WAN/LAN IP routing/spoofing question
My Zyxel router can limit access to its web configuration menu in various ways, i.e. it can be:- From LAN only, from WAN only or from anywhere From any IP address or from a single specified IP address The trouble is that I'd like to be able to configure it when I'm at home, that means "from LAN only, any IP address" *and* from work which means "from WAN only, specified IP address". The options are exclusive so I can't have both together. Can anyone suggest a way I can either:- Make my home machine's browser look like it's connecting from an outside IP address? or:- Make it look like a connection from work is coming from within my home LAN? I suspect the second possibility above is more likely to be possible, though I don't quite see how at the moment. The router is a Zyxel 2602HW by the way. -- Chris Green (chris@areti.co.uk) "Never ascribe to malice that which can be explained by incompetence."
On 18-Jan-06 Chris Green wrote:
My Zyxel router can limit access to its web configuration menu in various ways, i.e. it can be:-
From LAN only, from WAN only or from anywhere
From any IP address or from a single specified IP address
The trouble is that I'd like to be able to configure it when I'm at home, that means "from LAN only, any IP address" *and* from work which means "from WAN only, specified IP address".
The options are exclusive so I can't have both together. Can anyone suggest a way I can either:-
Make my home machine's browser look like it's connecting from an outside IP address?
or:- Make it look like a connection from work is coming from within my home LAN?
I suspect the second possibility above is more likely to be possible, though I don't quite see how at the moment.
The router is a Zyxel 2602HW by the way.
Can you not, say from home, telnet/ssh to your work machine and once logged in to that run a configuration session from the work machine but under the remote control of the home machine? Or does the router inhibit net traffic while it's being configured? Or is the work machine switched off when you're at home? (In either of the last two cases, I don't have useful ideas!) Best wishes, Ted. -------------------------------------------------------------------- E-Mail: (Ted Harding) <Ted.Harding@nessie.mcc.ac.uk> Fax-to-email: +44 (0)870 094 0861 Date: 18-Jan-06 Time: 11:54:23 ------------------------------ XFMail ------------------------------
On Wed, Jan 18, 2006 at 11:54:25AM -0000, Ted Harding wrote:
On 18-Jan-06 Chris Green wrote:
My Zyxel router can limit access to its web configuration menu in various ways, i.e. it can be:-
From LAN only, from WAN only or from anywhere
From any IP address or from a single specified IP address
The trouble is that I'd like to be able to configure it when I'm at home, that means "from LAN only, any IP address" *and* from work which means "from WAN only, specified IP address".
The options are exclusive so I can't have both together. Can anyone suggest a way I can either:-
Make my home machine's browser look like it's connecting from an outside IP address?
or:- Make it look like a connection from work is coming from within my home LAN?
I suspect the second possibility above is more likely to be possible, though I don't quite see how at the moment.
The router is a Zyxel 2602HW by the way.
Can you not, say from home, telnet/ssh to your work machine and once logged in to that run a configuration session from the work machine but under the remote control of the home machine?
Yes, but remember this is a web configurator so one needs to run a browser to do it. I have got things set up from home to work and vice versa so I can run X programs remotely but Firefox is unusably slow across an ADSL connection. I can't use a text mode browser because the Zyxel web configuration doesn't work with them (I've tried both lynx and links).
Or does the router inhibit net traffic while it's being configured?
Or is the work machine switched off when you're at home?
Neither of the above is the case. -- Chris Green (chris@areti.co.uk) "Never ascribe to malice that which can be explained by incompetence."
My Zyxel router can limit access to its web configuration menu in various ways, i.e. it can be:-
From LAN only, from WAN only or from anywhere
From any IP address or from a single specified IP address
The trouble is that I'd like to be able to configure it when I'm at home, that means "from LAN only, any IP address" *and* from work which means "from WAN only, specified IP address".
The options are exclusive so I can't have both together. Can anyone suggest a way I can either:-
Make my home machine's browser look like it's connecting from an outside IP address?
or:- Make it look like a connection from work is coming from within my home LAN?
I suspect the second possibility above is more likely to be possible, though I don't quite see how at the moment.
The router is a Zyxel 2602HW by the way.
-- Chris Green (chris@areti.co.uk)
"Never ascribe to malice that which can be explained by incompetence."
_______________________________________________ main@lists.alug.org.uk http://www.alug.org.uk/ http://lists.alug.org.uk/mailman/listinfo/main Unsubscribe? See message headers or the web site above!
What you could do is this Open a port to the outside work on your router, say port 22222 and map it back to a host on your home lan say 192.168.2.100 port 22222. (Make sure nothing actually listens on 192.168.2.100 port 22222. Then create an ssh tunnel from work to home that listens on 192.168.2.100 port 22222 and forward to your routers internal ip address, like this ssh router.external.ip -L 22222:router.internal.ip:80 once the tunnel is up you *should* be able to point your browser at http://router.external.ip:22222 and see the router from the inside Voila! Hope it works Stuart -- The problem with the world is stupidity. Not saying there should be a capital punishment for stupidity, but why don't we just take the safety labels off of everything and let the problem solve itself?
On Wed, Jan 18, 2006 at 12:28:51PM -0000, Stuart Fox wrote:
What you could do is this
Open a port to the outside work on your router, say port 22222 and map it back to a host on your home lan say 192.168.2.100 port 22222. (Make sure nothing actually listens on 192.168.2.100 port 22222. Then create an ssh tunnel from work to home that listens on 192.168.2.100 port 22222 and forward to your routers internal ip address, like this
ssh router.external.ip -L 22222:router.internal.ip:80
once the tunnel is up you *should* be able to point your browser at http://router.external.ip:22222 and see the router from the inside
Aha, yes, that looks like a way to do it. I've used ssh tunnels for other purposes (seeing an IMAP server which was limited to local connections only from the 'outside') so it's not totally new territory, thanks for the idea. -- Chris Green (chris@areti.co.uk) "Never ascribe to malice that which can be explained by incompetence."
On Wed, Jan 18, 2006 at 12:54:07PM +0000, Chris Green wrote:
On Wed, Jan 18, 2006 at 12:28:51PM -0000, Stuart Fox wrote:
What you could do is this
Open a port to the outside work on your router, say port 22222 and map it back to a host on your home lan say 192.168.2.100 port 22222. (Make sure nothing actually listens on 192.168.2.100 port 22222. Then create an ssh tunnel from work to home that listens on 192.168.2.100 port 22222 and forward to your routers internal ip address, like this
ssh router.external.ip -L 22222:router.internal.ip:80
once the tunnel is up you *should* be able to point your browser at http://router.external.ip:22222 and see the router from the inside
Aha, yes, that looks like a way to do it. I've used ssh tunnels for other purposes (seeing an IMAP server which was limited to local connections only from the 'outside') so it's not totally new territory, thanks for the idea.
Yeehaa!! It works. All it needed was the following command on the machine at work where I run Firefox:- ssh -l chris -x -L 22222:zyxel:80 84.45.228.40 cat - Then I connected my browser to localhost:22222 and it all worked! Much, much faster than running Firefox on the home machine across an X connection. So now you all know my home machine's address is 84.45.228.40 but it won't do you much good as access is only allowed from a few places. You're welcome to browse the web pages there though. -- Chris Green (chris@areti.co.uk) "Never ascribe to malice that which can be explained by incompetence."
participants (3)
-
Chris Green -
Stuart Fox -
Ted.Harding＠nessie.mcc.ac.uk