How to allow all incoming TCP connections

Rixterz · Apr 13, 2014

Hello there,

I am making a Remote Control program like Teamviewer in VB.Net using the TCP protocol and it works fine locally (in LAN), but nobody outside of my network can connect to my computer. I've tried to add exceptions to all TCP ports and I've tried to totally disable the firewall, but there still is no connection. Why is this+how do you fix it?

-Rixterz

UsernameIssues · Apr 13, 2014

How are users attempting to connect?

How does your app handle NATs?

How does your app handle brute forcing the credentials needed to connect/control?

Rixterz · Apr 13, 2014

Reply to UsernameIssues

This link may help you understand the process:
HttpListener Class (System.Net)

Users simply connect by navigating to 127.0.0.1:8080/HttpListener/ on a web browser.

Here is my code:

Code:

Imports System.Net
Imports System.Globalization
Public Class Form1
    Private Sub Form1_Load(sender As System.Object, e As System.EventArgs) Handles MyBase.Load
        Dim prefixes() As String = {"http://*:8080/HttpListener/"}
        ProcessRequests(prefixes)
    End Sub
    Private Sub ProcessRequests(ByVal prefixes() As String)
        If Not System.Net.HttpListener.IsSupported Then
            MsgBox("Windows XP SP2, Server 2003, or higher is required to " & "use the HttpListener class.")
            Exit Sub
        End If
        If prefixes Is Nothing OrElse prefixes.Length = 0 Then
            Throw New ArgumentException("prefixes")
        End If
        Dim listener As System.Net.HttpListener = New System.Net.HttpListener()
        For Each s As String In prefixes
            listener.Prefixes.Add(s)
        Next
        Try
            listener.Start()
            MsgBox("Listening...")
            Dim numRequestsToBeHandled As Integer = 10
            For i As Integer = 0 To numRequestsToBeHandled
                Dim response As HttpListenerResponse = Nothing
                Try
                    Dim context As HttpListenerContext = listener.GetContext()
                    response = context.Response
                    Dim responseString As String = "<HTML><BODY>Yay! Response received!</BODY></HTML>"
                    Dim buffer() As Byte = System.Text.Encoding.UTF8.GetBytes(responseString)
                    response.ContentLength64 = buffer.Length
                    Dim output As System.IO.Stream = response.OutputStream
                    output.Write(buffer, 0, buffer.Length)
                Catch ex As HttpListenerException
                    MsgBox(ex.Message)
                Finally
                    If response IsNot Nothing Then
                        response.Close()
                    End If
                End Try
            Next
        Catch ex As HttpListenerException
            MsgBox(ex.Message)
        Finally
            listener.Close()
            MsgBox("Done Listening...")
        End Try
    End Sub
End Class

I ran this code on my computer and also opened Google Chrome. I navigated to 127.0.0.1:8080/HttpListener/ and I received the response. But when I use my public IP and connect to 86.xxx.xxx.xxx:8080/HttpListener/, I get this error on Chrome:
"Google Chrome could not load the web page because 86.xxx.xxx.xxx took too long to respond".

Please download and run the application from this link, and click OK on the messagebox saying "Listening...". Then go on a web browser and navigate to 127.0.0.1:8080/HttpListener/. You'll see a little message. And then go to whatismyip.com and navigate to TheDisplayedIP:8080/HttpListener/.

Alejandro85 · Apr 13, 2014

It's very likely that your router is dropping the connection, because of NAT. Your program is probably OK, as it does work locally, but you'll need to do a port forwarding on your router to let your computer actually receive the connection. As it stands in your samples, 8080 is the port you need to open.

BTW, you might want to use a non-standard port instead of 8080, as it's a frequently used to attack random server found with open ports (like you want to). At least until your program is stable enough to withstand heavy, malicious load, it's better to use a random port instead.

Also, as it seems, your program don't work like TeamViewer at all. TeamViewer uses a central server to which all clients connect, and it acts as a man in the middle that establishes the connections, so all users only need outgoing access. Yours does a direct connection, much like the built-in Terminal Serveer, in a "peer-to-peer" fashion.

UsernameIssues · Apr 13, 2014

Thanks for the additional info.

