Port forwarding via Router/Firewall - problem

Discussion of open issues, suggestions and bugs regarding network security and data protection solution - SecureBridge
Post Reply
zd
Posts: 78
Joined: Sun 01 Jul 2007 13:16

Port forwarding via Router/Firewall - problem

Post by zd » Wed 10 Nov 2010 22:36

Hi!

I'm using SecureBridge with IBDAC to connect to an FB server over the Internet.

Here is my config:
Client running IBDAC with ScSSHClient
|
Internet
|
Router/Firewall with a Dyndns.org address (myhostname.dyndns.org)
Router is forwarding port 22 to IP address 192.168.1.102
|
Server with IP address 192.168.1.102 running ScSSHServer and Firebird 2.1

Settings:
ScSSHClient hostname: myhostname.dyndns.org
IBDAC server: localhost
Automatic port forwarding for ports 3050 and 5000 using SC port forward components on client's side

Here is the problem:
If I set DestHost of the port forwarding components to myhostname.dyndns.org IBDAC is giving me "Connection rejected by remote interface" error.
If I set DestHost to 192.168.1.102 (local IP of server) the connection is made.

My question is:
Why I do I have to set DestHost to an IP address that I propably won't even know in a real-life environment? Usually, you only know the hostname of the server, port forwarding should be automatic...

Am I doing something wrong? Is there a workaround?

My other question is:
When making a remote connection the system is very slow and there is a great lag. I've tried other similar solutions before (like Zebedee) and there were no such speed decrease. Compression is allowed in both ScSSHClient/Server. Is the lag due to SecureBridge?

Thanks!

Dimon
Devart Team
Posts: 2910
Joined: Mon 05 Mar 2007 16:32

Post by Dimon » Fri 12 Nov 2010 14:48

1. If your Firebird and SSH server are located on the same computer, you can specify 'localhost' in ScSSHChannel.DestHost. DestHost is sent to the SSH server and therefore this address is applied relatively to the server.

2. I could not reproduce the problem. SecureBrdige has high performance. Try to set the TScSSHClient.CompressionClient property to the csRequired value.

Post Reply