Hi,
At the office, we have a quite simple network:
- DSL modem =>3com OfficeConnect Internet Firewall =>switch
My boss asked me to configure the network so that he can take over his office-pc from home.
So I started by installing RealVNC on some PC's on the LAN.
This is working properly. I can take control of the PC's from any LAN-PC.
Now I have to configure the router to forward an incoming connection on port 5900 to the local IP-adress of my bosses PC. On most "home"-routers this is easy to do (Virtual server).
The router/firewall from 3com doesn't have this easy configuration.
It has "Services" and "Policie rules" that you need to configure.
So I :
- created a new service and configured it as :
- Name : "VNC"
- Type : TCP
- Port : 5900
In the 'services' window then , I've set these extra settings for this service :
- Lan out : true
- lan in : true
- Public lan server : local IP of my bosses PC
Then automatically a 'policy rule' apeared in the policie rules window:
I've changed it a bit to :
Allow service 'VNC' from * (wan+lan) to lan on 'Ip adress of my boss'
Then I restarted the router.
But no luck. I keep getting 'Remote host refused connection'.
I don't know why I can't get through.
- It has nothing to do with 'outgoing' restrictions because from the PC's in the LAN, we can take over my PC at home.
- I've tried configuring and connecting on other TCP ports (e.g. 8080, doesn't work neither).
- I am sure that my WAN-IP is corrected because when I set the router to block Pings, this works. If i then disable the 'block ping of death" option, I can ping to it.
- There are some options on the firewall for "DMZ" but this is an extra connector on the router itself, and my bosses pc is not connected to this DMZ connector.
- I also don't want to use VPN, because this is a paying feature for these firewalls.
Any ideas anybody?
Btw, the manual of this firewall :
http://support.3com.com/infodeli/tools/hubs/off-con/firewall/ug/ocfirewallug.pdfThanx !!!!!