Most of the costumers are data centers with sensitive data, so many of them
don't want to open ports for us, or add rules to their firewalls.
The last version of our software ran in a X86 system, so we could easily
install hamachi and use logmein to administrate all the sites we needed to
supervise.
The only functionality I really need is a terminal so I can run a autocheck
program and configure the embedded system if needed. Not X but I need it to be
secure.
I was thinking on some kind of mechanism so when I "emailed" the ts-7400 box,
and it would start a ssh connection (using port 80) to public server where I
can retake the connection.
I was reading NaturalWatt (Martin)post and yes, that is exactly what I am
looking for. I will try to implement that.
Thanks everyone for answers!
Regards,
Enrique
--- In "j.chitte" <> wrote:
>
>
>
> --- In "akikem" <akikem@> wrote:
> >
> > Hi there.
> > I am looking forward a solution so I can access my TS-7400 even if it is
> > inside a firewall I can't configure. This is because it would be nice if I
> > could offer remote assistance to my costumers, but most of the time TI guys
> > don't like to open ports or reconfigure anything. The equipment just do
> > some basic logging, and I am using 2.6.21 ts #8 Kernel version, and the
> > full Debian version.
> > I have use hamachi, but I have to enable a intel-based PC, to enable ssh to
> > the TS-7400. It would be great if I could install directly some sort of VPN
> > software like hamachi directly in the box.
> > The problem with hamachi is that is closed source, and they only offer some
> > binary files, so I can't port it.
> > I have investigated and I found openvpn, wippien, and tinc.
> > Does anyone has try one of those or has another recomendation?
> > Regards,
> > Enrique
> >
>
> What kind of functionality do you need to have? You can connect ssh via any
> port with -p (see man) so you could use port 80. Then you can bind any port
> to go through that secure link and avoid touching the firewall. Since it's
> encrypted , it's generally slower that opening the port you want but it gets
> around the problem.
>
> If no incoming connections are allowed the customer would have to initiate
> the connection.
>
> ssh -p 6622 -L 5900:localhost:5900 blah.dyndns.com
>
> I've found tigervnc fast even for remote X sessions on x86 to x86-64
>
------------------------------------
Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/ts-7000/
<*> Your email settings:
Individual Email | Traditional
<*> To change settings online go to:
http://groups.yahoo.com/group/ts-7000/join
(Yahoo! ID required)
<*> To change settings via email:
<*> To unsubscribe from this group, send an email to:
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
|