Óäàëåííûé äîñòóï

**al37919** · 11-01-2008, 07:17

äëÿ äîñòóïà ê ðåñóðñàì ëîêàëüíîé ñåòè ëó÷øå íå ïðîñòî îòêðûâàòü ïîðòû íàðóæó, à èñïîëüçîâàòü ssh òóííåëü (íà ìîé âçãëÿä îíî è ïðîùå, ò.ê. íóæíî îòêðûòü îäèí åäèíñòâåííûé ssh ïîðò)

Ïîñëåäîâàòåëüíîñòü äåéñòâèé:

1) çàïóñòèòü dropbear è äîáèòüñÿ äîñòóïà ê íåìó èç wan (ïóòåì ìàíèïóëÿöèé ñ post-firewall)
2) åñëè ôàéðâîë íà ðîóòåðå íàñòðîåí, òî ôàéðâîëû íà âíóòðåííèõ êîìïàõ ìîæíî îòðóáèòü èëè ïðîáðîñèòü òðåáóåìûå ïîðòû èëè ïðèëîæåíèÿ
3) ñîçäàòü ñîåäèíåíèå ñ ðîóòåðîì â putty è ïðîïèñàòü â íåì òóííåëü äî êîìïà â lan

Âñå ýòè âîïðîñû óæå íå ðàç îáñóæäàëèñü, òàê ÷òî ïîèùèòå.

Â ðåçóëüòàòå äëÿ ñîçäàíèÿ òóííåëÿ (óñòàíîâëåíèÿ ñîåäèíåíèÿ) íàäî çàïóñòèòü putty è àâòîðèçîâàòüñÿ. Ïîñëå ýòîãî ìîæíî çàïóñêàòü òî ïðèëîæåíèå, êîòîðîå ñîáñòâåííî íóæíî.

Â èòîãå èìååì äîâîëüíî áåçîïàñíîå ñîåäèíåíèå, ïðè÷åì äîáàâëåíèå äîñòóïà ê äðóãèì ñåðâèñàì lan (íàïðèìåð âåá-èíòåðôåéñ ðîóòåðà, òîððåíòà, àäîñ, ïî÷òîâûì ñåðâèñàì, remote desktop, X è ò.ä.) ïðîèçâîäèòñÿ ïóòåì äîáàâëåíèÿ åùå îäíîãî òóííåëÿ â íàñòðîéêàõ putty

**DJey** · 11-01-2008, 08:14

Originally Posted by MIB

Ïðîøó ïîìî÷ü ñ íàñòðîéêàìè äëÿ óäàëåííîãî äîñòóïà ê ðàáî÷åìó ñòîëó Vista Ult ÷åðåç Wl 500gp. Äî óñòàíîâêè ðîóòåðà âñå ðàáîòàëî, ïîñëå óñòàíîâêè íå ìîãó ïîïàñòü íà ðàá.ñòîë., âèäèìî â ñèëó òîãî , ÷òî çàáëîêèðîâàí äîñòóï èç âíå...

P.S. À ñ íàñòðîéêàìè uttorent ìíå íàâåðíî íèêòî òàê è íå ïîìîæåò...

Íàïîìíþ, ÷òî áûëà ïðîáëåìà ñ ÷àñòûìè äèñêîííåêòàìè êàæäûå 2 -5 ìèíóò ïðè ñêà÷èâàíèè ôàéëîâ ÷åðåç utorrent. Ïðè îòäà÷å âðîäå âñå ok.

Äëÿ îòêðûòèÿ äîñòóïà ê óäàëåííîìó ðàáî÷åìó ñòîëó RDP, íåîáõîäèìî ïðîáðîñèòü ïîðò 3389, íà êîìïüþòåð ê êîòîðîìó Âû õîòèòå ïîäêëþ÷èòüñÿ:
NAT Setting => Virtual Server, Ïðè ýòîì Enable Virtual Server - äîëæåí áûòü â YES

Íàñ÷åò uTorrent - ïîïðîáóéòå êàê ó ìåíÿ ñäåëàíî, åñëè ïîðò ó Âàñ äðóãîé, òî ïåðåïðàâòå íà ñâîé.

