Comments on: Remote Desktop through SSH with PuTTY and Tomato firmware

By: Kristy

Kristy — Mon, 08 Mar 2010 20:59:39 +0000

I can't get it to work. I tried for a long time but I just could not get it right. I did get a connection up in just a few minutes using a demo of remote desktop software I stumbled upon. Why are third parties able to solve these issues so easily while MS just stumbles and fails?

By: GoBlog » SSH Tunnelling for Remote Desktop and SOCKS Proxy

GoBlog » SSH Tunnelling for Remote Desktop and SOCKS Proxy — Sat, 13 Feb 2010 10:03:35 +0000

[...] Rather than trying to explain it myself, there are already some nice explanations on the purpose of SSH Tunnelling and how to do it. [...]

By: alfred

alfred — Fri, 11 Dec 2009 22:14:27 +0000

worked great! thanks.

By: Hua

Hua — Sun, 16 Aug 2009 05:02:43 +0000

I have been trying to get some helps regarding the router’s port. I have set up a DDNS, and like to have access to the router’s port 5070. Is it any way to open the port? Please help me!

Thanks a lot.

By: Kim

Kim — Sat, 27 Jun 2009 21:30:36 +0000

It took me a little while, but I figured it out. Had some issues getting my router configured properly. But now it works! Thanks so much, your instructions were awesome.

By: java

java — Wed, 29 Apr 2009 04:19:43 +0000

You are awesome. It worked like a charm. Initially I ran into some issues where I have been getting connection timeout at putty session since my vonage phone adapter was directly connected to cable modem and my router was behind the phone adapter. I changed the configuration and made my phone adapter behind the router/firewall. My router is now directly connected to cable modem.

By: ratchet

ratchet — Mon, 30 Mar 2009 14:00:10 +0000

Thank you so much for correcting my carelessness! I’d entered that script weeks ago and forgot what all it entailed and just pasted it here.

By: Pascal

Pascal — Mon, 30 Mar 2009 13:03:04 +0000

Done. I usually edit posts to replace public IP addresses and MAC addresses with fake when I notice…

By: ratchet

ratchet — Sun, 29 Mar 2009 05:21:21 +0000

Pascal, I haven’t tried this yet, but I will hopefully tomorrow. I woke up and remembered something, in the meantime, could you kindly hide my MAC in my post above. I realize without an IP it’s benign but it is kind of the principal of the thing.

By: Pascal

Pascal — Sat, 28 Mar 2009 16:16:59 +0000

You cannot easily permanently write data on the file system of the router. The home folder is in RAM. So the init script is just there to generate the file with your mac address so you don’t have to remember. The init script is permanently saved on the router’s flash somewhere.

the magic packet is sent at the moment you execute sh wakeup-mycomputer.sh. There is no automation.

If you configure SSH tunnels, you do not need to enable port forward because the communication will be “tunneled” through the SSH connection up to your LAN.

Pascal.

By: ratchet

ratchet — Sat, 28 Mar 2009 15:49:40 +0000

Thank you for the response. You are the master! OK, so this is where I’m confused:
1. In the Initialization script of the firmware (Administration / Scripts / Init tab), type this:
echo “/usr/bin/ether-wake 01:02:03:04:05:06″ > /tmp/home/root/wakeup-mycomputer.sh
(change 01:02:03:04:05:06 to the mac address of the computer you want to wake-up)
2. Save and reboot the router, you should see the file “wakeup-mycomputer.sh” appear in the root home directory when you connect using SSH.
3. Try it “sh wakeup-mycomputer.sh”
When/if I log in remotely to the router, what must I do, or will it auto start to wake the desktop? Secondly, do I still need to port forward? If I do, for security reasons, I could just enable the forwarding after I’m connected to the router and then initiate wake. Would this work and how would I do that? I test this these things using Hotspot Shield, a free VPN. Again, thank you for your time!

By: Pascal

Pascal — Sat, 28 Mar 2009 15:13:36 +0000

Yes I remember! Welcome back

I guess to make my opened SSH port more secured would be to use key files which are more secure by nature than an simple password. If we could (I need to verify) force both password and keyfile that would be even more interesting.

Pascal.

By: ratchet

ratchet — Sat, 28 Mar 2009 12:21:21 +0000

Pascal, don’t know if you remember me or not, however, on your “Tomato Firmware: Remote Desktop Through SSH, using W-O-L and …” blog we had communicated about the inability to broadcast an address using a WRT54GS router.
I was able to resolve that issue using this script and Tomato: sleep 5
ip neigh change 192.168.1.254 lladdr 01:02:03:04:05:06 nud permanent dev br0
ip neigh add 192.168.1.254 lladdr 01:02:03:04:05:06 nud permanent dev br0
The magic packet and that script work perfectly, the only down side is leaving a port open. I found the “SSH Wake” directions a little confusing, however, the directions in this “how to”, especially with the screenshots are great. All I want to do is wake the desktop with my laptop when visiting my children. I would then use TeamViewer (http://www.teamviewer.com/index.aspx). What do I amend in these directions to only securely wake the desktop? Thank You!

By: Martin

Martin — Tue, 24 Mar 2009 10:01:19 +0000

Will this work with rdp remote sound?

By: Pascal

Pascal — Mon, 09 Mar 2009 11:22:48 +0000

Thanks Tom!

By: Tom

Tom — Fri, 06 Mar 2009 22:00:50 +0000

For ‘anonymous’ proxy surfing with http + putty, if you are using firefox you can change “network.proxy.socks_remote_dns” to true to have the DNS requests done on the proxy, rather than the client, see: http://kb.mozillazine.org/Network.proxy.socks_remote_dns

By: Eric

Eric — Thu, 05 Mar 2009 00:11:58 +0000

Hey Pascal,

Victek’s Tomato mod is based on Roadkill’s speedmod (at least the changes are based on that). You can read more about the changes on this page.

http://touristinparadise.blogspot.com/2008/04/linksys-wrt54gl-routers-improving.html

I am running Victek’s mod for a while now. Overall it is Tomato (when you change the skin back), but all those little tweaks and addons are great (they are all listed on the previous link)

By: kevin

kevin — Wed, 18 Feb 2009 01:53:24 +0000

Worked perfectly, thanks a ton!

By: Pascal

Pascal — Sun, 08 Feb 2009 02:04:24 +0000

Hi Eric,
I have used SSH tunnel as a proxy in the past because my work network was denying some protocols and ports (they were denying non standard ports for protocol. Ex: HTTP on port 8080, or HTTPS on something else than 443). However, from what I understood when I tried this is you are not totally “anonymous” because the DNS names are still resolved outsite of the tunnel. So they may know to what domain you go, but not which page you downloaded.

This is sad Vitek’s mod has no screenshots on the link you provided . Is it explained why it is more responsive? I should take a look when I’ll have time…

Pascal.

By: Eric

Eric — Sun, 08 Feb 2009 00:51:09 +0000

I have been running Tomato for quite a while now. SSH can become a really powerful tool. Especially with anonymous web browsing.

Here is a guide that got me started:

http://lifehacker.com/software/ssh/geek-to-live%E2%80%94encrypt-your-web-browsing-session-with-an-ssh-socks-proxy-237227.php

Also have you tried Victek’s tomato mod? It adds alot of features and improves high connection responsiveness. Also I like the new skin choices and speed limiter options.

Link:

http://victek.is-a-geek.com/tomato.html