on last edited by
    #5

    Is firewall enabled on Vista machine? Maybe it is blocking outbound connection at specified port.

    [Genetic Algorithm Library]

    realJSOPR 1 Reply Last reply
    0
    • realJSOPR realJSOP

      I'm trying to set my system at home (XP64) up to allow remote connections. Here's my setup: - DSL with static IPs - Router configured as DHCP server, and IP's are assigned according to MAC address (so the same computer always gets the same internal IP) - NAT is turned on, assigning specific external IPs to associated LAN boxes The things I've done: - Remote Connection is configured to use a specific port (I changed the registry to set this port value, and I've verified after a reboot that the desired port is still specified). - Router firewall is configured to forward all TCP/IP traffic on the specified port to the desired LAN box. - Allow remote connections is turned on. - The desired user accounts have been added to the list of accounts that are allowed to remote in. When I try to connect from work (using Vista64, and typing the IP:port), I get the message: This computer can't connect to the remote computer If I try the same thing on one of my computers at home (a XP-32 laptop), it works fine (and yes, it's going out of the router and back in because it has a different IP address). The systems folks here at work say they're not blocking any outbound traffic, so that leads me to believe that I have a configuration problem somewhere. What have I missed?

      "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
      -----
      "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

      R Offline
      R Offline
      Ray Cassick
      wrote on last edited by
      #6

      John Simmons / outlaw programmer wrote:

      and yes, it's going out of the router and back in because it has a different IP address

      Are you sure of that? The only reason I am asking is because the router knows its own external IP address so there is a chance that it is optimising the connection request from another internal device on the same subnet as the destination of the port forwarding and just looping the two together internally making you think that the router is allowing the traffic out and then back in. Just to be sure I would grab your xp32 machine and run a test using a connection that is 100% outside your internal network. Run down to the local Starbucks and borrow the WiFi to see if you can get in that way.


      LinkedIn[^] | Blog[^] | Twitter[^]

      realJSOPR 1 Reply Last reply
      0
      • M Mladen Jankovic

        Is firewall enabled on Vista machine? Maybe it is blocking outbound connection at specified port.

        [Genetic Algorithm Library]

        realJSOPR Offline
        realJSOPR Offline
        realJSOP
        wrote on last edited by
        #7

        Windows Firewall is not running on any of the fore-mentioned boxes.

        "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
        -----
        "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

        1 Reply Last reply
        0
        • E Ennis Ray Lynch Jr

          Your ISP could be blocking the traffic.

          Need custom software developed? I do C# development and consulting all over the United States.
          If you don't ask questions the answers won't stand in your way.
          Doing a job is like selecting a mule, you can't choose just the front half xor the back half so when you ask me to do a job don't expect me to do it half-assed.

          realJSOPR Offline
          realJSOPR Offline
          realJSOP
          wrote on last edited by
          #8

          Well, it's a non-standard port, so I would think that they couldn't/wouldn't block it.

          "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
          -----
          "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

          E 1 Reply Last reply
          0
          • realJSOPR realJSOP

            Well, it's a non-standard port, so I would think that they couldn't/wouldn't block it.

            "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
            -----
            "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

            E Offline
            E Offline
            Ennis Ray Lynch Jr
            wrote on last edited by
            #9

            Go to your neighbors house. It will be easier to troubleshoot running across the street rather than downtown. Bring a six-pack and they will say yes.

            Need custom software developed? I do C# development and consulting all over the United States.
            If you don't ask questions the answers won't stand in your way.
            Doing a job is like selecting a mule, you can't choose just the front half xor the back half so when you ask me to do a job don't expect me to do it half-assed.

            L 1 Reply Last reply
            0
            • Z Zoltan Balazs

              Did you try something simple? Like telnet-ing into your home box from work or any other way to access it?

              Work @ Network integrated solutions | Flickr | A practical use of the MVC pattern citizen 340340

              realJSOPR Offline
              realJSOPR Offline
              realJSOP
              wrote on last edited by
              #10

              Don't I need a telnet server running on the remote box?

              "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
              -----
              "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

              Z M 2 Replies Last reply
              0
              • realJSOPR realJSOP

                Don't I need a telnet server running on the remote box?

                "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                -----
                "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                Z Offline
                Z Offline
                Zoltan Balazs
                wrote on last edited by
                #11

                Yes you do. I was just suggesting that you should try to connect to any other open port on your box. Somehow you should isolate your problem.