**FilimoniC** · 12-01-2008, 09:36

Òîëüêî ïîñëå ýòîãî ìîãóò õàêíóòü. SSH-òóííåëü íàäåæíåå, õîòÿ è ÷óòîê ñëîæíåå

**DJey** · 12-01-2008, 09:56

Originally Posted by FilimoniC

Òîëüêî ïîñëå ýòîãî ìîãóò õàêíóòü. SSH-òóííåëü íàäåæíåå, õîòÿ è ÷óòîê ñëîæíåå

Âñå ýòî êîíå÷íî õîðîøî, êîãäà åñòü SSH êëèåíò ïîä ðóêîé, à êîãäà íóæíî ñðî÷íî çàéòè ñ ÷óæîé ìàøèíû èëè êîììóíèêàòîðà íà êîòîðîì êðîìè RDP êëèåíòà íè÷åãî íåò, òîãäà è ïîëó÷èòñÿ, ÷òî õîòåëè êàê ëó÷øå, à ïîëó÷èëîñü êàê âñåãäà, â êîíöå êîíöîâ ïîðò ìîæíî è äðóãîé íàçíà÷èòü äëÿ áîëüøåé ñåêþðíîñòè.

**louso** · 22-06-2008, 22:01

Â êîíòîðå ñòîèò WL-500gp ðàçäà¸ò èíåò è èìååò ðåàëüíûé Ip Àäðåñ. íà îäíîì èç âíóòðåííèõ êîìïîâ âèñèò 1ñ áàçà êàê ìîæíî ê íåé ïîäêëþ÷àòñÿ èç èíåòà. ß òàê ïîíÿë íàäî äîáðàòñÿ äî ðàñøàðèíåííîé ïàïêè.
Ïðîñòî íåò èäåé ïîäñêàæèòå ÷òî íèòü.

**vs12345** · 22-06-2008, 22:24

ïðèâåò
íó ê ïàïêå êîíå÷íî ìîæíî, íî ÿ òåáå íå ðåêîìåíäóþ, ñèëüíî, - ïðè ïðîáëåìå ñî ñâÿçüþ (à òàêîå ñëó÷àåòñÿ) 1ñ âûëåòèò, ïàðà-òðîéêà âûëåòîâ - è â îäèí ïðåêðàñíûé ìîìåíò 1ñÁàçà ïîâðåäèòñÿ...

- Ëó÷øèé âàðèàíò äëÿ 1ñ - èñïîëüçîâàíèå ñåðâåðà òåðìèíàëîâ
êëèåíò ïîäêëþ÷àåòñÿ ïî èíòåðíåòó ê ñåðâåðó, è ðàáîòàåò ñ 1ñ áàçîé ñ ëþáîé òî÷êè, íî 1c.exe çàïóñêàåòñÿ íà ìàøèíå êîòîðàÿ è ñëóæèò îíûì ñåðâåðîì.
ïðîãðàììà êëèåíò ñòàâèòüñÿ äàæå â ñòàíäàðòíîé óñòàíîâêå XP - mstsc.exe
à ñåðâåðîì ìîæåò ñëóæèòü Server2003, XP Prof è ïî-ìîåìó äàæå XP Home

ñõîæèå ïî ñóòè òåìû
http://wl500g.info/showthread.php?t=11896
http://wl500g.info/showthread.php?t=14779
http://wl500g.info/showthread.php?t=14870

**louso** · 23-06-2008, 04:29

Âûêëàäûâàòü áàçó íà øàðó ðîóòåðà íå âûõîä. Äà è ñòð¸ìíî êàê òî.
Ñ ñåðâåðîì òåðìèíàëîì òîæå îáëîì òàê êàê êîìïîâ âñåãî 3 äà è òî äîõëûå è ñòàâèòü íà íèõ 2003 íå âûõîä. À â ÕÐ ìîæíî ðàáîòàòü òîëüêî îäíèì ïîëüçîâàòåëåì. Òóò íàäî ëèáî êàê òî íàñòðîèòü ÷òî áû øàðà îäíîãî èç êîìïîâ òðàíñëèðîâàëàñü íà âíåøíèé ÈÏ èëè ñäåëàòü íà ðîóòåðå Âíåøíèé VPN ÷òî áû îí ïóñêàë åù¸ 1 êîìï âî âíóòðåííèþ ñåòü.

**Sagitarius** · 23-06-2008, 05:57

Originally Posted by louso

À â ÕÐ ìîæíî ðàáîòàòü òîëüêî îäíèì ïîëüçîâàòåëåì.

