Ïðîáëåìû ñ RAdmin è Remote Desktop

Ñòîëêíóëñÿ ñ ïðîáëåìîé óñòàíîâêè ñîåäèíåíèÿ ïðè ïîìîùè Radmin 3.
Íàñòðàèâàë ðîóòåð, çà êîòîðûì ñòîèò êîìïüþòåð ñ ñåðâåðíîé ÷àñòüþ Radmin ïî èíñòðóêöèè íà âàøåì ôîðóìå.
Ïåðåïðîáîâàë âñå âîçìîæíûå êîìáèíàöèè íàñòðîåê, íî äîñòóïíîñòè ïîðòà 4899 èç èíòåðíåòà äîáèòüñÿ íå ñìîã.
Ïðè÷åì, ïðè ïîïûòêå ñîåäèíåíèÿ ñ êîìïüþòåðà, íàõîäÿùåãîñÿ â ëîêàëüíîé ñåòè (óêàçûâàë âíåøíèé ip ðîóòåðà äëÿ ñîåäèíåíèÿ) âñå ïðîõîäèò íà óðà - ñîåäèíåíèå ìîìåíòàëüíî óñòàíàâëèâàåòñÿ.

Âåðñèÿ ïðîøèâêè: 1.9.2.7-10
Ðîóòåð: WL-500gP

Íà êîìïüþòåðå ôàéåðâîë îòêëþ÷åí.

Íàñòðîéêè ðîóòåðà:
Virtual Server: http://s61.radikal.ru/i174/0810/44/5b5236946116.jpg
Firewall Basic Config: http://s47.radikal.ru/i118/0810/3f/a7fa2628cd95.jpg
WAN and LAN filter: http://s55.radikal.ru/i149/0810/a4/a5160b828398.jpg
IP Config - DHCP: http://i080.radikal.ru/0810/7e/0d3af0495f82.jpg
Status - Port Forwarding: http://s54.radikal.ru/i143/0810/48/71aa921222b4.jpg

Ïðîâåðêà íà äîñòóïíîñòü ïîðòà: http://i078.radikal.ru/0810/99/3aaa28eba75f.png

Çàðàíåå ñïàñèáî çà ïîìîùü.

ß êîíå÷íî íå áîëüøîé ñïåö, íî â Âàøèõ íàñòðîéêàõ íå óïîìèíàåòñÿ ïîðò 3128, òàê ïî÷åìó æå Âû ëîìèòåñü íà ýòîò ïîðò? È íå ñîâåòóþ èñïîëüçîâàòü ñòàíäàðòíûé ïîðò radmin`à - ëîìàíóò.

Ïðîøó ïðîùåíèÿ, ýòî îïå÷àòêà áûëà. Êîíå÷íî æå, ðå÷ü èäåò î ïîðòå 4899.  Virtual Server ôîðâàðä óñòàíîâëåí, â DHCP êîìï ïðîïèñàí.
Îá îïàñíîñòè îòêðûòèÿ ýòîãî ïîðòà ÿ çíàþ.  ñëó÷àå óñïåøíîé íàñòðîéêè åãî ïîìåíÿþ. Ïðîñòî ñåé÷àñ äëÿ óïðîùåíèÿ îñòàâèë âñå ïî-óìîë÷àíèþ...

Óâàæàåìûå ôîðóì÷àíå! Ïðîáëåìà äî ñèõ ïîð àêòóàëüíà. Êòî-íèáóäü ìîæåò ïîìî÷ü?

À âûïîëíèòå iptables-save è ðåçóëüòàò âûëîæèòå ñþäà.

