Giving access to the outside!

[rgyankees23]

Hello, I have networked my house and I am using cable internet. I want to be able to to setup a server using Serv U .50 but for some reason my friends can not access my server. What do I need to do?

[profdlp]

Please give a little more detail on what Operating System, network setup, etc.

I'm sure someone will be able to help you out. :thumbsup:

[rgyankees23]

OK.......

Operating System: Windows XP Professional
Network Status: Workgroup
ISP: RCN Fast Ethernet Cable Modem

I am trying to use the Serv U .50 Server application so that my friends and I can share files together!

[profdlp]

Do you have the Windows (or any other) Firewall turned on? How are your shared folders set up? Are you using a router? If so, you'll need to set up port forwarding or DMZ for the server.

[rgyankees23]

Do you have the Windows (or any other) Firewall turned on?

No I don't


How are your shared folders set up?

They are setup using the serv u server. They are stored in the sharing path


Are you using a router?

Yes I am

(If so, you'll need to set up port forwarding or DMZ for the server.)

What is port forwarding or DMZ, and how do I set it up?

[profdlp]

What brand and model# router? On my Linksys BEFSR41 I go to IP 192.168.1.1 and it shows me a menu-based settings screen. At the DMZ tab I can choose which computer I want to "expose" to the internet. My dad has an SMC router which uses a different IP address, but otherwise is the same principle.

[rgyankees23]

What brand and model# router?

D-Link Ethernet Boradband Router
Model #: DI-707P

[profdlp]

You can download the manual here (http://www.dlink.com/products/?pid=60).

See page 26 (attached picture). There may be other settings that need tweaking too, but this is the place to start.

For added security you'll want to study up on port forwarding and try to go that route. DMZ exposes the whole computer. Once you figure out what ports your server software needs you can limit access to just the necessary ones. Hope this helps. If not, we'll look at the next steps to try. :rockon:

[rgyankees23]

I foudn that part but I don't understand what exactly I need to do!

[Thrax]

Go to start -> run

Type CMD

Type IPCONFG in the new dos window

It'll give you your IP.

Input the last set of digits in that box in the picture above.

For example:

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Rob>ipconfig

Windows IP Configuration


Ethernet adapter SSID (hallock) -WEP (protected):

Connection-specific DNS Suffix . :
IP Address. . . . . . . . . . . . : 192.168.1.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1

C:\Documents and Settings\Rob>

I would place 2 in the box shown in Prof's pic, because that is the last digit of my IP address (The bolded part). Doing so would allow me to allow all traffic to the FTP computer.

[profdlp]

Open you web browser (Internet Explorer, or whatever), in the address bar put in 192.168.0.1 then hit "enter". The default user name is "admin" (leave out the ") and the password is blank (as in nothing in the box). This should get you into the setup area of the router. (Page 11)

Page 18 of the manual shows you how to get into the DHCP Clients List. This will show the IP address that has been assigned to each computer on your network. Figure out what the IP is for the server computer and put that in the DMZ field as shown on Page 26. Save your settings and give it a whirl. :D

[rgyankees23]

Ok I did that. Now how do I test to see if people can actually connect!

[qparadox]

easiest way is to give someone you TRUST your public ip and have them connect. Don't post your public ip. Your public ip will be displayed as the WAN ip in your router configuration settings.

[leishi85]

Ok I did that. Now how do I test to see if people can actually connect!
is this a trick questions??

test by doing whatever you told your friend before, tell him try to connect to your server again.

[rgyankees23]

oh HAHA I thought there was a way I could test it myself....


Umm how do I hide the IP?

[profdlp]

Umm how do I hide the IP?
Hide it from who? You'll need to give it to the people you want to allow to connect. As qparadox said: Make sure you TRUST them!

[rgyankees23]

how can they hack into my computer? Can i enable my firewall now that I did this?

[profdlp]

If you enable the firewall you are going to lock everyone out; that's what firewalls are supposed to do.

You must be very careful how things are shared, etc. If you do it wrong someone could very well wipe your hard drive for you, or load you up with more viruses than the contagious infection wing of the Mayo Clinic.

This is where understanding how your Serv U .50 software operates becomes very important. You need to be absolutely sure that people can view only, or view and download, but NOT alter, add, delete, etc your files. Get a trusted friend who knows a little about poking around web sites to try and compromise your security. Even if he fails, others might succeed - so stay on guard. This question is pretty wide-ranging in scope. There are people who make a full-time living doing nothing but internet security. They are always studying and re-training to keep up with the latest tricks. Start simple and work your way up.

[rgyankees23]

Ahh okay....

Do you have aim so in the future I can jst IM you? You can IM me at rgyankees23 if you don't want your AIM revealed!

[Dexter]

A couple of things here:

1 - DO NOT USE DMZ! Like prof said, this exposes your entire computer to the outside world, and makes having a firewall pointless.

2 - If you are going to run an FTP server, do not use DHCP on your LAN. Assign a static IP address to your computer, using the network settings that the the router is set for. Usually, this is 192.168.x.x. D-Link routers by default use 192.168.0.1 for the router address, so your computer can be 192.168.0.2 up to 192.168.0.256. With the 70) series routers you should be able to customize the network settings if you want to use different numbers, ie, 192.168.1.x.

3 - Serv-U uses standard FTP protocols, so you need to forward port 20 and 21 to the static IP of the computer with the Serv-U software in it. This is done on the Advanced Page, using the Virtual Server tab. Forward Service Ports 20 and 21 to 192.168.0.x where x is the static IP of the computer. The page actually has presets for well known service ports, so to do FTP just pull FTP up in the drop down menu.

4 - Serv-U is VERY EASY to setup, by default all users except the admin have only read and list access. You have to manually grant write access. DO NOT GRANT ANYONE ACCESS TO EXECUTE! They could upload a virus and execute it on your system.

If you need help with Serv-U, drop me a PM, I have been using it for years. Serv-U also runs a great users forum on their site for help.

Dexter...