                Work @ Network integrated solutions | Flickr | A practical use of the MVC pattern citizen 340340

                1 Reply Last reply
                0
                • R Ray Cassick

                  John Simmons / outlaw programmer wrote:

                  and yes, it's going out of the router and back in because it has a different IP address

                  Are you sure of that? The only reason I am asking is because the router knows its own external IP address so there is a chance that it is optimising the connection request from another internal device on the same subnet as the destination of the port forwarding and just looping the two together internally making you think that the router is allowing the traffic out and then back in. Just to be sure I would grab your xp32 machine and run a test using a connection that is 100% outside your internal network. Run down to the local Starbucks and borrow the WiFi to see if you can get in that way.


                  LinkedIn[^] | Blog[^] | Twitter[^]

                  realJSOPR Offline
                  realJSOPR Offline
                  realJSOP
                  wrote on last edited by
                  #12

                  Ray Cassick wrote:

                  The only reason I am asking is because the router knows its own external IP address so there is a chance that it is optimising the connection request from another internal device on the same subnet as the destination of the port forwarding and just looping the two together internally making you think that the router is allowing the traffic out and then back in.

                  I suppose that could be happening, but I'm not sure how to find out if that's the case...

                  "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                  -----
                  "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                  R 1 Reply Last reply
                  0
                  • realJSOPR realJSOP

                    I'm trying to set my system at home (XP64) up to allow remote connections. Here's my setup: - DSL with static IPs - Router configured as DHCP server, and IP's are assigned according to MAC address (so the same computer always gets the same internal IP) - NAT is turned on, assigning specific external IPs to associated LAN boxes The things I've done: - Remote Connection is configured to use a specific port (I changed the registry to set this port value, and I've verified after a reboot that the desired port is still specified). - Router firewall is configured to forward all TCP/IP traffic on the specified port to the desired LAN box. - Allow remote connections is turned on. - The desired user accounts have been added to the list of accounts that are allowed to remote in. When I try to connect from work (using Vista64, and typing the IP:port), I get the message: This computer can't connect to the remote computer If I try the same thing on one of my computers at home (a XP-32 laptop), it works fine (and yes, it's going out of the router and back in because it has a different IP address). The systems folks here at work say they're not blocking any outbound traffic, so that leads me to believe that I have a configuration problem somewhere. What have I missed?

                    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                    -----
                    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                    M Offline
                    M Offline
                    MrPlankton
                    wrote on last edited by
                    #13

                    Reconfigure your home router/firewall for detection and assumption that a black hole router is in-stream.

                    MrPlankton
                    The Second Amendment, the Reset Button on the Constitution

                    realJSOPR 1 Reply Last reply
                    0
                    • M MrPlankton

                      Reconfigure your home router/firewall for detection and assumption that a black hole router is in-stream.

                      MrPlankton
                      The Second Amendment, the Reset Button on the Constitution

                      realJSOPR Offline
                      realJSOPR Offline
                      realJSOP
                      wrote on last edited by
                      #14

                      What?

                      "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                      -----
                      "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                      M 1 Reply Last reply
                      0
                      • realJSOPR realJSOP

                        What?

                        "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                        -----
                        "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                        M Offline
                        M Offline
                        MrPlankton
                        wrote on last edited by
                        #15

                        black hole routers[^]

                        MrPlankton
                        The Second Amendment, the Reset Button on the Constitution

                        1 Reply Last reply
                        0
                        • realJSOPR realJSOP

                          I'm trying to set my system at home (XP64) up to allow remote connections. Here's my setup: - DSL with static IPs - Router configured as DHCP server, and IP's are assigned according to MAC address (so the same computer always gets the same internal IP) - NAT is turned on, assigning specific external IPs to associated LAN boxes The things I've done: - Remote Connection is configured to use a specific port (I changed the registry to set this port value, and I've verified after a reboot that the desired port is still specified). - Router firewall is configured to forward all TCP/IP traffic on the specified port to the desired LAN box. - Allow remote connections is turned on. - The desired user accounts have been added to the list of accounts that are allowed to remote in. When I try to connect from work (using Vista64, and typing the IP:port), I get the message: This computer can't connect to the remote computer If I try the same thing on one of my computers at home (a XP-32 laptop), it works fine (and yes, it's going out of the router and back in because it has a different IP address). The systems folks here at work say they're not blocking any outbound traffic, so that leads me to believe that I have a configuration problem somewhere. What have I missed?

