Connecting from outside into VM

Hello
I have a server application running that I need to access from external sources.
I am unable to connect from external clients to the server application.
I tried using with public ip and fqdn to no avail
Any help in the right direction would be greatly appreciated

Hi,
So the issue is that you want to connect to your application from outside using the publiuc IP.
Yes you can do that, but you should know that your application uses one or more ports. And Azure, by default only allow two ports (Rmeote Desktop and Management). You will need to allow the trafic on your application ports. In Azure, we talk about Endpoints.
So go to your VM>Endpoints
Click Add
Create a new Endpoint and choose the public port and the Private port.
What do Private and Public mean ?
The Private port mean the port that your application listen to : Example my application listen on port 445, so the traffic need to reach the server on that port
The Public Port means what port my client will use to send trafic to the application. In a standard configuration, the public port is equal to the private port. But for some reasons (I will detail them if you ask), they can differ. So we create the mapping
between them. Suppose that i will type port 6789
What happens then ?
My client will send the traffic to the Public IP on port 6789, when the traffic reaches Azure, Azure will pass the traffic to the VM but will change the port to 445 (Private Port). My application will work perfectly.
Regards, Samir Farhat Infrastructure and Virtualization Consultant || Virtualization, Cloud, Azure ? Follow and Ask here https://buildwindows.wordpress.com

Similar Messages

Domain computers can't runt RD Web applications when connected from outside company – Windows server 2012 R2

Hi Everyone,
I have a question related to RDweb service.
I have successfully installed RD web role on windows server 2012 R2.
All went ok. I also installed a valid third party certificate.
I can connect from outside to the server and run applications using any devices: Ipad’s, mobiles and laptops.
The problem is that: Any Computer/Laptop that is joined on the domain can connect to RDWEB from outside the company BUT CAN'T RUN ANY APPLICATIONS. The RD session is taking long time it failes.
Note that from inside the network is working.
What it can be?
Thank you in advance,
Criss

Hi,
The internet connection from where I’m doing the tests is quite good. I think the error with the latency is not relevant because probably the computerRD gateway it doesn’t allow it and that way it fails with this error. For a computer that never been joined
on the domain is working perfect no delay at all..
We are using RD Gateway … installed everything on the same machine Windows server 2012 R2.
When I click RemoteApp I see the remote the prompt of RD gateway, I click ok, then nothing happened for 2-3 min. after this time it brings the error with the delay.. OR “couldn’t connect on the remote computer because an error occurred on the remote
computer that you want to connect to.”
Again, the connection is failing ONLY when we try to connect from outside the company and it happened ONLY with the Computers that are joined on the Domain.
EX: An user (with Office Laptop - joined on domain) can connect to RD Gateway and lunch the RemoteApp’s from inside LAN but when is leaving Home can’t run the Remote App;s. In the meantime he can connect and run RemoteApp’s with his private computer.
What it can be different between the Office and his home private computer?
For Outside users we’ve have open only port 443 on firewall. Why need to open UPD 3391?
I’ve notice that if I take a laptop that is working and join it on the domain it will have the same issue. If will dis-join it will still have the same issue after all.
Thank You

Creating OIA connection from outside OIA

Hi,
We need to access OIA application using API's.
Could you please let us know how to create the OIA connection from outside OIA, so that we can run sql queries and call OIA API using Java code.
Thanks

Hi,
We need to access OIA application using API's.
Could you please let us know how to create the OIA connection from outside OIA, so that we can run sql queries and call OIA API using Java code.
Thanks

Block connections from outside a country?

Hi there,
I would like to keep certain ports open for remote access - ssh, ftp and vnc as examples.
When I do a whois on those IP's it gives me a good idea of where those unauthorized connection attempts are coming from.
http://www.abuseipdb.com/whois/91.229.77.4
The above being a good example.
Is it possible to setup rules that automatically disconnect attempts from outside the UK (in my situation) ? I realise I could whitelist the IP's I use but I find this a bit of a pain since I move around a lot. My passwords and logins are reasonably secure - but having this setup would dramatically help security.
I know my own IP shows me being somewhere in Englandshire but I do live in deepest darkest Scotland, So I'm aware the IP lookup is not perfect ... however is it possible just to blacklist series of IPs that don't orginate from certain countries?