# Generated by iptables-save v1.2.7a on Fri Oct 10 07:06:52 2008
*nat
:PREROUTING ACCEPT [44667:5933964]
:POSTROUTING ACCEPT [13926:838393]
:OUTPUT ACCEPT [13966:852976]
:VSERVER - [0:0]
-A PREROUTING -d 79.111.50.136 -j VSERVER
-A PREROUTING -d 10.92.75.148 -j VSERVER
-A POSTROUTING -s ! 79.111.50.136 -o ppp0 -j MASQUERADE
-A POSTROUTING -s ! 10.92.75.148 -o vlan1 -j MASQUERADE
-A POSTROUTING -s 192.168.1.0/255.255.255.0 -d 192.168.1.0/255.255.255.0 -o br0 -j MASQUERADE
-A VSERVER -p tcp -m tcp --dport 8080 -j DNAT --to-destination 192.168.1.1:80
-A VSERVER -p tcp -m tcp --dport 4899 -j DNAT --to-destination 192.168.1.100:4899
-A VSERVER -p udp -m udp --dport 4899 -j DNAT --to-destination 192.168.1.100:4899
-A VSERVER -p udp -m udp --dport 28625 -j DNAT --to-destination 192.168.1.100:28625
-A VSERVER -p tcp -m tcp --dport 28625 -j DNAT --to-destination 192.168.1.100:28625
COMMIT
# Completed on Fri Oct 10 07:06:52 2008
# Generated by iptables-save v1.2.7a on Fri Oct 10 07:06:52 2008
*mangle
:PREROUTING ACCEPT [18112895:17419174451]
:INPUT ACCEPT [1066822:717412844]
:FORWARD ACCEPT [17007959:16696954930]
:OUTPUT ACCEPT [951136:160458824]
:POSTROUTING ACCEPT [18077194:16899384126]
COMMIT
# Completed on Fri Oct 10 07:06:52 2008
# Generated by iptables-save v1.2.7a on Fri Oct 10 07:06:52 2008
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [625763:105869464]
:MACS - [0:0]
:SECURITY - [0:0]
:logaccept - [0:0]
:logdrop - [0:0]
-A INPUT -m state --state INVALID -j DROP
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -m state --state NEW -j ACCEPT
-A INPUT -i br0 -m state --state NEW -j ACCEPT
-A INPUT -d 224.0.0.0/240.0.0.0 -p 2 -j ACCEPT
-A INPUT -d 224.0.0.0/240.0.0.0 -p udp -m udp ! --dport 1900 -j ACCEPT
-A INPUT -p udp -m udp --sport 67 --dport 68 -j ACCEPT
-A INPUT -d 192.168.1.1 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -p tcp -m tcp --dport 515 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 9100 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 3838 -j ACCEPT
-A INPUT -j DROP
-A FORWARD -d 192.168.1.100 -p tcp -m tcp --dport 28625 -j ACCEPT
-A FORWARD -d 192.168.1.100 -p udp -m udp --dport 28625 -j ACCEPT
-A FORWARD -i br0 -o br0 -j ACCEPT
-A FORWARD -m state --state INVALID -j DROP
-A FORWARD -d 224.0.0.0/240.0.0.0 -p udp -j ACCEPT
-A FORWARD -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i ! br0 -o ppp0 -j DROP
-A FORWARD -i ! br0 -o vlan1 -j DROP
-A FORWARD -i br0 -j ACCEPT
-A FORWARD -m conntrack --ctstate DNAT -j ACCEPT
-A FORWARD -o br0 -j ACCEPT
-A SECURITY -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN -m limit --limit 1/sec -j RETURN
-A SECURITY -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK RST -m limit --limit 1/sec -j RETURN
-A SECURITY -p udp -m limit --limit 5/sec -j RETURN
-A SECURITY -p icmp -m limit --limit 5/sec -j RETURN
-A SECURITY -j DROP
-A logaccept -m state --state NEW -j LOG --log-prefix "ACCEPT " --log-tcp-sequence --log-tcp-options --log-ip-options
-A logaccept -j ACCEPT
-A logdrop -m state --state NEW -j LOG --log-prefix "DROP " --log-tcp-sequence --log-tcp-options --log-ip-options
-A logdrop -j DROP
COMMIT
# Completed on Fri Oct 10 07:06:52 2008

Âû çíàåòå, ñóäÿ ïî iptables, ïðîáëåìà íå â ðîóòåðå.
Ïðîâåðüòå åù¸ ðàç, ÷òî ó êîìïà äåéñòâèòåëüíî àäðåñ 192.168.1.100, ÷òî radmin ñëóøàåò ïîðò 4899, ÷òî íà êîìïå è â radmin-å íåò îãðàíè÷åíèé íà âõîäÿùèå ip.  êîíöå êîíöîâ, âîçìîæíî, ÷òî ïîðò áëîêèðóåò ïðîâàéäåð.

Êñòàòè, íà ñêðèíàõ âèäíî, ÷òî ó âàñ â WAN to LAN Filter â ïîëå "Packets(WAN to LAN) not specified will be" âûáðàíî ACCEPT, à ýòî íå ðåêîìåíäóåòñÿ.

