Reply to topic  [ 15 posts ] 
Accessing a computer at work 
Author Message
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:36 pm
Posts: 5150
Location: /dev/tty0
Reply with quote
At work we have our own phone/internet line separate to the rest of the company. Because we're separate, nobody has a clue as to the account details, usernames, passwords, etc. of the router/account.

I'd like to be able to connect from home to my work computer to do something like VNC and RSYNC. If needs be I have a Linode which could serve as a middle man, but I don't have shed loads of bandwidth (potentially not enough to run several sites plus pass GBs of data RSYNC'ing machines together).

Can anyone suggest anything that might help? I'm not after a fast solution, just a solution :)

Many thanks,
Ben


Tue Nov 08, 2011 6:56 am
Profile WWW
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:58 pm
Posts: 8767
Location: behind the sofa
Reply with quote
I guess you can't port-forward on the router which rules out the usual options? In that case, you're going to have to tunnel out.

Can you use Hamachi? Or probably better, ssh to your Linode and reverse port forward from there.

However, both will shift all the data through the middle-man - in the case of Himachi, the free version is quite limited.

Are you purely shifting data to your home network? If so, can't you just ssh back to that? Set it on a cron job to be up when you need it.

_________________
jonbwfc's law: "In any forum thread someone will, no matter what the subject, mention Firefly."

When you're feeling too silly for x404, youRwired.net


Tue Nov 08, 2011 10:56 am
Profile WWW
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:36 pm
Posts: 5150
Location: /dev/tty0
Reply with quote
JJW009 wrote:
Are you purely shifting data to your home network? If so, can't you just ssh back to that? Set it on a cron job to be up when you need it.


Yes, might have to look into something like that. I don't want to have the server at home on all the time sucking up electricity. I'm on a meter and it's all rather expensive, but if I had it syncing at certain times it shouldn't be too bad...


Tue Nov 08, 2011 11:33 am
Profile WWW
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:58 pm
Posts: 8767
Location: behind the sofa
Reply with quote
Or you could keep the ssh tunnel to Linode up, then use that to initiate the one back home when you need it.

_________________
jonbwfc's law: "In any forum thread someone will, no matter what the subject, mention Firefly."

When you're feeling too silly for x404, youRwired.net


Tue Nov 08, 2011 12:29 pm
Profile WWW
Spends far too much time on here
User avatar

Joined: Thu Apr 23, 2009 9:40 pm
Posts: 4876
Location: Newcastle
Reply with quote
Live Mesh works ;)

Failing that set up some sort of VPN and remote in that way?

_________________
Twitter
Charlie Brooker:
Macs are glorified Fisher-Price activity centres for adults; computers for scaredy cats too nervous to learn how proper computers work; computers for people who earnestly believe in feng shui.


Tue Nov 08, 2011 12:37 pm
Profile
What's a life?
User avatar

Joined: Thu Apr 23, 2009 8:25 pm
Posts: 10691
Location: Bramsche
Reply with quote
Set up a VPN, port forwarding is too dangerous for such things.

The first thing is to get permission to access your machine from home, in writing. Just accessing it from home could be seen as gross misconduct or lead to instant dismissal. Check your contract, larger companies usually have clauses forbidding such things written in.

_________________
"Do you know what this is? Hmm? No, I can see you do not. You have that vacant look in your eyes, which says hold my head to your ear, you will hear the sea!" - Londo Molari

Executive Producer No Agenda Show 246


Wed Nov 09, 2011 5:22 am
Profile ICQ
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:36 pm
Posts: 5150
Location: /dev/tty0
Reply with quote
big_D wrote:
Set up a VPN, port forwarding is too dangerous for such things.


How might one do that?

big_D wrote:
The first thing is to get permission to access your machine from home, in writing. Just accessing it from home could be seen as gross misconduct or lead to instant dismissal. Check your contract, larger companies usually have clauses forbidding such things written in.


I've been told that since the network we're on isn't the company network I can pretty much do what I like.

UPDATE: Someone had the password :D So I can now get into the router.


