Xstart Problem with Linksys Router
From: Hong G. Im (
)
Date: Wed May 15 2002 - 15:04:15 EDT
I see similar questions asked on this usergroup, but couldn't find the
answer.
I'm using Exceed v6.2 at home on a WinXP machine connected to a cable
modem via Linksys wireless router (BEFW11S4 V.2). Without the router,
everything works so I know that it's not the problem with WinXP or the
cable modem. With the Linksys router, however, the X-window never
shows up on Xstart. Xstart only works with the "Terminal Emulator"
mode but I'd like to use it in the "X Window" mode. I understand that
it's related to the firewall issue, and in fact I got some suggestions
from the Linksys tech support (see appended message below).
Following Linksys instruction below, I have tried the IP address
192.168.1.100 and port number 23 (telnet) in the port forwarding
setting. I have also tried the DMZ host which should open up the port
regardless of the port forwarding. I even tried to disable DHCP and
set up static IP as 192.168.1.100 under both port forwarding and DMZ
host options. Unfortunately, none of these worked for me. Was there
something wrong in the IP address or the port number? How do I
properly set up the static IP address if necessary? If anyone figured
out the solution to this problem, I'd very much appreciate hearing
about it. Thank you.
Hong
====================================================
The following is the response I got from the Linksys tech support:
Thank you for contacting Linksys Customer Support.
The router has a built-in firewall, which prevents outside users from
accessing your internal network. Because of this, you have to open
ports in order to use online applications.The router¡¯s Port Forwarding
feature allows users from the Internet to access certain services on
the internal network behind the router without compromising your
security.
When you want to use this application, first find out their service
port numbers.In your case find out the ports used by Exceed
To specify a server behind the firewall and forward the necessary
ports, kindly follow these simple steps:
1. Go to http://192.168.1.1, and input the password for the router
2. Go to the ¡°Advanced¡± tab> ¡°Forwarding¡±
3. Enter the Static IP address of the computer
4. Specify the service port nubmer
5. Choose Both for protocols.
6. Click ¡°Apply¡± and ¡°Continue¡±.
Lastly, in order for your router to successfully trigger ports, the SPI
feature of the router should be disabled. This feature checks the state
of a packet to verify that the destination IP address matches the
source IP of the original request. SPI opens the ports as needed as
long as the data transfer session originates from a LAN side computer.
Think of SPI as "Dynamic Port Forwarding".
The SPI option is an experimental feature. If you enable SPI, it will
DISABLE THE FORWARDING FEATURE. SPI looks at each packet a little more
in depth than just normal routing.2 It checks where the packet is going
and where it is from and remembers this info for the future. If a
packet comes to your door that has the right routing information, a
normal NAT might just pass the packet on regardless. However, an SPI
firewall might say, 'Hey, wait a minute, this packet is from somewhere
that I haven't visited lately, its unsolicited, so I'm just going to
ignore it.'
The SPI option can be found in the router's Filters Page :
http://192.168.1.1/Filters.htm ; under the Advance tab of the router's
web utility page.
If the above procedure does not work, then I would advise you to use
the DMZ host feature. The DMZ Host setting allows one local user to be
exposed to the Internet to use a special-purpose service such as online
gaming, audio/video-conferencing, application hosting, etc. DMZ hosting
allows 1 PC to be exposed to outsiders. This means that this PC will
not have any firewall protection simply because the computer which is
specified at this tab is placed outside the router's firewall. It is as
if you are bypassing the router and directly connecting your computer
to the modem. This feature can be found at the DMZ Host tab under the
Advanced tab of the router's web utility page. The computer you are
intendng to place outside the firewall should have a static IP address
below that of the IP range of the DHCP server of the router. This IP
address should be specified at the said tab.
This archive was generated by hypermail 2b29
: Fri May 31 2002 - 23:54:01 EDT
|