Remote Desktop Setup

[The Dark Knight]

A demilitarized zone (DMZ) is when you instruct the router to allow ALL incoming traffic to your machine. This is obviously dangerous, and should be only used in an extreme situation.

and as others here have said, its definetly some other software blocking it, disable your 3rd party firewall and windows firewall and then try.

[+BudMan MVC]

And as I've already stated, I can log on to my computer through the LogMeIn service. So some ports must be forwarding properly...right?

NO! This is not how the logme in service works.. Your computer is making a connection to them.. To connect to your system from the internet - you go to the logme network - and go thru the connection your machine made outbound..

This is how they get past corp firewalls, and allow people too stupid to setup a simple forward, or know what their Public IP is to connect to their machines.. Its VNC for IDIOTS if you ask me ;) hehehe

? for you -- do you have another machine on your network, a friends laptop, something that you can plug into the same router an try to access whatever services your trying to use.. ie Remote Desktop, etc.

Since you state you have NO other devices.. Did you check your routers internet IP.. is it public? Your not using a Proxy.. How do you know what your public IP is.. to try an connect to your services from outside? Its quite possible if using a proxy that if you go to somewhere like canyouseeme.org that it could be seeing your proxies IP.

[Shoot2ill]

I would assume by going to IP Chicken that they provide me with my public IP. Is this what you're talking about, or is there another public IP that you're speaking of.

I am not using a proxy.

And no, "Public LAN" is not enabled on my router, and I don't think it's suppose to be.

I do want to correct myself, there is one other computer connected wirelessly to my router. I will take your advice and attempt to forward ports on that machine and see if I can RD to it.

[Mike Mayer]

Do you receive a login screen at all when you connect to the remote machine?

Last time I checked, it was required that the account you're attempting to login to on the remote machine must have a password...

I'd recommend trying hamachi too... works wonders for me.

[Shoot2ill]

Nope, no login screen.

Yes, I have a password.

The topic of this thread probably needs to be changed, because until I can properly forward port 3389, I won't be able to RD. :-(

[Doli]

You have the IP address of your router "192.169.1.1" thats common (default IP of most routers), you need the IP address of your modem which is diffrent.

[Shoot2ill]

But my router is my modem. It's a Westell 327w Wireless Router/DSL Modem.

[Doli]

Nope, no login screen.

Yes, I have a password.

The topic of this thread probably needs to be changed, because until I can properly forward port 3389, I won't be able to RD. :-(

Go to:

http://www.portforward.com/english/routers...nk327Windex.htm

You will see "Your external IP address is : xx.xx.xxx.xxx"

[

That should be your modem's IP address. Now just follow the instructions and you should be all set:

http://www.portforward.com/english/routers...ote_Desktop.htm

Also I recommend DynDNS that was posted before. Help out a lot when your modem's IP address changes.

[+BudMan MVC]

You do not have to FORWARD anything for the other machine on your network to access your machine.. You state your IP was 192.168.1.47... ok so your other machine is say 192.168.1.48

From this machine can you access your remote desktop to 192.168.1.47??

If NOT -- then you clearly have something blocking it on your machine - or its not even running, etc..

[Smoky]

But my router is my modem. It's a Westell 327w Wireless Router/DSL Modem.

Not sure if this will help but the Westell 327 has a built in Firewall. Directions for setting it can be found at

their web site.

Smoky

[Shoot2ill]

You do not have to FORWARD anything for the other machine on your network to access your machine.. You state your IP was 192.168.1.47... ok so your other machine is say 192.168.1.48

From this machine can you access your remote desktop to 192.168.1.47??

If NOT -- then you clearly have something blocking it on your machine - or its not even running, etc..

Yea it's looking like that's going to have to be the next step. That will at least tell me whether not not it's my router or my machine.

And I have the router firewall disabled as well.

Thank you everyone for your help.

[Doli]

You do not have to FORWARD anything for the other machine on your network to access your machine.. You state your IP was 192.168.1.47... ok so your other machine is say 192.168.1.48

From this machine can you access your remote desktop to 192.168.1.47??

If NOT -- then you clearly have something blocking it on your machine - or its not even running, etc..

