Connect to computer with NAT

Hi,

I have a machine on a subnet that I would like to access from outside.
Unfortunately my network admin won't set up port forwarding for me, so I was
wondering if anybody knows of a way to access a server on my machine.

I am guessing that my machine would have to make a connection to another
machine, and then I would tunnel back through that connection?

Anybody done anything like this or know of a way to do what I want?
Essentially I'm running a web server I need to access, I can run it on any
port, and I have access to another (linux) machine that is on the net
proper.

Cheers,
Ben
--
I'm not just a number. To many, I'm known as a String...

On Tue, 08 Jun 2004 10:24:35 +0100, Ben Pope wrote:

> Hi,
>
> I have a machine on a subnet that I would like to access from outside.
> Unfortunately my network admin won't set up port forwarding for me, so I was
> wondering if anybody knows of a way to access a server on my machine.
>
> I am guessing that my machine would have to make a connection to another
> machine, and then I would tunnel back through that connection?
>
> Anybody done anything like this or know of a way to do what I want?
> Essentially I'm running a web server I need to access, I can run it on any
> port, and I have access to another (linux) machine that is on the net
> proper.
>
> Cheers,
> Ben

Haven't done this, but take a look at this website http://gray-world.net/
for CCTT (Covert Channels Tunneling Tool). Seems fit to your requirement.

Your network admin probably won't set it up bacause it isn't allowed!
"Ben Pope" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi,
>
> I have a machine on a subnet that I would like to access from outside.
> Unfortunately my network admin won't set up port forwarding for me, so I
was
> wondering if anybody knows of a way to access a server on my machine.
>
> I am guessing that my machine would have to make a connection to another
> machine, and then I would tunnel back through that connection?
>
> Anybody done anything like this or know of a way to do what I want?
> Essentially I'm running a web server I need to access, I can run it on any
> port, and I have access to another (linux) machine that is on the net
> proper.
>
> Cheers,
> Ben
> --
> I'm not just a number. To many, I'm known as a String...
>
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.698 / Virus Database: 455 - Release Date: 02/06/2004

Ben Pope wrote:

> Hi,
>
> I have a machine on a subnet that I would like to access from outside.
> Unfortunately my network admin won't set up port forwarding for me, so I was
> wondering if anybody knows of a way to access a server on my machine.
>
> I am guessing that my machine would have to make a connection to another
> machine, and then I would tunnel back through that connection?
>
> Anybody done anything like this or know of a way to do what I want?
> Essentially I'm running a web server I need to access, I can run it on any
> port, and I have access to another (linux) machine that is on the net
> proper.
>
> Cheers,
> Ben
What you want to do is make a massive hole in the network security, an
open invitation to get the network well and truly rodgered -- thats why
he won't allow it.

"Wira One" <(E-Mail Removed)> wrote in message
news(E-Mail Removed)...
> Haven't done this, but take a look at this website http://gray-world.net/
> for CCTT (Covert Channels Tunneling Tool). Seems fit to your requirement.

Thanks, I'll take a look.

Ben

"Arm Rotor" <(E-Mail Removed)> wrote in message
news:ca4g03$kmo$(E-Mail Removed)...
> What you want to do is make a massive hole in the network security, an
> open invitation to get the network well and truly rodgered -- thats why he
> won't allow it.

I wasn't after a lecture guys.

I'm running Cocoon/Apache/Tomcat etc, the pages will be password protected
and it'll likely be on a non-standard port. I'm well aware of the security
issues, somehow I think my machine running apache with password protected
pages will not be their biggest concern.

Ben

Ben Pope wrote:
> "Arm Rotor" <(E-Mail Removed)> wrote in message
> news:ca4g03$kmo$(E-Mail Removed)...
>> What you want to do is make a massive hole in the network security,
>> an open invitation to get the network well and truly rodgered --
>> thats why he won't allow it.
>
> I wasn't after a lecture guys.
>
> I'm running Cocoon/Apache/Tomcat etc, the pages will be password
> protected and it'll likely be on a non-standard port. I'm well aware
> of the security issues, somehow I think my machine running apache
> with password protected pages will not be their biggest concern.
>
No , because as soon as they find you have done this you will be an
ex-employee.