Íå õâàòàåò ïðàâèëà PREROUTING ñ èíòåðôåéñà ppp0 íà ëîêàëüíûé àäðåñ.

Quote:

---

Originally Posted by vectorm

Íå õâàòàåò ïðàâèëà PREROUTING ñ èíòåðôåéñà ppp0 íà ëîêàëüíûé àäðåñ.

---

À ýòî ðàçâå íå òî?
-A PREROUTING -d 79.111.50.136 -j VSERVER
...
-A VSERVER -p tcp -m tcp --dport 4899 -j DNAT --to-destination 192.168.1.100:4899
-A VSERVER -p udp -m udp --dport 4899 -j DNAT --to-destination 192.168.1.100:4899

Âñåì ñïàñèáî. Êàê è â áîëüøèíñòâå ñëó÷àåâ, ïðîáëåìà îêàçàëàñü â êðèâûõ ðóêàõ ;)
Ó ïðîâàéäåðà áëîêèðîâàëñÿ ïîðò 4899. Ïîðò ïîìåíÿë - âñå ðàáîòàåò.

À â ados ÿ ìîãó òàê çàéòè?
ß ïðîïèñàë â Virtual Server:
Port Range:1254 (Âçÿë íàóãàä, ÷òî áû áûë íåñòàíäàðòíûé)
Local IP: 192.168.1.1 (IP ðîóòåðà)
Local Port: 8080 (Èìåííî åãî ÿ èñïîëüçóþ, êîãäà çàõîæó â ados ñ LAN)
Protocol: TCP
Protocol NO: è Discription - îñòàâèë ïóñòûìè

Çàõîæó íà http://õõõ.yyy.net:1254/ados è íè÷åãî íå ïðîèñõîäèò

ß íå î÷åíü õîðîøî ðàçáèðàþñü â ïîñòðîåíèè ñåòåé, è íàäåþñü ÷òî êòî íèáóäü ïîìîæåò ðàçîáðàòüñÿ ñî ñëåäóþùåé ïðîáëåìîé:

Èìååì WL500gP (ïðîøèâêà îò Îëåãà 1.9.2.7-10) èíòåðíåò îò ïðîâàéäåðà GoldenTelecom ïî PPTP íà vlan1 (c íèì ïðîáëåì íåò :) )

WL500gP LAN IP 192.168.1.1 ìàñêà 255.255.255.0
(DHCP îòêëþ÷åí IP â LAN ñåòè ïðîïèñûâàþòñÿ ðó÷êàìè)

vlan0 - vlan4 è Wireless - LAN (ìîÿ ìàëåíüêàÿ ñåòü) 192.168.1.0 ìàñêà 255.255.255.0

íà îäíîé èç ëîêàëüíûõ ìàøèí (192.168.1.114) ïîäíÿòà ïðîãðàììíàÿ òî÷êà äîñòóïà, PCI êàðòà ASUS WL-138g (÷èï Marvell) ñðåäñòâàìè îò ASUS (óòèëèòà SoftAP îò Marvell ïîëíîñòüþ àíàëîãè÷íà òîé ÷òî äàåò ASUS). Óòèëèòà íå ïîçâîëÿåò ïðîïèñûâàòü IP ñàìîñòîÿòåëüíî è ðàçäàåò èõ ñàìà: ñåòü 192.168.0.0 ìàñêà 255.255.255.0. Îáùèé äîñòóï ê ïîäêëþ÷åíèþ Èíòåðíåòà (ICS) íà ìàøèíå (192.168.1.114) âêëþ÷åí.
Ïðè ñîåäèíåíèè óäàëåííîé ìàøèíû/íîóòáóêà ñ ïðîãðàììíîé òî÷êîé äîñòóïà èì ðàçäàåòñÿ ñîîòâåòñòâåííî àäðåñ èç äèàïàçîíà 192.168.0.2-254 è ìàñêîé 255.255.255.0.
Óäàëåííàÿ ìàøèíà âèäèò ëîêàëüíóþ ñåòü (192.168.1.2-254) è âûõîäèò â Èíòåðíåò, îäíàêî íè ñ êàêîé äðóãîé ëîêàëüíîé ìàøèíû (íàïðèìåð 192.168.1.111) êðîìå òîé íà êîòîðîé ïîäíÿòà ïðîãðàììíàÿ òî÷êà äîñòóïà (192.168.1.114) óäàëåííàÿ ìàøèíà/íîóòáóê íå âèäíà (íå ïèíãóåòñÿ, òðàññèðîâêà èäåò â èíòåðíåò...)