I think thats the ip address his router is giving his computer, he needs the ip address of his modem so it can forward it to his computer. The computer he is trying to conntect to at home is not on the same network the computer he is trying to connect from which is at his school. Now if he lived in the dorms like I did then yea he doesnt need to port forward anything.

[Intelligen]

Doli, did you read what Budman was referring too? He said connect from another machine on his network to verify RDP is working. Start there to see if he can connect, if he can't he has something configured wrong on his computer since this wouldn't be going through any firewalls. If he is able to connect but not from a remote computer at school, then

1) His port forwarding on router is not configured correctly

2) He's using the wrong ip (www.whatismyip.com

3) School's firewall is blocking outgoing ports - i know we block outgoing ports also except 443 and 80 and restrict port 21 to specific PC's who need it.

[Doli]

Doli, did you read what Budman was referring too? He said connect from another machine on his network to verify RDP is working. Start there to see if he can connect, if he can't he has something configured wrong on his computer since this wouldn't be going through any firewalls. If he is able to connect but not from a remote computer at school, then

1) His port forwarding on router is not configured correctly

2) He's using the wrong ip (www.whatismyip.com

3) School's firewall is blocking outgoing ports - i know we block outgoing ports also except 443 and 80 and restrict port 21 to specific PC's who need it.

Ok, did'nt catch that and its a good idea if he has another computer on that network :blush:

If the ports are blocked is there a way to change the Remote Desktop listing port number to 443?

Edited April 12, 2007 by Doli

[ekko20six]

I know you said you already use LogMeIn - as do I, why do you think its funky? aside from the free version not offering file transfers (this limitation can be overcome by Hamachi) I have always found Windows RDC to be slow, unresponsive and it randomly doesn't work, just like you are experiencing now.

As for LogMeIn, I have yet to have a single problem with it. I find it to be very fast, reliable and I know someone said it was VNC for dummies - well I guess you better call me a dummie...

Personally I like programs that JUST WORK, with no mucking about, no settings to have to 'manually configure' or that require me to open ports (and thus create a potential security risk for my PC).

LogMeIn (paired with Hamachi for file transfer) is absolutely the way to go - what about it doent you like?

Also you need to look at what you actually want to do, do you want complete control over your computer ot just access to files?

Perhaps there is a solution that doesn't involve LogMeIn or the (crappy)Windows RDC??

Dan

[Shoot2ill]

I know you said you already use LogMeIn - as do I, why do you think its funky? aside from the free version not offering file transfers (this limitation can be overcome by Hamachi) I have always found Windows RDC to be slow, unresponsive and it randomly doesn't work, just like you are experiencing now.

As for LogMeIn, I have yet to have a single problem with it. I find it to be very fast, reliable and I know someone said it was VNC for dummies - well I guess you better call me a dummie...

Personally I like programs that JUST WORK, with no mucking about, no settings to have to 'manually configure' or that require me to open ports (and thus create a potential security risk for my PC).

LogMeIn (paired with Hamachi for file transfer) is absolutely the way to go - what about it doent you like?

Also you need to look at what you actually want to do, do you want complete control over your computer ot just access to files?

Perhaps there is a solution that doesn't involve LogMeIn or the (crappy)Windows RDC??

Dan

Eh. It doesn't bug me too much. What does bug me is when websites like canyouseeme.org say that my F***ING ports aren't opened. I'd AT LEAST like my uTorrent port to be open so I can get better download speeds. But thank you for your input. :cool:

[+BudMan MVC]

So have you tried to connect to from the other machine yet?? What that would take like 3 seconds to check out!

As to the person suggesting you change the port remote desktop listens on.. There is NO need to do that, unless his router does not support changing the port at the nat.. Most any decent one would..

I for example I forward port 21 on the outside of my router to my slingbox 5001.. since work has port 21 open outbound for ftp.

Lets not worry about the schools firewall just yet.. Since that has little to do with what canyouseeme.org says from his house..

Since he states it use to work.. Then either his forwards are not right -- ie forwarding to 192.168.1.46 when his address is 47, etc.. which is quite possible and would explain everything he has mentioned.. Use to work - just stopped, etc.. Or he has a software firewall running on his machine.