--
Alex

"We are now up against live, hostile targets"

"So, if Little Red Riding Hood should show up with a bazooka and a bad
attitude, I expect you to chin the bitch! "

www.drzoidberg.co.uk
www.ebayfaq.co.uk

Dr Zoidberg wrote:
> Ben Pope wrote:
>> "Arm Rotor" <(E-Mail Removed)> wrote in message
>> news:ca4g03$kmo$(E-Mail Removed)...
>>> What you want to do is make a massive hole in the network security,
>>> an open invitation to get the network well and truly rodgered --
>>> thats why he won't allow it.
>>
>> I wasn't after a lecture guys.
>>
>> I'm running Cocoon/Apache/Tomcat etc, the pages will be password
>> protected and it'll likely be on a non-standard port. I'm well aware
>> of the security issues, somehow I think my machine running apache
>> with password protected pages will not be their biggest concern.
>>
> No , because as soon as they find you have done this you will be an
> ex-employee.

Why would I get fired for running a server on my machine at home? I'm
sorry, I can't quite make that logical step, please enlighten me.

Ben
--
A7N8X FAQ: www.ben.pope.name/a7n8x_faq.html
Questions by email will likely be ignored, please use the newsgroups.
I'm not just a number. To many, I'm known as a String...

On Tue, 08 Jun 2004 20:18:49 +0100, Ben Pope wrote:

> Dr Zoidberg wrote:
>> Ben Pope wrote:
>>> "Arm Rotor" <(E-Mail Removed)> wrote in message
>>> news:ca4g03$kmo$(E-Mail Removed)...
>>>> What you want to do is make a massive hole in the network security, an
>>>> open invitation to get the network well and truly rodgered -- thats
>>>> why he won't allow it.
>>>
>>> I wasn't after a lecture guys.
>>>
>>> I'm running Cocoon/Apache/Tomcat etc, the pages will be password
>>> protected and it'll likely be on a non-standard port. I'm well aware
>>> of the security issues, somehow I think my machine running apache with
>>> password protected pages will not be their biggest concern.
>>>
>> No , because as soon as they find you have done this you will be an
>> ex-employee.
>
> Why would I get fired for running a server on my machine at home? I'm
> sorry, I can't quite make that logical step, please enlighten me.

Well in your original post you mentioned a network admin who refused to
set up a port forward for you (probably quite rightly) so everyone assumed
you were talking about a server on your company LAN.

You can probably do what you want with a remote ssh tunnel.

Could you give a little more detail about what you are trying to achieve?

Regards, Ian

Ian Northeast wrote:
> Well in your original post you mentioned a network admin who refused to
> set up a port forward for you (probably quite rightly) so everyone assumed
> you were talking about a server on your company LAN.
>
> You can probably do what you want with a remote ssh tunnel.
>
> Could you give a little more detail about what you are trying to achieve?

I have Cocoon set up on my machine, and would like for another person to be
able to access it, simple as that. I would also like Apache to serve files,
so if I only have one port I will get Apache, Tomcat and Cocoon in bed with
each other so I can do it all from one port.

Now, this machine is on a 10. network, so obviously I can't access it from
outside directly, without port forwarding.

I do have shell access to a Linux based machine (called blue) that is
currently hosting my website, and I would expect that I would be able to run
any processes over there, should I need to. It would make a nice place for
me to connect to from any random place, if it could somehow map subdomains
or ports or anything to my home machine inside the subnet. I'm assuming
that my machine will have to establish a "semi-permanent" connection to
blue, and then I can get blue to tunnel the request through this
connection - presumably this will require software on my machine, as well as
blue?

I would just like to know the best tunnelling (or other) software that will
enable me to get HTTP requests to my machine, possibly with the help of
blue.

Thanks for your time.

Ben
--
A7N8X FAQ: www.ben.pope.name/a7n8x_faq.html
Questions by email will likely be ignored, please use the newsgroups.
I'm not just a number. To many, I'm known as a String...