I say dramatically help security - but I know someone is going to comment, let me rephrase - dramatically help obscurity =D I realise people can proxy etc but I'm just looking to slow down bots and toolkits - if someone really wants to connect let them bruteforce. I'd just rather automatically block the ones I'm not interested in.
I use little snitch, having had a poke around I see someone uses IP lists that they convert into CIDR and then pipe into little snitch.
http://forums.mozillazine.org/viewtopic.php?f=38&t=2520179
I realise utils like peerguardian used to be all the rage for blocking bittorrent peers from certain companies -- but does anyone know of any app that does what I'm looking for automagically?

SSH and media wiki not connecting from outside of my LAN

I cant seem to connect to ssh or my mediawiki server from outside of my LAN. Ive forwarded all the needed ports and been going over my config all night. I also made sure my router wasn't blocking anything.
-ssh tells me connection denied
-when i go to my http server i can list directorys but as soon as i try to load media wiki i get a 502 error
*these problems do not happen if im connecting from another machine in my local LAN
This is my sshd_config
# $OpenBSD: ssh_config,v 1.25 2009/02/17 01:28:32 djm Exp $
# This is the ssh client system-wide configuration file. See
# ssh_config(5) for more information. This file provides defaults for
# users, and the values can be changed in per-user configuration files
# or on the command line.
# Configuration data is parsed as follows:
# 1. command line options
# 2. user-specific file
# 3. system-wide file
# Any configuration value is only changed the first time it is set.
# Thus, host-specific definitions should be at the beginning of the
# configuration file, and defaults at the end.
# Site-wide defaults for some commonly used options. For a comprehensive
# list of available options, their meanings and defaults, please see the
# ssh_config(5) man page.
#Host *
# ForwardAgent no
# ForwardX11 yes
# RhostsRSAAuthentication no
# RSAAuthentication yes
# PasswordAuthentication yes
#HostbasedAuthentication yes
# GSSAPIAuthentication no
# GSSAPIDelegateCredentials no
# BatchMode no
# CheckHostIP yes
#AddressFamily any
# ConnectTimeout 0
# StrictHostKeyChecking ask
# IdentityFile ~/.ssh/identity
# IdentityFile ~/.ssh/id_rsa
# IdentityFile ~/.ssh/id_dsa
#Port 22
Protocol 2
# Cipher 3des
# Ciphers aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc
# MACs hmac-md5,hmac-sha1,[email protected],hmac-ripemd160
# EscapeChar ~
# Tunnel yes
# TunnelDevice any:any
# PermitLocalCommand no
# VisualHostKey no
#RSAAuthentication yes
#PubkeyAuthentication yes
#HostbasedAuthentication no
#PasswordAuthentication no
#HashKnownHosts yes
#StrictHostKeyChecking ask
#LoginGraceTime 120
#PermitRootLogin no # (put yes here if you want root login)
hosts.deny
# /etc/hosts.allow
sshd: ALL
mysqld: ALL
# End of file
# /etc/hosts.deny
ALL: ALL: DENY
# End of file
hosts.allow
# /etc/hosts.allow
sshd: ALL
mysqld: ALL
# End of file
I feel like its a security policy or something im not catching.
Ive been searching and working to fix this all night to no avail.
Thanks ahead of time for any help.

djszapi wrote:
Hello ahronzombi!
Do you try it with apache web server ? If yes, is there any related information in the apache.log when someone try to connect from out. What's in your http server related config files, vhosts, etc?
Ill try that today. i tried something similar with sshd and looked at the verbose output of the program when trying to connect remotely. it was never touched, like no one tried to connect. i feel like its a network security issue since i can connect locally. but ill check these logs as well