Wed Nov 09, 2011 6:46 am
Profile WWW
Site Admin
User avatar

Joined: Fri Apr 24, 2009 6:12 am
Posts: 7011
Location: Wiltshire
Reply with quote
Do your self a favour and get your Boss to send you an email confirming you have permission to do this. Its called covering your ass ! :D

I know if I found member of my staff doing this without permission they would be toast.

_________________
<input type="pickmeup" name="coffee" value="espresso" />


Wed Nov 09, 2011 7:07 am
Profile WWW
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:58 pm
Posts: 8767
Location: behind the sofa
Reply with quote
big_D wrote:
Set up a VPN, port forwarding is too dangerous for such things.

Given equally secure login credentials, is an SSH port forward not equally as secure as a PPTP base VPN?

forquare1, what OS is the box at work? Assuming it's Linux based then you just need to forward port 22 on the router. Obviously make sure any logins have secure passwords first. You could do a port translation to a random high port to reduce the odds of being scanned.

From home, on Linux you can then connect directly. From Windows, I like to use WinSCP for remote file management.

_________________
jonbwfc's law: "In any forum thread someone will, no matter what the subject, mention Firefly."

When you're feeling too silly for x404, youRwired.net


Wed Nov 09, 2011 9:54 am
Profile WWW
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:36 pm
Posts: 5150
Location: /dev/tty0
Reply with quote
The box at work is my own Mac Mini running the latest OS X. At home is my Mac Pro also running the latest OS X.


Wed Nov 09, 2011 11:31 am
Profile WWW
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:58 pm
Posts: 8767
Location: behind the sofa
Reply with quote
I think they use ssh much the same as Linux. And here my Mac knowledge ends :lol:

_________________
jonbwfc's law: "In any forum thread someone will, no matter what the subject, mention Firefly."

When you're feeling too silly for x404, youRwired.net


Wed Nov 09, 2011 11:54 am
Profile WWW
I haven't seen my friends in so long
User avatar

Joined: Thu Apr 23, 2009 6:36 pm
Posts: 5150
Location: /dev/tty0
Reply with quote
Indeed, Mac ssh is the same :wink:

I've been given verbal permission, written permission to come tomorrow.


Wed Nov 09, 2011 5:40 pm
Profile WWW
Site Admin
User avatar

Joined: Fri Apr 24, 2009 6:12 am
Posts: 7011
Location: Wiltshire
Reply with quote
forquare1 wrote:
Indeed, Mac ssh is the same :wink:

I've been given verbal permission, written permission to come tomorrow.

Make sure you get it. People can sooooooo easily forget ;)

_________________
<input type="pickmeup" name="coffee" value="espresso" />


Wed Nov 09, 2011 6:16 pm
Profile WWW
What's a life?
User avatar

Joined: Thu Apr 23, 2009 7:26 pm
Posts: 17040
Reply with quote
If they're both macs, have a look at a thing called sharetool from Yazsoft.

Jon


Wed Nov 09, 2011 6:50 pm
Profile
What's a life?
User avatar

Joined: Thu Apr 23, 2009 8:25 pm
Posts: 10691
Location: Bramsche
Reply with quote
JJW009 wrote:
big_D wrote:
Set up a VPN, port forwarding is too dangerous for such things.

Given equally secure login credentials, is an SSH port forward not equally as secure as a PPTP base VPN?


As long as the SSH is configured for a fixed IP address and it is using a PSK with a decent strengh, it should be ok. But you are going directly on the box, so any SSH problem in OS X can be directly exploited. With the VPN, you need to get into the VPN, on the router, before you can access any machine on the local network, which is safer and twice the security. It isn't perfect, but it is better.

_________________
"Do you know what this is? Hmm? No, I can see you do not. You have that vacant look in your eyes, which says hold my head to your ear, you will hear the sea!" - Londo Molari

Executive Producer No Agenda Show 246


Thu Nov 10, 2011 5:18 am
Profile ICQ
Display posts from previous:  Sort by  
Reply to topic   [ 15 posts ] 

Who is online

Users browsing this forum: No registered users and 11 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group
Designed by ST Software.