Mac mini server 2010, windows client's, file sharing and VPN

[joecool99]

The access from home shouldn't be a problem, but it is possible (not likely) the outgoing ports are being blocked at home. Then again, the incoming ports might be blocked at work. SSH is less likely to be blocked anywhere.

so how should i configure the SSH ? at work add routing to port 22 to to local IP server address ?

then try to connect with terminal to the public IP of the router as:

ssh 10.x.x.10 ?

 

[talmy]

Yes forward port 22 to your server. BUT if your router has an external address starting 10. then you are behind another firewall as 10. addresses are not public. That could be the cause of your problems.

 

[joecool99]

Yes forward port 22 to your server. BUT if your router has an external address starting 10. then you are behind another firewall as 10. addresses are not public. That could be the cause of your problems.

the 10. address is what i see on the WIFI router that's connected to Comcast modem. is there a firewall in comcast modem ? can that be configured ?

 

[talmy]

Sounds like the "Comcast Modem" is a router, or else Comcast has you behind a router of its own to minimize the number of IP addresses it needs. At any rate you've got a problem. You need to get at the configuration to port forward. Assuming you have business class and not residential service, you should be able to get a static IP address which would solve the problem, but at any rate it seems like you need to be asking Comcast what's going on.

 

[ae3265]

The access from home shouldn't be a problem, but it is possible (not likely) the outgoing ports are being blocked at home. Then again, the incoming ports might be blocked at work. SSH is less likely to be blocked anywhere.

Actually, getting OpenVPN working on OS X isn't that bad and it can take care of most of the routing issues. You do need a router capable of setting internal LAN routes (avoid D-LINK! as they tend to not have this). It's works great with the Windows Open VPN client as well as Tunnelblick for Mac. You can also use the OpenVPN source to compile for Solaris and Linux, etc.

EG, in my set up, I have VPN endpoints from my main server to my work lab and my father's computers on separate subnets, from my central location I can go into either as needed without having to much around with SSH. Using port 443 avoids most firewall issues as well.

Just another option there...

 

[joecool99]

however i need to resolve the comcast modem first, since it's a router on it's own, giving the WIFI router 10.x IP address.

i never tried to configure comast modem for port routing. or should i replace it with one that doesn't work as a router ?

 

[joecool99]

the server has 2 drives in raid 1 mirror more as well as external drive for time machine backup. i would also like a daily copy to a windows machine.

what would be a good way to do it ? i don't need the hourly backup as time-machine, but once at night to copy the files. a smart way so it copies only the files that has changed ?