Íåïðàâäà âàøà.

**dinn** · 23-06-2008, 14:25

Âàðèàíò ïàò÷èê ïîñòàâèòü è òîãäà ÕÏ ìîæíî áóäåò þçàòü ïîä òåðìèíàëîì, ñìîòðè ëèíê:
http://uran238.nnm.ru/windows_xp_pro...ver_terminalov

**Sagitarius** · 23-06-2008, 16:57

Originally Posted by louso

Â êîíòîðå ñòîèò WL-500gp ðàçäà¸ò èíåò è èìååò ðåàëüíûé Ip Àäðåñ. íà îäíîì èç âíóòðåííèõ êîìïîâ âèñèò 1ñ áàçà êàê ìîæíî ê íåé ïîäêëþ÷àòñÿ èç èíåòà. ß òàê ïîíÿë íàäî äîáðàòñÿ äî ðàñøàðèíåííîé ïàïêè.
Ïðîñòî íåò èäåé ïîäñêàæèòå ÷òî íèòü.

Ìîæíî ïîïðîáîâàòü Hamachi (áóäóò ëîêàëüíî è äèñêè è ïðèíòåðû), ïðàâäà ýòî è åñòü àëÿ ÂÏÍ.

**louso** · 24-06-2008, 04:27

÷òî åñòü Hamachi ïîæàëóéñòà ïîïîäðîáíåå

**kir-g** · 24-06-2008, 07:05

Originally Posted by louso

÷òî åñòü Hamachi ïîæàëóéñòà ïîïîäðîáíåå

Ïðîãðàììà ñòàâèòñÿ íà îáà êîìïà è äåëàåòñÿ ÂÏÍ åå ïëþñ â òîì, ÷òî îñîáî çàìîðà÷èâàòüñÿ íå íàäî

**louso** · 24-06-2008, 07:36

Originally Posted by kir-g

Ïðîãðàììà ñòàâèòñÿ íà îáà êîìïà è äåëàåòñÿ ÂÏÍ åå ïëþñ â òîì, ÷òî îñîáî çàìîðà÷èâàòüñÿ íå íàäî

ïëîõî ÷òî ïëàòíàÿ.

**icexxx** · 19-08-2008, 16:13

Ïðîïàë äîñòóï èç îôèñà ê ìîåìó WL500GP.
Putty ãðÿçíî ðóãàåòñÿ: Connection reset by peer
Ïîíèìàþ ÷òî ñàìî íå ìîãëî, íî òåì íå ìåíåå.
Ïîìîãèòå êòî ÷åì ìîæåò

Code:

Âîò ëîã:
Aug 19 18:36:33 dropbear[203]: Child connection from ::ffff:192.168.1.2:4858
Aug 19 18:36:38 dropbear[203]: password auth succeeded for 'root' from ::ffff:192.168.1.2:4858
Aug 19 18:39:56 dropbear[208]: Child connection from ::ffff:212.45.3.118:20390
Aug 19 18:39:56 dropbear[208]: exit before auth: error writing
Aug 19 18:42:08 nmbd[192]: [2008/08/19 18:42:08, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(405) 
Aug 19 18:42:08 nmbd[192]:   ***** 
Aug 19 18:42:08 nmbd[192]:    
Aug 19 18:42:08 nmbd[192]:   Samba name server WL500GP is now a local master browser for workgroup WORKGROUP on subnet 192.168.1.1 
Aug 19 18:42:08 nmbd[192]:    
Aug 19 18:42:08 nmbd[192]:   *****

Code:

iptables -L INPUT -vn

Chain INPUT (policy DROP 1353 packets, 111K bytes)
 pkts bytes target     prot opt in     out     source               destination
   35  2600 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          state INVALID
 142K   12M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0          state RELATED,ESTABLISHED
  145  8700 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0          state NEW
  128 10796 ACCEPT     all  --  br0    *       0.0.0.0/0            0.0.0.0/0          state NEW
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0          udp spt:67 dpt:68
    2    96 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.1.1        tcp dpt:80
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0          tcp dpt:3000
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0
    1    48 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0          tcp dpt:24800 flags:0x16/0x02

