Remote access

Some time ago I asked in here about accessing my home iMac from a laptop when I'm away from home, but I can't find it now .

ISTR that setting up a VPN was the recommended option, but it was really a bit of overkill and looked horribly complicated... but the need has come up again.

I only really need access to my Documents folder to retrieve files... how easy (and secure) would it be to set up an ftp server on the iMac? Does OS X include an ftp server?

OS X 10.5.8, obviously a good strong password and anonymous ftp disabled!

Options include:

1 Mobile Me, and Back to my Mac. I've not used it, so can't help with setup.

2 System Preferences->Sharing. Enable File Sharing. Click Options to choose which servers to enable.

- AFP (Apple File Protocol) lets you connect from a remote Mac using Finder.

- FTP is a standard, non-secure FTP server.

- SMB is a Samba server, and allows Windows Explorer connections from remote PCs.

Check that your settings in System Preferences->Security->Firewall allow File Sharing protocols.

Your Mac is oblivious about whether the remote system is on your LAN or connecting across the Internet. Making the Internet connection work is the job of your router.

The main challenge is that you need to port map incoming requests from the Internet through your router to your Mac's local IP address. AFP or SMB use a single port - 548 or 139* respectively. FTP is more complicated as it sets up secondary data ports, and your router needs to be able to keep track of this.

Security:

Access to these file services are all as secure as your password, and data is transferred in clear. You can improve security by setting up SSH tunnels using Public Key Encryption. This sets up a trust relationship between your Mac and the remote system, and encrypts data flows between them. You then only need to enable SSH port (22) forwarding through your Internet router. Google for SSH tunnels and OS X to get details of this setup. FWIW, I use an app called Tunnel Builder to define the tunnels I need on a system I manage using SSH.

* SMB can also use port 445, but I think OS X listens on netbios-ssn port 139.

https://secure.logmein.com/products/free/Default.asp...

YEs, I use Logmein as well. It's useful for controlling and monitoring the system remotely, but the free version doesn't support file transfer.

Edited by deleted (Mon 10-Aug-09 12:24:02)

Ah, dont use it so cant tell.

Thanks Alan, good comprehensive reply, more options than I expected

AFP looks the easiest way to go, I'll practice on the LAN before venturing further afield

One thing I'm not clear about- Check that your settings in System Preferences->Security->Firewall allow File Sharing protocols.

How do I do that? The firewall is set to "Set access for specific services and applications" with a few apps enabled, I can't see how to add a protocol. Or is it automatic if AFP File Sharing is enabled?

Port forwarding is OK, I've done that before for http and Apache... I'll investigate SSH when I've got the rest of it working, one unknown at a time is my motto

Thanks, but I've just seen Alan's comment about the free version... paying for it isn't on the options list at the moment

Have uploaded some bumf here for you to download https://www.yousendit.com/download/Y1RwK2VtcWY1bmhFQ...

Edited by defcom (Mon 10-Aug-09 12:34:39)

Thanks, I'll have a read of that later, it looks useful.

If AFP is enabled in Sharing, then you should be all set for plain Finder-to-Finder access using a remote Mac.

You can test the OS X part of it all locally, as the Mac's firewall doesn't care where the connection is coming from. If it works when you connect to the Mac from another Mac on the LAN then you just have to get the router part working in order to do it across the Internet.