ïûòàëñÿ ïðîïèñàòü ÷åðåç âåáìîðäó ðîóòèíã íà WL500gP, ñ òåì ÷òî áû ïàêåòû äëÿ ñåòè 192.168.0.0 øëè ÷åðåç øëþç 192.168.1.114:

192.168.0.0 ìàñêà 255.255.255.0 øëþç 192.168.1.114 èíòåðôåéñ LAN

íå ïîìîãàåò - òðàññèðîâêè íåò âîáùå, íå äîõîäèò äàæå äî WL500gP (192.168.1.1)

ïðîáîâàë ìåíÿòü ìàñêó â ñåòè 192.168.1.0 íà 255.255.254.0 ñ òåì ÷òî áû "îõâàòèòü" äèàïàçîí 192.168.0.1-1.254 íå ïîìîãàåò, íàâåðíîå èç-çà òîãî ÷òî â ñåòè 192.168.0.0 ìàñêó è IP èçìåíèòü ðóêàìè íåâîçìîæíî - Soft AP ñëåòàåò...)

óïðîùåííàÿ òîïîëîãèÿ ìîåé ñåòè:

http://s53.radikal.ru/i141/0812/c3/a29d4a593038.jpg

Ïîìîãèòå ñ ïðàâèëüíûì ðîóòèíãîì !!! Çàðàíåå ñïàñèáî...

PS Ãóãë, ÿíäåêñ, ïîèñê íþõàë è êóðèë - âòîðîé äåíü óæå....

À çà÷åì âñå ýòî - íå ïðîùå ïî Wi-Fi ïîäêëþ÷àòüñÿ íåïîñðåäñòâåííî ê ðîóòåðó?

Quote:

---

Originally Posted by Alexander B.

À çà÷åì âñå ýòî - íå ïðîùå ïî Wi-Fi ïîäêëþ÷àòüñÿ íåïîñðåäñòâåííî ê ðîóòåðó?

---

Äîëãî ðàññêàçûâàòü çà÷åì :) Åñëè áû ýòî áûëî ïðîùå - òî êîíå÷íî æå ïðèöåïèëñÿ áû íàïðÿìóþ ê ASUSó, â äâóõ ñëîâàõ - óäàëåííûé êîìï - ýòî CarPC â àâòîìîáèëå, ASUS ïðîñòî íå äîáèâàåò òóäà ôèçè÷åñêè... à ïåðåñòàâëÿòü åãî - íå âèæó ñìûñëà, äà è ñèëüíî ãåììîðîéíî ýòî, ïåðåñòàíîâêà îáîðóäîâàíèÿ (âñå êîììóíèêöèè äàâíî ïðîëîæåííû â ñòåíàõ...).....

PS Ñåé÷àñ íàêðîïàþ ïîëíóþ òîïîëîãèþ ëîêàëüíîé ñåòè... íà âñêèäêó - îêîëî 15 IP ....

Quote:

---

Originally Posted by aarnet

ïûòàëñÿ ïðîïèñàòü ÷åðåç âåáìîðäó ðîóòèíã íà WL500gP, ñ òåì ÷òî áû ïàêåòû äëÿ ñåòè 192.168.0.0 øëè ÷åðåç øëþç 192.168.1.114:

192.168.0.0 ìàñêà 255.255.255.0 øëþç 192.168.1.114 èíòåðôåéñ LAN

íå ïîìîãàåò - òðàññèðîâêè íåò âîáùå, íå äîõîäèò äàæå äî WL500gP (192.168.1.1)

---

ìàðøðóò ïðîïèñàëè ïðàâèëüíî, tracert è ping íå çàðàáîòàþò, ïîêà íà ICS íå ðàçðåøèòå ICMP - ôàéåðâîë íà 1.144 ðåæåò. è âîîáùå, ïðîâåðüòå ôàéåðâîë è íàñòðîéêè ICS.

ïîïðîáóéòå òóïî áðàóçåðîì íà local NB â èíåò âûéòè.