                          "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                          -----
                          "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                          R Offline
                          R Offline
                          Rob Manderson
                          wrote on last edited by
                          #16

                          I ran into this configuring my own system. I bet your firewall is blocking the port. At least on my systems (XPSP3 32 bit) the pre defined Remote Desktop exception is hardwired to port 3389 so if you change the port you need to create a new exception. Try this (I'm assuming windows firewall). Make sure exceptions are enabled. On the exceptions tab, add a new port, specifying the port you assigned to remote access. Select TCP and make sure the scope allows 'Any computer (including those on the internet)'. [Edit] Shoulda read all the responses - if you're not running a software firewall then the above advice will resemble a one legged man in a bum kicking contest [/Edit]

                          Rob Manderson My bloghttp://robmanderson.blogspot.com[^]

                          L 1 Reply Last reply
                          0
                          • realJSOPR realJSOP

                            Don't I need a telnet server running on the remote box?

                            "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                            -----
                            "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                            M Offline
                            M Offline
                            Mladen Jankovic
                            wrote on last edited by
                            #17

                            As Zoltan suggested try telnet computer-ip-address remote-desktop-port in command prompt at your office, just to see if you can establish TCP connection with home PC at specified port. You don't need telnet server, all you need is something that listens on that port and you already have Remote Desktop enabled. If you can establish connection you'll get blank screen, otherwise telnet client will display error :)

                            [Genetic Algorithm Library]

                            realJSOPR 1 Reply Last reply
                            0
                            • E Ennis Ray Lynch Jr

                              Go to your neighbors house. It will be easier to troubleshoot running across the street rather than downtown. Bring a six-pack and they will say yes.

                              Need custom software developed? I do C# development and consulting all over the United States.
                              If you don't ask questions the answers won't stand in your way.
                              Doing a job is like selecting a mule, you can't choose just the front half xor the back half so when you ask me to do a job don't expect me to do it half-assed.

                              L Offline
                              L Offline
                              Luc Pattyn
                              wrote on last edited by
                              #18

                              Ennis Ray Lynch, Jr. wrote:

                              Go to your neighbors house... Bring a six-pack

                              You live next to John then? :)

                              Luc Pattyn [Forum Guidelines] [My Articles]


                              - before you ask a question here, search CodeProject, then Google - the quality and detail of your question reflects on the effectiveness of the help you are likely to get - use the code block button (PRE tags) to preserve formatting when showing multi-line code snippets


                              1 Reply Last reply
                              0
                              • realJSOPR realJSOP

                                I'm trying to set my system at home (XP64) up to allow remote connections. Here's my setup: - DSL with static IPs - Router configured as DHCP server, and IP's are assigned according to MAC address (so the same computer always gets the same internal IP) - NAT is turned on, assigning specific external IPs to associated LAN boxes The things I've done: - Remote Connection is configured to use a specific port (I changed the registry to set this port value, and I've verified after a reboot that the desired port is still specified). - Router firewall is configured to forward all TCP/IP traffic on the specified port to the desired LAN box. - Allow remote connections is turned on. - The desired user accounts have been added to the list of accounts that are allowed to remote in. When I try to connect from work (using Vista64, and typing the IP:port), I get the message: This computer can't connect to the remote computer If I try the same thing on one of my computers at home (a XP-32 laptop), it works fine (and yes, it's going out of the router and back in because it has a different IP address). The systems folks here at work say they're not blocking any outbound traffic, so that leads me to believe that I have a configuration problem somewhere. What have I missed?

                                "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                -----
                                "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                R Offline
                                R Offline
                                Richard Green
                                wrote on last edited by
                                #19

                                On your port forwarding rule in the firewall see if there is a SNAT (Source NAT) option and make sure its enabled. I had a similar issue this week when setting up a new subset behind a new router, the ports where all forwarded correctly but I was unable to establish a connection. It turns out the router i was using was passing the data to the backend machine running RDP but then when it was replying the gateway was sending the data from its own IP address and, of course, the client didn't know where the data was coming from. Source NAT will make the data appear to come from the IP of the backend machine and not the gateway and solve this issue (or at least did for me).

