Welcome to the MacNN Forums.

PubGuy · Jan 28, 2004, 11:36 AM

Here's my setup:

G4 desktop connected via airport to a graphite base station which is connected to an ADSL modem for broadband access. Internally, the G4 is configured as 10.10.10.7 with a fixed IP address.

I also have a TiBook with airport.

Within the ABS network, I can use the TiBook to connect to the G4 by using CMD-K and doing afp://10.10.10.7 and am presented with the dialog to authenticate and select the volumes I want to attach to. Fantastic, everything is good.

The problem is, I want to be able to use the TiBook remotely when traveling and being able to do the same thing (since I will know the external IP address), but I can't get it to work.

Can someone post step-by-step instructions on how to do this? I'm getting frustrated because I know it's something simple preventing me from doing this (maybe some type of port forwarding required on the ABS, maybe a config file somewhere, I just don't know).

Thanks all !!!

kampl · Jan 28, 2004, 05:52 PM

Port forward TCP port 548. I personally wouldn't recommend this, speaking from a security standpoint, but that should do it.

PubGuy · Jan 28, 2004, 06:08 PM

I tried doing that, didn't have any impact. Still not sure why I can't get it to connect.

kampl · Jan 28, 2004, 06:33 PM

Do you have a firewall running also, either on the host or the basestation (I don't have one soo I don't know what it can do exactly)? The same port will have be allowed through the firewall as well if such a device/service is running.

PubGuy · Jan 29, 2004, 12:24 AM

Got it working. A couple of things:

I had to change the configuration of the network so that the Airport was at the top of the list (which it already was), followed by the built-in ethernet (even though no other ports were active).

You can not test the connection from any computer inside of the Airport network. It fails every time. I had to take one computer and connect it to a dial-up connection to test it. Worked fine every time.

I DID have to forward port 548 specifically to the machine in question to get it working, otherwise it would fail.

The only sharing I have turned on right now is Personal File Sharing and Printer Sharing. The firewall is active.

Since I'm set up thru ADSL with a dynamic IP address, I signed up at www.no-ip.com to get a free address and downloaded their free OS X software to keep their servers notified whenever my external IP address is changed. This way I don't have to worry about chasing around the IP address myself.

This will do what I was hoping for. However, what are the security concerns with mapping port 548 directly to my machine? Is there a better way for me to accomplish the same thing without loosing security?