Connect from Outside

Hi,
I'm to connect to one 11g DB that run in SUSE. Here is the name of the DB
SQL> select name from v$database;
NAME
ORCL
SQL>
select instance_name from v$instance ;
INSTANCE_NAME
orcl
But when I login as root in the SUSE machine I've got this (the reason of that I used ssh, is due to that telnet is not available in SUSE)
[root@webserver oracle]# ssh -p 1521 orcl
ssh: Could not resolve hostname orcl: Name or service not known
Any advice for this message above?

HuaMin Chen wrote:
Many thanks Edstevens. Then how can I achieve that I want to be able to connect to it from outside. I know that "ssh/telnet" is one pre-condition for that, isn't it?Not necessarily. As I said before, you can install the oracle client on your desktop/laptop and use the tools from there. No need for ssh at all.
>
Another thing is:
I've just added 1521 port to the router
http://www.4shared.com/photo/SdPj4_y1/fig100.html
Do I need to reboot the router? Does anyone know if there's a "reboot" option for this model "TL-WR740N "?Don't know. I'm not a router guy.
>
Within the machine, I can ssh to 22 port without any problem:That's because port 22 is the standard port for the ssh communications protocol
>
[root@webserver ~]# ssh -p 22 3masters.dyndns.info
[email protected]'s password:
Last login: Fri May 13 23:30:13 2011 from 014198214097.ctinets.comFine, you can connect to the server.
As I said before, don't do this as root. Don't do anything as root that doesn't absolutely require the very powerful privileges of root.
[root@webserver ~]# exit
logout
But I do have problem to ssh to 1521 port below:
[root@webserver ~]# ssh -p 1521 3masters.dyndns.info
ssh_exchange_identification: Connection closed by remote host
One more time: port 1521 is used by the oracle listener to to listen for connection requests to the oracle database. SSH is not making such a request and is NOT the tool for connecting to the database. The listener has no idea what is being asked of it when ssh sends it a packet, so the listener refuses to deal with it. You DO NOT connect to port 1521 with ssh. You connect to port 1521 with an Oracle compliant, OCI aware, program such as sqlplus.
Any ideas?
Think of SSH as being unix's equivielent to Windows cmd.exe. You don't connect to the database with cmd, though you may open cmd and then, from there, execute sqlplus.
What do you imagine yourself doing once you 'connect from the outside'? What commands are you expecting to give? What are you expecting to see?
Best regards
Edited by: HuaMin Chen on May 13, 2011 11:51 PM

No rtmp connection (from outside)

Hi guys,
Just a little/hopefully simple Problem. I want to access a shared Object on my server (my Desktop PC). The connection looks like this:
This all works:
main_nc.connect("rtmp:/flashapp");
main_nc.connect("rtmp://localhost/flashapp");
main_nc.connect("rtmp://my_Internal_IP/flashapp");
But this is working only from the mashine the server is running on. No access from other computers in the same network seems to be possible.
I configured my firewall (Router) to forward port 80,1935 to my IP address. The Apache server which comes with FMS is accessible from the network but not from outside (Internet) --> I guess thats just a Problem of a Apache config file?! But as I've read before the FMS is running without the Apache as well!?
So, does anyone have an idea how I have to configure the FMS to access it from the Internet?
Thanks in advance

I'm having the same issue. It seems to be an issue with passive connections (vs. active connections). We've found active connections work fine, but passive connections fail.

Connecting from outside - Connection refused

Hey,
I am trying to connect to my home computer using VNC / FreeNX.
When trying to connect from inside the home network, everything works OK (using the internal network IP).
But, when trying to connect to the same computer using its internet IP, I get "connection refused".
Please note that I use a router for my home network, and I have DMZ enabled to the desktop computer.
I know that DMZ works OK (checked it with aMule).
hosts.allow and hosts.deny both contain nothing.
Tnx
Fiod

Check the logs on the box you're trying to connect to - you should be able to determine whether the connection attempt reached it and was rejected for some reason, or didn't reach it at all. In the first case, the log messages should give you some idea on how to fix it; in the second case, the problem would be on your router.

