Can I set up VPN link w/o a VPN rounter?

[sanantoniolaredo]

Hi, All:

I have time-warner high speed cable at home. I want to be able to connect back to my home PC from school. I understand if we are using routers, we need to buy VPN-router to be able to make VPN connections through the routers. My question is, if I connect my home PC directly to the time-warner cable modem w/o router in between, can I make VPN connections from school to my home PC? Will this work?

Thanks!

 

[Fardringle]

You would need to set up a software VPN server on your home computer and use a software VPN client on your school PC to connect to the server.

 

[sanantoniolaredo]

Thanks a lot for the answer!

How about if I connect my home PC to a router(Belkin F5D7230-4) first, then from the router to the time-warner cable modem? I am sure my Belkin F5D7230-4 rotuer is not a VPN router. But if I set my a software VPN server on my home PC, will I be able to make VPN from school to my home PC?

Thanks.

 

[Joemonkey]

Originally posted by: Fardringle
You would need to set up a software VPN server on your home computer and use a software VPN client on your school PC to connect to the server.

Any recommendations?

 

[nweaver]

what are you tryng to do? Are you just wanting file sharing access? Remote Desktop? FTP?


VPN is for full access to a remote network (usually so you can access a local mail server/file servers/application servers). If you just "want access to my home machine" set up port forwarding on your router to allow RDP through.

 

[sanantoniolaredo]

I just need to control the desktop of my home PC from school. File sharing is not necessary but will be a plus if I can.

Do you mean VPN is not necessary? Do you mean I can just go get sth like VNC and set up port forwarding on my router then I am all set?
thanks.

 

[nweaver]

you would then have desktop access. If you have XP Pro, you can use remote desktop (built into windows) or with home any of the VNC's would work. For file sharing, you may set up an FTP server and only have it on when you are downloading files (i.e. VNC in, turn on ftp, transfer the 3 files you want, turn ftp off, disconnect VNC).

 

[sanantoniolaredo]

OK, thanks a lot! I will just do the port forwarding without VPN then.

One more question:

I have someone tried to get the IP address of my home PC (or I should say, the IP address of the my home router) by accessing www.whatismyip.com. The IP address we got is 69.152.230.20. But when I tried to ping this Ip address from school, it failed. I know I only get dynamic IP address from SBC but I pinged the IP just after we got it from whatismyip.com. The IP should not have changed so quickly.

Do you guys have any clue why the ping failed?

thanks!

 

[Joemonkey]

ping failed due to your router settings most likely. see if there is an "allow anonymous internet requests" option, or other security settings

 

[sanantoniolaredo]

Originally posted by: Joemonkey
ping failed due to your router settings most likely. see if there is an "allow anonymous internet requests" option, or other security settings

OK, I see. But do I need to have this "allow anonymous internet request" or other similiar security setting enabled if I just need to make tightVNC connection through the router.

I already did the port forwarding.

Thanks!

 

[Joemonkey]

no, it's just to generally keep people who are scanning IP ranges from finding you. In fact, there may not be a way to get your router to accept a ping at all.

 

[sanantoniolaredo]

Originally posted by: Joemonkey
no, it's just to generally keep people who are scanning IP ranges from finding you. In fact, there may not be a way to get your router to accept a ping at all.

Hi, Joemonkey:

Yeah, no need to mess with the security settings, just port forwarding is enough. I used tightVNC and it works great!

But this is not secure enough without a VPN connection made, is it? Then what is the software VPN server/client you mentioned? Do you have one to recommend in your mind? thanks!

 

[imported_netman]

If you are only port forwarding RDP (port 3389), or VNC if that's the way you want to go, then you should have few problems with security. I wouldn't make the internal machine a DMZ host though. With only 1 port forwarded, you're at a lot less risk.

 

[sanantoniolaredo]

I have 2 ports forwarded because I need to access two home PCs from school.

Anybody has any software VPN server recommendation to make this more secure since I do not have a VPN router?

Other security recommendation other than VPN are welcome, too!

Thanks.

 

[Codewiz]

http://hp.vector.co.jp/authors/VA027031/gtOrenoPC/index_en.html

This adds an extra layer of security. Instead of opening 3389, you install this software and open port 443. You then login into a webpage. Then you launch a secure tunnel over SSL to connect to your remote desktop connection.

This prevents someone from sniffing your password. It also isn't obvious to people that you are running remote desktop. As you have it right now, you have port 3389 open and everyone knows what that port is used for. So they can just brute force your administrator password if you have one.

 

[nweaver]

rdp is secured prior to password (iirc).

Also, I would forward an odd port (4683) to port 3389 internal box. Then a scan won't find it (usually, don't see many scans that high) and you don't have to mess with the remote desktop config