Linux Archive

Linux Archive (http://www.linux-archive.org/)
-   Debian User (http://www.linux-archive.org/debian-user/)
-   -   Addressing a machine behind the router without port forwarding or DMZ (http://www.linux-archive.org/debian-user/509323-addressing-machine-behind-router-without-port-forwarding-dmz.html)

David Goodenough 04-03-2011 03:19 PM

Addressing a machine behind the router without port forwarding or DMZ
 
On Sunday 03 April 2011, Dotan Cohen wrote:
> Not a Debian-specific question, but I turn to the best brains that I know.
>
> Assuming a LAN with a router and three machines:
> 10.0.0.1 Router
> 10.0.0.2 Computer1
> 10.0.0.3 Computer2
> 10.0.0.4 Computer3
>
> The router sits on an outside IP address of 123.45.67.89. There is no
> DMZ or port forwarding assigned on the router to any of the other
> machines.
>
> Is there any way an individual from outside the LAN could access a
> resource (Apache for instance, or SSH) on Computer1 assuming that he
> knows Computer1's LAN IP address? Would this this be possible if he
> had access to Computer1 and could configure it somehow (without
> configuring the router)?
If they could install vtun or openvpn (or another tunnel system) then
yes they they would have complete access to all three computers without
changing anything on the router.

David
>
> Thanks.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 201104031619.54415.david.goodenough@btconnect.com" >http://lists.debian.org/201104031619.54415.david.goodenough@btconnect.com

Pascal Hambourg 04-03-2011 07:19 PM

Addressing a machine behind the router without port forwarding or DMZ
 
Hello,

Dotan Cohen a écrit :
>
> Assuming a LAN with a router and three machines:
> 10.0.0.1 Router
> 10.0.0.2 Computer1
> 10.0.0.3 Computer2
> 10.0.0.4 Computer3
>
> The router sits on an outside IP address of 123.45.67.89. There is no
> DMZ or port forwarding assigned on the router to any of the other
> machines.
>
> Is there any way an individual from outside the LAN could access a
> resource (Apache for instance, or SSH) on Computer1 assuming that he
> knows Computer1's LAN IP address?

Yes, if the individual sits just outside the router (no other router
between them) and the router allows communication between computer1 and
the outside.

> Would this this be possible if he
> had access to Computer1 and could configure it somehow (without
> configuring the router)?

Yes, if the router allows communication between computer1 and the outside.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 4D98C82D.7080305@plouf.fr.eu.org">http://lists.debian.org/4D98C82D.7080305@plouf.fr.eu.org


All times are GMT. The time now is 12:43 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.