As mentioned, you will need port forwarding. Whatever port number that you opt to forward, you might want to scan it via this tool.

Rixterz · Apr 14, 2014

UsernameIssues said:
Thanks for the additional info.

As mentioned, you will need port forwarding. Whatever port number that you opt to forward, you might want to scan it via this tool.

But I have no clue how to portforward!

UsernameIssues · Apr 14, 2014

Maybe this website can guide you:
Free Help Forwarding Ports - PortForward.com

Rixterz · Apr 14, 2014

Ugh, it doesn't even work. I configured everything and forwarded it to this computer, using both tcp and udp ports as 1000-1010. I navigated to loopback:1005/SecretPassword/ and it worked, but using my public ip 86.xxx.xxx.xxx:1005/SecretPassword/ still gave nothing. Useless.

UsernameIssues · Apr 14, 2014

Use your home computer to run the scan mentioned above.

Rixterz · Apr 14, 2014

UsernameIssues said:
Use your home computer to run the scan mentioned above.

I ran the scan on port 1005 and it said

THE EQUIPMENT AT THE TARGET IP ADDRESS
DID NOT RESPOND TO OUR UPnP PROBES!

So it's just telling me what I already know without telling me how to deal with it

UsernameIssues · Apr 14, 2014

You do not want to run the UPnP scan. You want the port scan.

Rixterz · Apr 14, 2014

All ports showed to be STEALTH-rated.

UsernameIssues · Apr 14, 2014

Then the port forwarding and/or the computer itself is not setup correctly.

Sorry - I'm not very experienced in opening up ports. I spend my time closing them. I don't ever want my internet facing IP address to respond to a port scan.

Alejandro85 · Apr 14, 2014

Rixterz said:
But I have no clue how to portforward!

Then you should really learn what it is and how to use it if you plan to use your program over internet. Of course, online scans don't know what's bad with your setup, just if it it's open or not, only you have the means to get the exact cause.

Question, when you setup the port forwarding on your router web admin screen, what did you put on the target IP address? It should be the local IP of your computer.

UsernameIssues · Apr 14, 2014

Alejandro85 said:
...It should be the local IP of your computer.

...and that local IP address should probably be a static one.

Rixterz · Apr 15, 2014

I don't own the router, I just access it. I used PFConfig.exe to do portforwarding but it's useless.

Alejandro85 · Apr 15, 2014

You need to use the router web configuration screen to setup it. It's model-specific, but generally quite similar. But you of course need to have access to it to do so. I you aren't the owner, and the owner don't let you to configure it, you're pretty much out of luck. Are you by any chance on a shared connection?
Without chance of get a port forwarding going on the router, it will block every connection attempt from internet into any LAN computer, which will disrupt your program.

Your options would be to get permission (and the admin password) to setup the router, get another internet connection to test, or to refactor your program to do something like TeamViewer, if you can get an external reliable server.

BTW, what's pfconfig.exe anyway? I don't see anything like it in Windows?

Layback Bear · Apr 15, 2014

Rixterz said:
I don't own the router, I just access it. I used PFConfig.exe to do portforwarding but it's useless.

I will keep it simple.
You should not be trying to change a router or any other piece of equipment that you don't own or don't have permission from the owner to do such things.

The forum rule.

6) No discussions of hacking someones system, network, password, etc.

http://www.sevenforums.com/misc.php?do=showrules

UsernameIssues · Apr 15, 2014

Alejandro85 said:
~~~
BTW, what's pfconfig.exe anyway? I don't see anything like it in Windows?

See this link:
PFConfig Gauranteed Port Forwarding - PortForward.com

Rixterz · Apr 16, 2014

6) No discussions of hacking someones system, network, password, etc.

Chill! It's my mum's router. I don't legally own it but I have permission to access it. I understand why you thought that though.

How to allow *all* incoming TCP connections

New member

My Computer My Computer

At a glance

a.k.a. UNI

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

a.k.a. UNI

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

a.k.a. UNI

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

a.k.a. UNI

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

a.k.a. UNI

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

a.k.a. UNI

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

a.k.a. UNI

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

3 Brain Cells

My Computer My Computer

At a glance

a.k.a. UNI

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Similar threads

How to allow all incoming TCP connections

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer