Safest way of accessing a home computer from outside?
Ahmed Hussain
ahmedyo at gmail.com
Sun Dec 31 17:39:52 UTC 2006
Hi ,
Sorry I'm a newbie , what if I my router doesent have a public IP
itself. I mean to say my provider provides me a 192.168.1.x of it's
network and internally I have a lan. will I ever be able to access me
personal system via router [provided my ISP provider will not change any
of it's settings from his end ] .
wondering if any kind of dynaDSN or peer to peer can help me to do
that .
Any Suggestions ?
Regards,
Ahmed Hussain
On Sun, 2006-12-31 at 12:27 -0500, Jacques B. wrote:
> On 12/30/06, Timothy Murphy <tim at birdsnest.maths.tcd.ie> wrote:
> > What is the safest way of allowing access to a home system
> > from a remote computer?
> > I am running Fedora-6 and shorewall.
> >
> > Any advice or suggestions gratefully received.
> >
> > --
> > Timothy Murphy
> > e-mail (<80k only): tim /at/ birdsnest.maths.tcd.ie
> > tel: +353-86-2336090, +353-1-2842366
> > s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland
> >
> > --
> > fedora-list mailing list
> > fedora-list at redhat.com
> > To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
> >
>
> I agree - ssh with no password and then use certificates to
> authenticate. And start it with the -X option if you want to be able
> to run XWindows applications over ssh.
>
> As for a router, as was noted, you simply need to configure your
> router so that all traffic coming in on whatever port you decide to
> use for ssh (22 being the default) is forwarded to your ssh server.
> You will want to assign a static IP to your ssh server (either
> configuring the box itself, or if your router supports it, assign
> static IP via DHCP for the nic in your ssh server). It would also be
> wise to disable root access via ssh. If you need root access, you can
> su or sudo once you've connected to your server.
>
> To copy files, you can use scp to access your ssh server. If you
> simply want to set up a shared drive on your server, then have a look
> at hamachi. I've played with it (the Windows version mind you, but
> they have a Linux version as well). You can find Hamachi at
> http://www.hamachi.cc/. The nice thing with Hamachi is that it's zero
> configuration. You don't have to open ports on your router to get it
> to work. The down side if you are paranoid is that you are relying on
> someone else's network and product vs known/trusted ssh.
>
> And of course VNC and its flavours might do the trick. I am pretty
> certain you can tunnel VNC through ssh if you want to wrap a layer of
> protection/encryption. I had managed to get VNC to work over Hamachi
> for a fleeing moment a while back (Windows box otherwise I would have
> tried it with ssh).
>
> Jacques B.
>
More information about the fedora-list
mailing list