Its not rocket science.. its a few simple settings... Or maybe his ISP is blocking all inbound ports? Again this would explain his probelm.

[Shoot2ill]

Thanks for following up on this BudMan. Sorry I just got home from work and had been testing my router settings using LogMeIn =P.

I attempted to check canyouseeme.org on my mom's pc, and it also came up saying the ports were not open. So it's not my computer.

I'm going to contact Verizon tomorrow and see what the deal is. There's no reason my router would crap out only regarding port forwarding, no way.

[MR_Candyman]

Thanks for following up on this BudMan. Sorry I just got home from work and had been testing my router settings using LogMeIn =P.

I attempted to check canyouseeme.org on my mom's pc, and it also came up saying the ports were not open. So it's not my computer.

I'm going to contact Verizon tomorrow and see what the deal is. There's no reason my router would crap out only regarding port forwarding, no way.

he was telling you to try to do a remote desktop connection between your machine at home and another on the same network as your machine at home (like your mom's). This is a quick, sure-fire way to see if it's the router having a port issue (or the ISP being dumb) or if it's a problem with your computer.

Going to canyouseeme.org from ANY computer on your network will give the exact same results, so it's a worthless test in that regard (heck, I don't even like that test for anything)

[+BudMan MVC]

I attempted to check canyouseeme.org on my mom's pc, and it also came up saying the ports were not open. So it's not my computer.

And did you change all the forwards on your router to forward to your mom's PC? Does your mom's machine have these services running that your trying to forward to her machine? Remote Desktop? p2p, what??

Please Post the screen shots from your router of your port forwards.. From your statement you tested from your moms computer, I get the funny feeling you do not understand how a port forwards works. Or your forgetting to post info, ie like how you changed the forwards on your router to point to your moms IP before you checked with canyouseeme.org

How does that check rule out a software firewall?? Even if you made the changes on your router? Your mom could have one as well..

This type of issue comes up A LOT around here, here Let me dig up one of the past threads where I walked a person thru doing a TEST of a port forward.

Here you go

https://www.neowin.net/forum/index.php?show...;hl=portforward

Post number #15 walks you thru testing a port forward with just simple telnet..

Please post the results of doing this test! And screen shots of the forward screens from your router.

edit: Not 100 sure on that thread what the users issue was, but since he left his router wide up to remote admin with the default password.. I was able to get onto his router.. And I could not ping his machine from the roueter - so seemed quite clear his machine was running a software firewall!

Edited April 12, 2007 by BudMan

[Shoot2ill]

HOLY **** OMG WTF......FINALLY!

I referred to that other post you had a link to. Figured it had to be some service running on my system.

Went through every service listed in administrative tools. First I went through the things that were stopped, to see if there was some service I needed to start. No luck. Then I went through the started services, and when I got to "Cisco Systems, Inc. VPN Service", I looked at the details and hit the "Dependencies" tab, and saw that it depended on "TCP/IP Protocol Driver" and "IPSEC Driver" (which I had read earlier is some sort of security feature that can block ports). Disabled that bitch and TADAAAA, uTorrent Port Checker gives me that green "OK!" that I had missed oh so dearly.

Thanks so much BudMan, as well as the rest of you.

I had installed my university's VPN client a few weeks ago. If anyone has an explanation as to why this was blocking my ports, please let me know :D.

[+BudMan MVC]

Well most likely by default when you install the Cisco VPN client it will turn on its Firewall.. Was not the ? "any type" of firewall or security software that might be running on your machine brought up multiple times? ;)

Which is why we called for testing from another machine on your network as well ;)

vs disabling service(s) that will be required for your use your VPN, an that you clearly do not undestand what thy do ;) I would suggest you just turn off the firewall part of your vpn software.

Which reminds me I should update my client ;) I know 5 is out..

[Shoot2ill]

Yea I apologize. I had no idea VPN even had a firewall, so news to me.

[+BudMan MVC]

By default as well when your connected to the VPN your machine would not use any other connection other than the VPN, so if your connected to the VPN your port forwards would not work either. Keep that in mind as well, unless of course the forwarded traffic was coming from the VPN connection - unlikely.

This setting to allow for split tunnel type access would be controlled by the VPNC, ie your school would have to set if you can split tunnel or not.