                                Richard Green

                                1 Reply Last reply
                                0
                                • M Mladen Jankovic

                                  As Zoltan suggested try telnet computer-ip-address remote-desktop-port in command prompt at your office, just to see if you can establish TCP connection with home PC at specified port. You don't need telnet server, all you need is something that listens on that port and you already have Remote Desktop enabled. If you can establish connection you'll get blank screen, otherwise telnet client will display error :)

                                  [Genetic Algorithm Library]

                                  realJSOPR Offline
                                  realJSOPR Offline
                                  realJSOP
                                  wrote on last edited by
                                  #20

                                  Well, it gave an error. But it also gave an error on port 80 for my web server, which I know for a fact works fine.

                                  "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                  -----
                                  "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                  M 1 Reply Last reply
                                  0
                                  • realJSOPR realJSOP

                                    I'm trying to set my system at home (XP64) up to allow remote connections. Here's my setup: - DSL with static IPs - Router configured as DHCP server, and IP's are assigned according to MAC address (so the same computer always gets the same internal IP) - NAT is turned on, assigning specific external IPs to associated LAN boxes The things I've done: - Remote Connection is configured to use a specific port (I changed the registry to set this port value, and I've verified after a reboot that the desired port is still specified). - Router firewall is configured to forward all TCP/IP traffic on the specified port to the desired LAN box. - Allow remote connections is turned on. - The desired user accounts have been added to the list of accounts that are allowed to remote in. When I try to connect from work (using Vista64, and typing the IP:port), I get the message: This computer can't connect to the remote computer If I try the same thing on one of my computers at home (a XP-32 laptop), it works fine (and yes, it's going out of the router and back in because it has a different IP address). The systems folks here at work say they're not blocking any outbound traffic, so that leads me to believe that I have a configuration problem somewhere. What have I missed?

                                    "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                    -----
                                    "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                    M Offline
                                    M Offline
                                    Member 96
                                    wrote on last edited by
                                    #21

                                    I think the best advice was to try it from another network like a wifi hotspot etc. "System folks at work" generally can't tell their elbow from their asshole and there's a very good chance one or both isp's *are* blocking certain ports. What you need to do is enable as many services on your home box as possible so you can try them all, i.e. a web server, telnet, mail, etc then try it from another network.


                                    "It's so simple to be wise. Just think of something stupid to say and then don't say it." -Sam Levenson

                                    realJSOPR 1 Reply Last reply
                                    0
                                    • realJSOPR realJSOP

                                      Well, it gave an error. But it also gave an error on port 80 for my web server, which I know for a fact works fine.

                                      "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                      -----
                                      "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                      M Offline
                                      M Offline
                                      Mladen Jankovic
                                      wrote on last edited by
                                      #22

                                      Are you sure the syntax is correct? Don't use : to split host and port. For example:

                                      telnet 192.168.0.1 80

                                      [Genetic Algorithm Library]

                                      realJSOPR 1 Reply Last reply
                                      0
                                      • M Mladen Jankovic

                                        Are you sure the syntax is correct? Don't use : to split host and port. For example:

                                        telnet 192.168.0.1 80

                                        [Genetic Algorithm Library]

                                        realJSOPR Offline
                                        realJSOPR Offline
                                        realJSOP
                                        wrote on last edited by
                                        #23

                                        yes, that's the way i did it.

                                        "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                        -----
                                        "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                        1 Reply Last reply
                                        0
                                        • M Member 96

                                          I think the best advice was to try it from another network like a wifi hotspot etc. "System folks at work" generally can't tell their elbow from their asshole and there's a very good chance one or both isp's *are* blocking certain ports. What you need to do is enable as many services on your home box as possible so you can try them all, i.e. a web server, telnet, mail, etc then try it from another network.


                                          "It's so simple to be wise. Just think of something stupid to say and then don't say it." -Sam Levenson

                                          realJSOPR Offline
                                          realJSOPR Offline
                                          realJSOP
                                          wrote on last edited by
                                          #24

                                          John C wrote:

                                          there's a very good chance one or both isp's *are* blocking certain ports

                                          Well, I can RDC from home (the same machine I'm trying to connect to from here) to this machine, and other people here can RDC from here to their home machines, as well as RDC from their home machines too their boxes here at work (at least one is using UVerse, and at least one is using Time Warner). I seriously doubt that any ports are being blocked anywhere. I have a web server running on another machine at home, and I can connect to that just fine (through a browser).

                                          "Why don't you tie a kerosene-soaked rag around your ankles so the ants won't climb up and eat your candy ass..." - Dale Earnhardt, 1997
                                          -----
                                          "...the staggering layers of obscenity in your statement make it a work of art on so many levels." - Jason Jystad, 10/26/2001

                                          1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups