Hello all.  Perhaps someone more clever/knowledgable than myself can
help out with an access problem.

My computers at work allow me to use several databases that allow
access based on the range of IP addresses used by my company. 
Recently, I've begun doing a lot of work at home.  I can log into the
company system from my home computer, gaining access to email,
calendars, etc.  They have considerable firewalls, but recognize my
username and password and let me in.

But I can't get access to the databases, since they don't recognize my
home IP address as belonging to the right range of addresses.  My
system administrator has no real interest in trying to add my IP
address to the recognized list, especially since it's a dynamic
address.

Is there a way to mask my real IP address, and use my work machine IP
(or any IP in the acceptable range) in order to access the databases? 
I want to log on from home, but have the system "see" my work IP
address.

Thanks, all.

---

Request for Question Clarification by seizer-ga on 08 Nov 2002 16:50 PST

Hi there.

Do you have a static routable IP address at work? IE: Does your IP
address stay the same, always, and does it NOT begin with 192...

---

Request for Question Clarification by seizer-ga on 08 Nov 2002 16:52 PST

And one more question, to help see a way to a solution for you - do
you have broadband internet at home (a cable modem or DSL).

---

Request for Question Clarification by maniac-ga on 08 Nov 2002 17:44 PST

Hello Pafalafa,

I see two ways to do this but it depends upon the equipment or
software at your company.
 [1] Use a dial up server at work to connect your home machine. This
would give you an IP address in the range used by your office. The
performance could be pretty poor however and this does require
equipment.

 [2] Use a program to control your machine in the office remotely.
Your office machine would then access the databases and allow you to
see the results on your home machine. However, your firewalls may
block this kind of access (for very valid reasons).

Let me know if you want me to pursue one of these alternatives in more
detail (or if both are unacceptable, please say so).
Thanks.
  --Maniac

---

Clarification of Question by pafalafa-ga on 08 Nov 2002 17:45 PST

Yes and yes.  IP at work is static and not a 192 address, and I have DSL at home.

Hi there pafalafa!

Considering your situation, your best approach would be to get a piece
of software called VNC. This software lets you use your desktop from
another computer, and thus would overcome the IP address limitations
you're experiencing. I've used this software for a while, and am
delighted with it.

VNC works by having two programs running: a server and a client. You
would install the server on your machine at work, leave that running,
and make a note of the IP address of that machine.

Then, when you get home you would install the client software, enter
into it the IP address of your machine at work, and.... you're done
already! You can access your work machine's desktop as if you were
sitting at it. You can even access the server through a java applet
client in your web browser, if you like (though this is inferior to
the client software provided normally).

The reason I asked about DSL, was that receiving the desktop image
takes up a fair amount of bandwidth, and a modem connection would make
this solution unwieldy.

VNC is, unbelievably, free software provided by AT&T, and is available
for all modern computers. It performs the same functions as commercial
services such as GoToMyPC.

Also, please note that the VNC download contains both the server and
client, so you'll only need to download one package.

VNC: http://www.uk.research.att.com/vnc/download.html
GoToMyPC: https://www.gotomypc.com/ (not a recommendation, merely for
contrast)

The only difficulty I can foresee is if your work's firewall blocks
the port that VNC uses, which is 5800. I doubt this will be a problem,
but if it is, there are two ways around this.

1) Request that your system administrator enables access to this port.

2) Change the port that VNC runs on. To do this in Windows, run
RegEdit and navigate to the following registry key:

HKEY_CURRENT_USER\Software\ORL\WinVNC3

Make sure that AutoPortSelect is 0 (zero)
Type in a new number in PortNumber (make sure you type it in decimal,
not hexadecimal).

I hope this answers your question. If I have over or under-used
technical terms, or you require further explanation of a particular
point, then please do not hesitate to request clarification before
rating this answer.

Good luck!

--seizer-ga

Search strategy:
free remote administration software
free remote desktop software
change VNC default port

---

Request for Answer Clarification by pafalafa-ga on 08 Nov 2002 19:15 PST

Seizer,

Interesting option.  I had tried VNC a while back, before my office
actually provided software for remote access, but had no luck due to
the firewall.  But perhaps your solution will work.  I'll try it next
week, and then come back here and let you know how it worked out.

In my ignorance, I was envisioning something simpler, like somehow
opening up my TCP/IP dialogue box on my home machine and just typing
in my work IP where my home IP usually shows up.  But I didn't want to
try anything like this (and I don't even know if the address can be
substituted in this way) until someone told me it is do-able and
walked me through the steps.

Anyway, hold tight for a few days, and I'll get back to you.  In the
meantime, if any other Googlers have any other suggestions, I'm all
ears...

---

Clarification of Answer by seizer-ga on 08 Nov 2002 19:32 PST

Hi there pafalafa.

To make sure, I've just tried altering the VNC server port (I switched
it to 4660, rather randomly) and it worked with the client software
without a hitch. The Java Applet was more fiddly, but I doubt you'd be
using that much.

I should mention: When using the VNC client to access ports other than
the default on the server, use the following format to write the
address:

IP.ADDRESS.GOES.HERE:PORT

That is, the IP address followed by a colon.

Useful ports which probably won't be banned, for you to try running
the server on:

80 (normally used by a webserver, so if there's a web server running
on your particular machine, do not use this!)
25 (normally used by a mail server, ditto the warning above)
23 (normally used by a telnet server, ditto above)
21 (normally used by an FTP server, ditto...)

If you need more port suggestions, please let me know. The best method
remains, of course, to contact your administrator to free one up for
you.

As for the changing your IP to a work one, this is effectively
impossible. Think of the security issues! Anyone could pop in your IP
into their computer, and be browsing your company's databases - not
something that appeals to you, I'm sure. Luckily, the internet is
(fairly) bulletproof in this respect.

The VPN suggestions by other commenters do bear some merit, but would
be more tricky setting up and would still have the same issues
regarding ports as before.

I'll await your results.

--seizer-ga

if you can set up a proxy server at work (a security risk if its not
password protected) you could make your ip appear to be that of your
work computer. You specified that there are significant firewalls.
Once you log into your network, exactly what resources are available
to you? Do you VPN into your network?

Definately look at going the way of VPN if you can do so. Its 100%
Encrypted when setup right, and your IP address will be the same at
work on your home computer once authenticated...