Remote access

Some time ago I asked in here about accessing my home iMac from a laptop when I'm away from home, but I can't find it now .

ISTR that setting up a VPN was the recommended option, but it was really a bit of overkill and looked horribly complicated... but the need has come up again.

I only really need access to my Documents folder to retrieve files... how easy (and secure) would it be to set up an ftp server on the iMac? Does OS X include an ftp server?

OS X 10.5.8, obviously a good strong password and anonymous ftp disabled!

Options include:

1 Mobile Me, and Back to my Mac. I've not used it, so can't help with setup.

2 System Preferences->Sharing. Enable File Sharing. Click Options to choose which servers to enable.

- AFP (Apple File Protocol) lets you connect from a remote Mac using Finder.

- FTP is a standard, non-secure FTP server.

- SMB is a Samba server, and allows Windows Explorer connections from remote PCs.

Check that your settings in System Preferences->Security->Firewall allow File Sharing protocols.

Your Mac is oblivious about whether the remote system is on your LAN or connecting across the Internet. Making the Internet connection work is the job of your router.

The main challenge is that you need to port map incoming requests from the Internet through your router to your Mac's local IP address. AFP or SMB use a single port - 548 or 139* respectively. FTP is more complicated as it sets up secondary data ports, and your router needs to be able to keep track of this.

Security:

Access to these file services are all as secure as your password, and data is transferred in clear. You can improve security by setting up SSH tunnels using Public Key Encryption. This sets up a trust relationship between your Mac and the remote system, and encrypts data flows between them. You then only need to enable SSH port (22) forwarding through your Internet router. Google for SSH tunnels and OS X to get details of this setup. FWIW, I use an app called Tunnel Builder to define the tunnels I need on a system I manage using SSH.

* SMB can also use port 445, but I think OS X listens on netbios-ssn port 139.

https://secure.logmein.com/products/free/Default.asp...

YEs, I use Logmein as well. It's useful for controlling and monitoring the system remotely, but the free version doesn't support file transfer.

Edited by deleted (Mon 10-Aug-09 12:24:02)

Ah, dont use it so cant tell.

Thanks Alan, good comprehensive reply, more options than I expected

AFP looks the easiest way to go, I'll practice on the LAN before venturing further afield

One thing I'm not clear about- Check that your settings in System Preferences->Security->Firewall allow File Sharing protocols.

How do I do that? The firewall is set to "Set access for specific services and applications" with a few apps enabled, I can't see how to add a protocol. Or is it automatic if AFP File Sharing is enabled?

Port forwarding is OK, I've done that before for http and Apache... I'll investigate SSH when I've got the rest of it working, one unknown at a time is my motto

Thanks, but I've just seen Alan's comment about the free version... paying for it isn't on the options list at the moment

Have uploaded some bumf here for you to download https://www.yousendit.com/download/Y1RwK2VtcWY1bmhFQ...

Edited by defcom (Mon 10-Aug-09 12:34:39)

Thanks, I'll have a read of that later, it looks useful.

If AFP is enabled in Sharing, then you should be all set for plain Finder-to-Finder access using a remote Mac.

You can test the OS X part of it all locally, as the Mac's firewall doesn't care where the connection is coming from. If it works when you connect to the Mac from another Mac on the LAN then you just have to get the router part working in order to do it across the Internet.

Thanks Alan.

I'm not at home at the moment so can't get at the router, but I suspect my Wednesday afternoon is now committed

Has anyone used fugu/openssh? http://rsug.itd.umich.edu/software/fugu/

No, but it looks very promising.

Back to My Mac is trivial to set up, and works really well. As does Back To My Time Capsule. It really is as simple as having the same .mac/mobileme account set in the iMac/Timecapsule and the remote MacBook. When you're away, the devices just show up in Finder as if you were on the same LAN.

Not quite "free", though, unless you already have a MobileMe account for other reasons.

Another useful tool is iGet. OK so you have to pay for it, but it uses SSH with either a pre-set key or certificates. It's quick and gives a finder like view of the files on you machine with rapid transfers either way.

I've used it in the past, but it is a good idea to change the default SSH port from 22 to something more obscure. If nothing else it keeps out the script kids

I now use a VPN with the free iP Securitas. If your modem supports a VPN concentrator this is pretty easy to setup. Transfers are not as quick, but it is probably more secure, even using a PSK provided you use one of greater than (say) 12 characters.

One thing to remember is that if you wish to remote login to home from a work network, most outgoing ports are generally blocked. If they aren't, they should be

In reply to a post by john2007:

Has anyone used fugu/openssh? http://rsug.itd.umich.edu/software/fugu/

Been using it for years as a simple SFTP client. Works fine on PPC and Intel for me accessing a range of SSH servers.

In reply to a post by AlanH:

If AFP is enabled in Sharing, then you should be all set for plain Finder-to-Finder access using a remote Mac.

Right, that works a treat, thanks .

Next question

My iTunes library on the iMac is set as shared, how can I persuade the remote MacBook to access it over 'tinternet?

(Music only, my "home" upload speed wouldn't cope with video )

Port number 3689 is used for iTunes sharing according to a quick Google search, but I don't know whether forwarding that port through your router is sufficient.

Thanks Alan, I'll give that a try next time I'm at home and can get at the router.

Trouble is, I only find out what I can't do remotely when I'm not at home and can't immediately check suggestions out. I suppose the next thing is to investigate remote login to the router... that's easy on a fixed remote IP but I'm on a dynamic one here

Before installing 'Spotify' on my works linux box, I used to access my home music server by tunneling through ssh (needs a proxy on the linux box too), worked fairly well.