Loading LROs from outside into Essbase 9.3.1

Hello world
is there anybody who could briefly explain the process to load LROs into Essbase WITHOUT exporting them beforehand? My Business User wants to supply a html-link to all level 0 members of one dimension (exceeding 50'000 entries) so I do need a way to load them with a rule or prepare the load file with a program. Please advise, I'm lost!

I'm really not sure why you would want to doThat. Remember it has to be an intersection of all of the dimensions. So when you say you want to load it to all level zero members of one dimension, that does not work unless you intersect it with all the other dimensions.
What I recommend is to manually create an LRO and then export it using MaxL. (Export application.database lro ...... ) to see the format of the export then you can format your file to be similar. It sticks in the back of my mind that you can only get the lro if there is data at the intersection, but It's been a while since I've played with LROs so test that out to be sure

Problems connecting from "outside"

Hi,
i've a j2ee server successfully running on my machine, and all is ok when i try to connect to "http://localhost:8000/index.html" , but when i try via internet "http://<my IP address>:8000/index.html" i get a connection time out message...
Someone can help me?
Thanks in advance
Luca

Problem solved, probably posting msgs in this forum is a kind of "therapy" for me...
The problem was "stupid" due to my carelessness, but if i can help anyone, here the solution: the winXP "built-in" firewall was blocking all the connections to my server.
Hi,
i've a j2ee server successfully running on my machine,
and all is ok when i try to connect to
"http://localhost:8000/index.html" , but when i try
via internet "http://<my IP address>:8000/index.html"
i get a connection time out message...
Someone can help me?
Thanks in advance
Luca

Can't connect from Mac to PC using MS Remote Desktop

I have a 5 day old Windows 8.1 laptop.
My daughter has an application called Microsoft Remote Desktop 8.0.5 on her Mac. It is Microsoft-made application for Mac, like Office.
I want her to access my computer, using this application, to access my computer from hers, even though she lives several states away (to show me how to use this computer).
Her application asks her for:
Connection Name
PC Name (Enter Host Name or IP Address)
Gateway (No Gateway Configured is the default), but she can add a Gateway, which then asks for a Gateway Name, Server, Username, and Password.
Username (Enter Domain\User)
Password
Resolution (Native is the Default)
Colors (32 bit is the Default)
Fullscreen Mode (OS X Native is the Default)
I found my IP addresses through the command prompt by typing ipconfig /all (Of course, nothing is actually called IP address.)
She types in the "Default Gateway" into the PC name box and she can't connect. She types in the "IPv4 address" and it can't connect. (She has tried uninstalling and re-installing the software).
The error message that she gets is "Unable to connect to remote PC. Please verify remote desktop is enabled, the remote pc is turned on and available on the network and try again."
As far as I know, I allowed Remote Access, and I set up the Windows Firewall to allow Remote Access. I have uninstalled Norton Internet Security because I could not access my settings with it installed at all, and installed AVG for free instead, which only
includes antivirus, no firewall.
What do we do? How can she access my computer to teach me how to use it?

Hi,
Firstly, you need to the following on your side.
1. Allow remote connections to the computer you want to access.
2. Make sure Remote Desktop is able to communicate through your firewall.
3. Find the IP address of the computer on your home network that you want to connect to.
4. Open your router's configuration screen and forward TCP port 3389 to the destination computer's IP address.
5. Find your router's public IP address so that Remote Desktop can find it on the Internet.
Allow Remote Desktop connections from outside your home network
http://windows.microsoft.com/en-HK/windows7/allow-remote-desktop-connections-from-outside-your-home-network
Then, for your daughter.
1. Connection Name: Optional.
2. PC Name: Required. Enter the public IP address of your router.
3. Gateway: No need here.
4. User Name:
YourComputerName\YourUserAccountName
5. Password: The password of
YourUserAccountName
Getting Started with Remote Desktop Client on Mac
http://technet.microsoft.com/library/dn473012
Remote Desktop Client on Mac: FAQ
http://technet.microsoft.com/library/dn473006
However, please note that if your daughter connects to your computer, you will be disconnect and you cannot see what she is doing. It is be design.
Thanks.
Jeremy Wu
TechNet Community Support

