[clue-tech] remote access to Windows network from Linux

[David L. Willson]

Nate: Turning off ping responses ~does~ "add security", just like running ssh on a non-default port, and not returning specific version numbers for PHP, and other things of that sort. Not providing more info/access than needed is part of a good security policy. Turning off ping responses ~might~ be appropriate, depending on the circumstances. 

OTOH, once on the same IP subnet, an arp request is rarely (never) declined, and so might make a better test. 

Dennis: Are you sure the VPN needs to be up to get to the TS? There are an increasing number of networks with TS available directly to the Internet. 

When you get the VPN up, what does 'ifconfig' look like? How about 'ip route' or 'netstat -rn'? Does /etc/resolv.conf get modified? Does the name of your TS end with .local? Can you dig it (the TS name) (before/after) the VPN is up? 

----- "Nate Duehr" <nate at natetech.com> wrote: 
> On 9/22/2010 8:04 AM, dennisjperkins at comcast.net wrote: 


> I'm trying to access my company's Windows network from my Linux box. I am able to connect to the VPN network using networkmanager-pptp, but that is as far as I get. I have an IP address for the terminal server but Gnome's Remote Desktop Viewer can't connect to it. I don't know if I need to do something else first, such as add a gateway. Is anyone familiar with this? Any suggestions? 
> 
> Basics first... can you ping the box you want to talk to?* 
> 
> * Assuming some doofus hasn't blocked ICMP ECHO REQUEST packets on your internal work network, as if that adds "security" or something silly like that. 
> 
> Nate 
> 
> _______________________________________________ clue-tech mailing list clue-tech at cluedenver.org http://cluedenver.org/mailman/listinfo/clue-tech 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://cluedenver.org/pipermail/clue-tech/attachments/20100922/0eda1609/attachment.html