Code:

iptables -L -vnt nat

Chain PREROUTING (policy ACCEPT 1140 packets, 117K bytes)
 pkts bytes target     prot opt in     out     source               destination
 1357 83252 VSERVER    all  --  *      *       0.0.0.0/0            78.106.6.56
    0     0 VSERVER    all  --  *      *       0.0.0.0/0            10.27.7.254
    0     0 NETMAP     udp  --  *      *       0.0.0.0/0            78.106.6.56        udp spt:6112 192.168.1.0/24

Chain POSTROUTING (policy ACCEPT 2987 packets, 179K bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 NETMAP     udp  --  *      *       192.168.1.0/24       0.0.0.0/0          udp dpt:6112 78.106.6.56/32
   26  1248 MASQUERADE  all  --  *      ppp0   !78.106.6.56          0.0.0.0/0
    0     0 MASQUERADE  all  --  *      vlan1  !10.27.7.254          0.0.0.0/0
   11  2108 MASQUERADE  all  --  *      br0     192.168.1.0/24       192.168.1.0/24

Chain OUTPUT (policy ACCEPT 2998 packets, 181K bytes)
 pkts bytes target     prot opt in     out     source               destination

Chain VSERVER (2 references)
 pkts bytes target     prot opt in     out     source               destination
   72  3456 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0          tcp dpt:8383 to:192.168.1.1:80
  935 46504 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0          tcp dpt:65555 to:192.168.1.1:65212
  210 19950 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0          udp dpt:65555 to:192.168.1.1:65212

65555 - rTorrent
24800 - SSH

Äîñòóï ïî HTTP, FTP ïðåêðàñíî ðàáîòàåò ñíàðóæè è èçíóòðè
SSH òîëüêî èçíóòðè
Âñå ïåðåðûë. Êó÷ó êîìáèíàöèé èñïðîáîâàë.

**EugeenB** · 20-08-2008, 13:01

Originally Posted by icexxx

Ïðîïàë äîñòóï èç îôèñà ê ìîåìó WL500GP.
Putty ãðÿçíî ðóãàåòñÿ: Connection reset by peer
Ïîíèìàþ ÷òî ñàìî íå ìîãëî, íî òåì íå ìåíåå.
Ïîìîãèòå êòî ÷åì ìîæåò

Code:

iptables -L INPUT -vn

Chain INPUT (policy DROP 1353 packets, 111K bytes)
 pkts bytes target     prot opt in     out     source               destination
   35  2600 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0          state INVALID
 142K   12M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0          state RELATED,ESTABLISHED
  145  8700 ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0          state NEW
  128 10796 ACCEPT     all  --  br0    *       0.0.0.0/0            0.0.0.0/0          state NEW
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0          udp spt:67 dpt:68
    2    96 ACCEPT     tcp  --  *      *       0.0.0.0/0            192.168.1.1        tcp dpt:80
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0          tcp dpt:3000
    0     0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0
    1    48 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0          tcp dpt:24800 flags:0x16/0x02

Ñ îäíîé ñòîðîíû, ãäå Âû òóò âèäåòå ðàçðåøàþùåå ïðàâèëî äëÿ ïîäñîåäèíåíèÿ ê SSH ñî ñòîðîíû WAN? Ïðîöåòèðóéòå òó ñòðî÷êó, êîòîðàÿ ðàçðåøàåò (ïî Âàøåìó ìíåíèþ) ïàêåòû ssh-ñåðâåðó ðîóòåðà.

Originally Posted by icexxx

Code:

Âîò ëîã:
Aug 19 18:36:33 dropbear[203]: Child connection from ::ffff:192.168.1.2:4858
Aug 19 18:36:38 dropbear[203]: password auth succeeded for 'root' from ::ffff:192.168.1.2:4858
Aug 19 18:39:56 dropbear[208]: Child connection from ::ffff:212.45.3.118:20390
Aug 19 18:39:56 dropbear[208]: exit before auth: error writing

Ñ äðóãîé ñòîðîíû, â ëîãå çàïèñü, ÷òî ïûòàåòåñü çàëîãèíèòüñÿ ïî èìåíåì "root", à òàêîãî ëîãèíà â ðîóòåðå íåò. Åñòü ëîãèí "Admin"

Thread: Óäàëåííûé äîñòóï

Thread Tools

Display

Hybrid View

äîñòóï ê 1Ñ

1c

Äîñòóï ïî SSH èç WAN Help!!!

Tags for this Thread

Posting Permissions