Trying to access my 851w from outside my lan, but can access inside fine

Hi,
I purchased a 851w to use as my home router and to learn more about the cisco IOS. I have been spending some time studying for CCENT/CCNA and so far I have enjoyed learning as I go. However, I am having problems accessing this router from a remote location via ssh. I can access it just fine from my lan, but not outside it from another location. Currently, I am not using this router for internet access or anything else other than learning about the IOS, and it is connected to a basic dlink wireless router dir-615. I have port forwarding setup on the dlink that any traffic coming in on port 22 is directed to the 851w at 192.168.0.150. I also have the 851w connected with a crossover cable to a switch that is connected to the dlink router.
Like I said, I can connect just fine from my lan, but can't connect from outside. I have tried a few different things but nothing works. I also use Teraterm to connect, but have tried Putty too. I also use ddns to access it, but I have also tried the wan ip address of the dlink with no luck.
Could someone please take a look at my very basic running config and explain what I might need to do different?
Thanks in advance.
Sean

Hi and thanks a bunch for your quick response.
No, I can't ping anything other than my main router which I have setup as the gateway so why is that? For example,
ip default-gateway 192.168.0.1
Wouldn't it automatically send anything it doesn't know about to the 192.168.0.0/24 router?
I have one of the switch ports, Fast Ethernet 0, connected to another switch connected to the dlink router. I have tried different ports but it didn't change anything. I don't have anything connected to the wan port of the 851w. I was trying to simulate remote access of a switch on an internal network. My next step would be to make the 851w my default router and then try to access it from the outside, but I wanted to succeed this way first.
optimus#show ip int br
Interface IP-Address OK? Method Status Protocol
Dot11Radio0 unassigned YES unset administratively down down
FastEthernet0 unassigned YES unset up up
FastEthernet1 unassigned YES unset down down
FastEthernet2 unassigned YES unset down down
FastEthernet3 unassigned YES unset up down
FastEthernet4 unassigned YES unset administratively down down
Vlan1 192.168.0.150 YES manual up up
Yes, my internal pc is on the 192.168.0.0/24 subnet.
Best Regards,
Sean

How do i connect my time capsule from outside my home? i dont have static ip

sorry about my english...
its been 4 months now and still I am not able to connect my time capsule via internet from outside . i have read enough forums and discussion but i am confused because every discussion has different answer. please anyone can explain me the simplest way to configure my time capsule so i can connect it from other computers. i am using windows 7 64bit os.i am not advance user of networking so please explain me in detail.
some questions.
1. is it possible to use time capsule as nas using dynamic ip address?
2. if yes how and where can i get exact detail about this.
3. how to connect my time capsule form my iphone,ipad or other computers . connect through ip address or something else?
4. is it any simple installation way to do this? i heard about bonjour and icloud but dont know how to connect through this.
please help me
thank you
sachin

i am using windows 7 64bit os.i am not advance user of networking so please explain me in detail.
Here is your primary issue.. you cannot connect with win7 ..
Windows only offers SMB protocol which just about every ISP.. all responsible ones ...block..
Time Capule offers AFP to internet and only AFP.
You need to use a Mac to connect.. then use BTMM and iCloud as there is no dyndns in the TC anyway. (Actually there is a dyndns but only for apple btmm use... you cannot access.
If you want to or have to use windows.. then get a proper vpn router that offers vpn endpoints to windows and has dyndns.. setup the TC in bridge behind the vpn router and access via vpn .. this is the only safe way of connecting using SMB.

