FW: [Elecraft] K2 Remote via the Internet

Sun Mar 2 14:55:00 2003

Another issue with te PCAnywhere type of connection is traffic. If the
"client" software is rendering the fancy graphics server-side, and then
transmitting all the graphics over the wire, it's far more traffic than the
occasional K2 command, which would be measured in the teens of bytes, not
the thousands.

On a website I recently put up, just drawing a graph required a 120k of
html. So, I transmit just the data (XML Recordset) and the Client builds the
chart. It's about 20K.

Chart: http://weather.visioncomm.net/ShowStrip.cfm?Type=1hr
Raw data: http://weather.visioncomm.net/Weatherdata.cfm?type=1hr

Sorry Mac and such. It's IE6 only for now. It's also honkin' in and straight
at the hill!

But it's interesting none the less.

Dan / WG4S / K2 #2456

-----Original Message-----
From: [email protected]
[mailto:[email protected]]On Behalf Of Tony Wells
Sent: Sunday, March 02, 2003 2:34 PM
To: 73 de M3MPH; [email protected]
Subject: Re: [Elecraft] K2 Remote via the Internet

M3MPH wrote:

> That would also work by landline, and not be dependant on the
> internet..  There is a shareware type of "pcanywhere" done by bell labs,
> or at least

I think you mean VNC software. I love VNC as it is open source, runs on
Linux and Windows and one can tinker with it.

I can see why you think it is a good idea, but unfortunately it it has
bigger security implications. Firstly the K2 PC will still need to have a IP
route inside the home network. Secondly There is a potential hole for
expoitation via the VNC IP Port. Thirdly, and the most dengerous, once an
intruder has got past the VNC password, you can then use the K2 PC to browse
your home network.

These are the kind of recommendations I would make to anybody that was
paying for my advice:

1. Run personal firewall software on the PC in question and only open up the
port for the K2 remote software.
2. Put a hub or switch between the PC and the rest of your network, and make
the power supply to that switched.by remote control somehow - you can get
Telephone-based or Pager-based power switches. That way you can control
access to the PC when you are away.
3 Ghost the PC for quick restore if it is trashed.
4. Ensure your firewall has the latest patches.
5. If possible, get a firewall with a DMZ (Demilitarised zone) ethernet
port. Put the K2 PC on the DMZ connection, but expect to get it trashed.
6. Open up the K2 IP Port on the Firewall to the IP address of the K2 PC.
7. If your firewall allows it, only allow fixed IP addresses from the
Internet to access your PC. If you want ANYBODY to access it, then your can
leave this step out.

Lastly, if anyone has a K2 remote setup, and are worried about potential
explotation, I can do some gentle probing to find out if they have a
problem - but please coordinate this with your ISP first as I will get a
complaint otherwise!

Regards
Tony
M3CJF
G7IGG

All mail in and out checked lovingly by hand, character by character.

_______________________________________________
Elecraft mailing list: [email protected]
You must be a list member to post to the list.
Postings must be plain text (no HTML or attachments).
See: http://mailman.qth.net/mailman/listinfo/elecraft
Elecraft Web Page: http://www.elecraft.com