Accessing DB remotely: Port 5003 & Security steps

[dannylan]

Hello! At the office my FM databases are hosted on an iMac running FM Server 5.5, I want to connect to them remotely. They have suggested that the best way to do it is to call my broadband provider and order a static public IP address that forwards to the private IP address assigned to the iMac. Then, when I'm away, I can simply go to "Open Remote" on my FM and enter the public address to log in to my DB. Under this scenario, I have two questions:

1. They told me I have to configure port 5003... How and where do I do that?

2. Security: What steps do I need to take to prevent a "hacker" from finding the public IP address and getting in? I'm the only one that will know it and use it but I've heard that hackers use software which "detect" these kind of "open doors". I don't want to purchase anything expensive. Will the firewall on OS X do the job? The iMac currently has OS 9.2.2 but I would upgrade if that's the solution.

Thanks much for all your assistance!

Best!

[LiveOak]

Yes, you need a static IP address.

1) If you don't already have a router, you need one. I like the Linksys, but the Netgear is good too. The port will be "opened" on the router. Exact instruction depend upon the router.

2) The router will do a lot. All your FM files need to be password protected. FM data to and from the remote computer is not encripted and can be "packet sniffed". This is probably only of practical concern if the data contains financial, medical or other highly sensitive information.

Another approach is to use a program such as Timbuktu to access and "remotely control" on of the FM client machines on your network. Access is account name and password protected. Data is sent from the remote is not FM data, but KVM (keyboard, video, mouse) information. As such, it is much harder to make sense of. This approach is much faster than plain old remote FM access, as the real work is being done on the client machine local to the FM Server computer.

-bd

P.S. Please don't make duplicate posts to multiple forums.

[Steve T.]

Hi, folks! Here's a FileMaker TI doc on port 5003 and configuring routers for those interested...

Internet Firewall and Router Configuration (TCP/IP Port 5003)

http://www.filemaker.com/ti/104289.html

--ST

[dannylan]

Hi LiveOak, thanks for your answer.

Is Timbuktu available for Mac?

P.S. OK, I got it about not posting twice in different forums.

[dannylan]

Hi Steve! Thanks for you reply. OK, I have been able to connect via the public IP. Questions:

1. FM is rather slow in opening, searching, running scripts, etc... On the host machine I have broadband but in the client it is 56K dial-up... If I use broadband on the client (say, 256K DSL), would speed improve significantly? What other suggestions may I follow to enhance speed?

2. Since you use a Mac as well: What kind of firewall do you recommend me to use for the host machine? Right now it's running 9.2.2 but I'm aware of the fact that OS X has a built-in firewall, so I wonder if it's worth upgrading to it in order to activate sucb firewall and increase security?

3. Do you know how can I open files (e.g. Word, excel, etc) residing on the host machine? I tried entering the host's public IP address in the web browser with the hope that I could see the hard disk contents but it didn't work.

Thanks for the knowledge!!

Best!

Dan

[Ender]

Is Timbuktu available for Mac?

Yes.

http://www.netopia.com/software/products/tb2/mac/index.html

[Steve T.]

Hi, d!

I'm not that familiar with home networking speeds (University T3+), but I would think anything better than modem speeds will definitely show improvement. As for your firewall, I think there are OS9 software one's available for download, but I probably wouldn't bother. OS X needs the firewall because it is UNIX-based and susceptible on a command-line level; plus the internet is crawling w/mischievous *nix folks. I believe OS 9 is much harder to crack... remember all those Crack-A-Mac contests people used to have? You can use the OS X utility NETWORK UTILITY to run a port scan on the computer if you want to see open ports, but are you expecting an attack? How secure do you need to be? Someone could probably PING you to death, but I'm not sure what else. Again, I am not a security expert, but I'd recommend upgrading to OS X, anyway, though... for more reasons than just the firewall.

Now to access a host computer's files from a browser, they would have to all be in the web server's root directory. In FM, that would be the Web folder... I do not recommend this, however. In OS 9, you can enable filesharing over AppleTalk, but you have to enable the TCP/IP option if you are going to access it from OS X... you would connect from OS 9 using CHOOSER under the Apple menu and selecting APPLESHARE and then typing in the desired computer's IP address or domain name. If you're looking from the same network, it can be browsed from a list. In OS X, you can log on to any other OS X computer that has Personal File Sharing enabled. Just go to the Finder's GO menu and select CONNECT TO SERVER... and then type in the desired computer's IP address or domain name and you can access just about everything you'll need (login/password required of course). Again, if you are on the same network, you can just browse for it from the list that shows up.

Hope this helps you get going!

--ST

[Ender]

1. FM is rather slow in opening, searching, running scripts, etc... On the host machine I have broadband but in the client it is 56K dial-up... If I use broadband on the client (say, 256K DSL), would speed improve significantly? What other suggestions may I follow to enhance speed?

Dan,

FileMaker 5/6 performance over a WAN is very dependant on network speed. 256K DSL is about as slow as you can go without going bald waiting for it to do anything (but you may still end up pulling out your hair in frustration.) 384K is better, but if you need to support multiple connections look to something faster yet.

There are things that can be particularly problematic with a slow WAN connection:

Graphics tend to be slower over a WAN.

Searching on unindexed fields or related fields is very slow in FM5/6.

Sorting can be slow on large found sets (especially slow with unindexed fields).

Portals that are sorted by multiple criteria are pretty ugly in FM5/6.

To avoid these issues, you have to design your solution with slow network speed in mind. Use simple or optimized graphics. If possible, don't use unindexed fields in built-in finds or sorts. Or give users fair warning before running a report that uses such a find or sort. Filter portals to reduce the number of related records shown. Don't try to show more than one or two portals on a layout.

I use Timbuktu to remotely handle routine maintenance from home, but I don't recommend it for everyday use of the database.

Also, to add to Steve's recommendation, I've found my FM Servers to be much more stable since upgrading to OS X (10.3).

[dannylan]

Thanks a lot, S!! :-) I tried connecting as you explained and it works like a charm!! I love Macs! And you're right about the security issue, I really don't have anything that a hacker would use other than some mp3 songs and boring documents :-> I guess I got carried away on that one.

Best!

[dannylan]

Hi Ender! Thanks for all the suggestions. I have indexed all fields as you suggested. Also, there only two portals on the main screen and not too much graphics so I'll be OK I guess.

Regarding Timbuktu: This software and Apple's "Remote Desktop" are virtually the same thing, right?

Regarding "I've found my FM Servers to be much more stable since upgrading to OS X (10.3)", can you expound further on why with specific examples?

Best!