Can not foward into voicemail from outside call on CUE and CUCM 8.6

Dear Team,
I have CUE Utility and CUCM 8.6.
I can call from local, if user busy or go out office then call will foward to voice mail.It is ok.
But when i call from outside to my phone(direct line), then call can not foward to voice mail on CUE.
Please help me some solution.
Thanks.

Hi nam,
A couple of things to check. Have you set the Forward Busy/No Answer "External"
on the DN config page in CUCM?
Are the calls coming in using a codec other than g.711?
Best Practices for Deploying Cisco Unity Express
• Each mailbox can be associated with a primary extension number and a primary E.164 number.
Typically, this number is the direct-inward-dial (DID) number that PSTN callers use. If the primary
E.164 number is configured to any other number, use Cisco IOS translation patterns to match either
the primary extension number or primary E.164 number so that the correct mailbox can be reached
during SRST mode.
• Each Cisco Unity Express site must be associated with a CTI route point for voicemail and one for
AA (if licensed and purchased), and you must configure the same number of CTI route points as
Cisco Unity Express ports licensed. Ensure that the number of sites with Cisco Unity Express does
not exceed the CTI scalability guidelines presented in the chapter on Call Processing, page 8-1.
• Cisco Unity Express is associated with a JTAPI user on Cisco Unified CallManager. Although a
single JTAPI user can be associated with multiple Cisco Unity Expresses in a system, Cisco
recommends associating each dedicated JTAPI user in Cisco Unified CallManager with a single
Cisco Unity Express.
• Calls into Cisco Unity Express use G.711 only. Cisco recommends using a local transcoder to
convert the G.729 calls traversing the WAN into G.711 calls. You can configure Cisco Unified
CallManager regions with the G.711 voice codec for intra-region calls and the G.729 voice codec
for inter-region calls.
• If transcoding facilities are not available at the Cisco Unity Express site, provision enough
bandwidth for the required number of G.711 voicemail calls over the WAN. Configure the Cisco
Unified CallManager regions with the G.711 voice codec for calls between the IP phones and Cisco
Unity Express devices (CTI ports and CTI route points).
• The CTI ports and CTI route points can be defined in specific locations. Cisco recommends using
location-based call admission control between Cisco Unified CallManager and Cisco Unity Express.
RSVP may also be used.
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/srnd/4x/42unityx.pdf
Cheers!
Rob
"Far away from your trouble and worry
You belong somewhere you feel free" - Tom Petty

Do I need a domain name in order to connect to my Mini Server 10.8.2 from outside my network?

I am working on setting up my mac mini server. Aside from in home file sharing I want ot be able to connect to some files remotely and even upload files, say pictures from my camera, to my server from outside my network. I am only looking to have maybe 2 users that have access. Should I get a domain name from a place like GoDaddy? in order to set up server to use domain in initial setup? I have 2 Drobos connected with my music, videos and pictures and I wat to access them from an Android, Windows and iPod device when away from home. Any how-tos out there or good step by step guides?
Thanks for any information.
-Peace
-Dave

A normal address like www.domain.com is intended to work with static IP addresses, DynDNS is a service specifically intended for dynamic addresses and it will therefore automatically update the address e.g. name.dyndns.org to match the dynamic IP address each time it changes.
Some home broadband routers have built-in support to act as a DynDNS client but if yours does not then you can run the DynDNS software on your Mac server. This will then tell the DynDNS servers what your current dynamic IP address is so they can map it to your host name.
The result will be that your users can use a name like yourname.dyndns.org to access your server and not have to worry about the fact your IP address may change.
You would still need to run a VPN server to allow your remote users to connect to your network but OS X Server can do this. You could also run a website but depending on your needs that might be better done by using a web hosting service.

Connecting from outside into VM

Similar Messages

Maybe you are looking for