VPN & Direct Connections

[Xanex]

I am having some problems with creating VPN's and doing some other webstuff services EG webcam and Winamp ShoutCast DJ'ing

I've used HT Webcam 3.0 AND WebCamXP pro to host my webcam.

I have tried to set up all sorts of direct connections and its hit and miss,

I am behind a Netgear DG834 router modem with the latest patches and firmware, these are months old and have shown no known problems. There are 2 computers on my network both running XP Pro SP1 with the lastest patches and drivers etc.
I know how to set up port forwarding with this router and it works with other programs such as bittorrent etc.

Basically everything is up to date and has been working fine but i know from this forum that people are quick to point the finger at patches and drivers and hardware, let me reasurre people, this is NOT the case

PC#1 Specs:

Windows XP Pro SP1 + all updates
Chaintech 7NJS Ultra 400 Motherboard
AMD 2000+
1024 DDR 2700 ram
2x 20 gig maxtor HDD's on onboard IDE
1x 80 gig maxtor HDD on PCI IDE raid cable
Soundblaster Live 5.1 digital
Onboard nVidia Network card

PC#2 Specs:

Windows XP Pro SP1 + all updates
AMD 1600+
256 DDR ram
1x 20 gig maxtor HDD on onboard IDE
Soundblaster PCI128
Standard 10/100 Network card

My ISP is Virgin.Net

I can host Direct connect games such as Empire Earth and Unreal Tournament (but not Age of Mythology, but i hear that has problems anyway)

I can do direct connect for my DJ'ing with winamp's shoutcast plugin, ie people can direct connect to me and listen. But the Server gives

[yp_add] yp.shoutcast.com gave extended error (Cannot see your station/computer (IP: 62.252.0.7:8000) from the Internet, disable Internet Sharing/NAT/firewall/ISP cache (Connection refused))

as an error, the ip given is NOT my IP nor is it the IP of the proxy that whatismyip gives, IT IS within the same domain ie whatismyip reports 62.252.0.5 but shoutcast says 62.252.0.7

BUT i cannot host VPN's or view my webcam from the IP addy +port number over the internet.

A friend tried to view the webcam but gets either a blank page OR parts of the HT webcam page but not the picture, and when i created the VPN he can connect (i think)but he cant log in, it just times out on the verifying passwords, ive set up the same account (Guest) which requires no password and this works via PC#2

He is a IT computing student so knows more than I do. And connects via a USB modem and has no network, same OS and up to date patches on everything.

I CAN view the webcam and connect to the VPN from PC#2 using the internal ip for the webcam/vpn

Checking with ICQ and my router it reports my correct IP, but using some websites (www.whatismyip.com) it reports my IP addy as something else, this i have found out to be a transparent proxy server (http://www.samair.ru/proxy/proxychecker/), which does not need to be configured in IE or my connections. For all intents and purposes i am directly connected to the internet.


Your Proxy Is Transparent

Remote IP detected: 62.252.0.7
HTTP Requests forwarded for: 82.3.245.32
HTTP Client IP: Negative
HTTP from: Negative
Client IP: Negative

--------------------------------------------------------------------------------
Other Information
--------------------------------------------------------------------------------

UserAgent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Came From: Negative
HTTP VIA: Negative
Remote Host: cache4-glfd.server.ntli.net
Forwarded: Negative
Xroxy Connection: Negative
Cache Control: Negative
Proxy Connection: Negative
Useragent Via: Negative
Cache Info: Negative


Some things can see my real IP (ICQ) others see my Proxy IP (whatismyip)

I have even tried setting myself to be the default DMZ server and ive turned on the "respond to ping on WAN port" options on the router. no luck.

I use norton internet security 2003 with the lastest updates etc on both machines, but switching this on or off changes nothing

ANY help would be of great use


[UPDATE with more info]

[Xanex]

BUMP I really need this answered if possible and I dont want it to dissappear, im not writing that out again

[snowmonkey]

Xanex, I'm not familiar with Webcam sharing programs and Streaming video and Audio setting,,, but I'm just going to through in few ideas that might help you.

I know for the fact that In terminal service you need to have password for every account or else in wouldn't work, plus Guest account has built in limitation so you may want to try another account (on the other hand, this setting works from PC#2...hummmmmmmm).

When you go from PC1 to PC2, you would be on LAN so you have the firewall in between the two PCs...would it be possible if you could put on PC on LAN and another PC on DMZ and try it again ?

From what I saw for your router spec, your router has VPN pass-through feature. what port have you are using for that ?

cheers

[Xanex]

Norton Internet Security has built in rulz for VPN stuff so i kno wits not that, even tried it with it off.


Everything works via the lan via the router, vpn passthru is not required for that but i set up the ports anyway of 1723 and 47.
the router has pre cofigured port settings for vpn in the firewall settings

I have set myself (192.168.0.2) to DMZ and this doesnt work either (router is 192.168.0.1 pc#2 is 192.168.0.3)

im really stumped on this one. it seems no services that i run from my machine are visible to the outside world.

[snowmonkey]

I hope you are not trying to connect to 192.168.0.2 while you are on the DMZ !!

You have to realize (I probably know that already) that DMZ has very limited access to LAN and LAN has full access to DMZ (unless you have changed the rules).... when you are on the outside trying to connect to a LAN, your router has to know all the VPN traffic has to be forwarded to a certain IP with that said... Try to connect to real IP of the router not the none rout-able ones (192.168.x.x)....

Again, give that a try... I'll be around here.... let's see if we can fix this

cheers

[Xanex]

LOL no (DMZ internal IP)

Thats what I've been trying to do is connect to the router/WAN IP, im savvy with internal/external IP's.

The router (192.168.0.1) can assign me (192.168.0.2) as the DMZ server, anything within the 192.168.xx.xx range/internal doesnt matter, since all PC's can see every other PC and port forwarding does matter as all ports can be announced on the LAN.

Only point of DMZ is for the router to forward all inccomming specified/non specified connections to the designated machine without the need to set up a rule for each of the ports, but any other services specifcally required for other machines have to be set up, normal internet usage works without need to set up ports, IE msn etc if DMZ is enabled

I can ping the WAN IP from any of my machines, so it is responding.

When i am the DMZ i am still able to connect to myself via the internal IP so i can view my webcam etc. http://192.168.0.2:8010 etc