PDA

View Full Version : Remote Streaming Over Internet



Neil Cameron
2006-01-03, 05:26
I'd like to try this and play my files when I'm somewhere else, but I need
some help.

I know I have to open up ports 9000 and 3483, but:

- how do I know what IP address my home PC is presenitng to the outside
world - I have a SpeedTouch Broadband modem?
- do I have to use iTunes or WinAmp remotely; can't I just connect to the IP
address using Slimserver directly?

--
Neil

mherger
2006-01-03, 05:44
> - how do I know what IP address my home PC is presenitng to the outside
> world - I have a SpeedTouch Broadband modem?

Use a service like dyndns.org.

> - do I have to use iTunes or WinAmp remotely; can't I just connect to
> the IP
> address using Slimserver directly?

You can configure your SB manually to connect to that ip address.

--

Michael

-----------------------------------------------------------
Help translate SlimServer by using the
SlimString Translation Helper (http://www.herger.net/slim/)

bishopdonmiguel
2006-01-03, 05:49
Go here.... http://www.whatismyip.com

Then go here... http://www.dyndns.org and sign up for a free dynamic ip account. You will need to determine how you will want to keep the account updated with your ip. Some modems/routers have this feature or you can use the client software.

I don't recommend connecting directly to your computer without at least enabling some of the security settings. Even this isn't optimal. You really should use a secure tunnel, but the setup is more complicated.

Neil Cameron
2006-01-03, 09:14
Did the first; it is the fixed IP that my ISP told me about - but of course
all the PCs on the home LAN give the same answer.
Does anyone know how to use the NAT and related settings on the Speedtouch
510 to fix this?

--
Neil


"bishopdonmiguel"
<bishopdonmiguel.2127db (AT) no-mx (DOT) forums.slimdevices.com>
wrote in message news:bishopdonmiguel.2127db (AT) no-mx (DOT) forums.slimdevices.com...
>
> Go here.... http://www.whatismyip.com
>
> Then go here... http://www.dyndns.org and sign up for a free dynamic ip
> account. You will need to determine how you will want to keep the
> account updated with your ip. Some modems/routers have this feature or
> you can use the client software.
>
> I don't recommend connecting directly to your computer without at least
> enabling some of the security settings. Even this isn't optimal. You
> really should use a secure tunnel, but the setup is more complicated.
>
>
> --
> bishopdonmiguel
> ------------------------------------------------------------------------
> bishopdonmiguel's Profile:
> http://forums.slimdevices.com/member.php?userid=278
> View this thread: http://forums.slimdevices.com/showthread.php?t=19662

tyler_durden
2006-01-03, 09:26
I don't know what sort of internet connection you have, but my cable modem system has about 3 Mbps download speed and only 300kbps uplink (this is typical for cablemodem service). That means I cannot stream .flac files to a remote location via the internet because most require about 1 Mbps to stream.

I could stream mp3s...

TD

Neil Cameron
2006-01-03, 11:37
Or which port to forward ...

--
Neil


"Neil Cameron" <ncameron (AT) msn (DOT) com> wrote in message
news:dpe7ui$n29$1 (AT) sea (DOT) gmane.org...
> Did the first; it is the fixed IP that my ISP told me about - but of
> course all the PCs on the home LAN give the same answer.
> Does anyone know how to use the NAT and related settings on the Speedtouch
> 510 to fix this?
>
> --
> Neil
>
>
> "bishopdonmiguel"
> <bishopdonmiguel.2127db (AT) no-mx (DOT) forums.slimdevices.com>
> wrote in message
> news:bishopdonmiguel.2127db (AT) no-mx (DOT) forums.slimdevices.com...
>>
>> Go here.... http://www.whatismyip.com
>>
>> Then go here... http://www.dyndns.org and sign up for a free dynamic ip
>> account. You will need to determine how you will want to keep the
>> account updated with your ip. Some modems/routers have this feature or
>> you can use the client software.
>>
>> I don't recommend connecting directly to your computer without at least
>> enabling some of the security settings. Even this isn't optimal. You
>> really should use a secure tunnel, but the setup is more complicated.
>>
>>
>> --
>> bishopdonmiguel
>> ------------------------------------------------------------------------
>> bishopdonmiguel's Profile:
>> http://forums.slimdevices.com/member.php?userid=278
>> View this thread: http://forums.slimdevices.com/showthread.php?t=19662

Robin Bowes
2006-01-03, 12:07
Neil Cameron said the following on 03/01/2006 18:37:
> Or which port to forward ...
>

It's in the FAQ on the slimdevices website.

R.
--
http://robinbowes.com

If a man speaks in a forest,
and his wife's not there,
is he still wrong?

geoffb
2006-01-03, 12:10
On 1/3/06, Neil Cameron <ncameron (AT) msn (DOT) com> wrote:
> Or which port to forward ...

Assuming you want to use SoftSqueeze from a remote location to play
music served up by your SlimServer at home:
Forward port 9000 to allow web access to the SlimServer
Forward port 9090 to allow SoftSqueeze access to the SlimServer
Port 3483 (mentioned in your original post) is actually used for
Terminal Services / remote desktop connection. You probably shouldn't
forward it unless you use a secure tunnel (see below).

I don't use the same router/modem as you, so you're on your own with
finding the port fowarding setup; but it shouldn't be too complicated.
You just need to forward those two ports from the outside world (WAN)
to your SlimServer PC.

This isn't particularly safe. Ideally, you would use a secure tunnel
to make it all a lot more, well, secure. To do this:

Install OpenSSH on your SlimServer PC:
http://sshwindows.sourceforge.net/

Install a client such as Tunnelier on your remote PC:
http://www.bitvise.com/tunnelier.html

Generate a keypair in OpenSSH. I don't have the steps I used for
this, so you'll need to do some googling and reading, but it's not too
hard.

Remove the port forwarding you set up, and instead forward just port 22.

Then, in Tunnelier, set up C2S forwarding:
Listen interface: 127.0.0.1
Listen port: 9000
Dest Host: localhost
Dest Port: 9000

Listen interface: 127.0.0.1
Listen port: 9090
Dest Host: localhost
Dest Port: 9090

If you also want remote desktop access:
Listen interface: 127.0.0.1
Listen port: 3483
Dest Host: localhost
Dest Port: 3483

You can also have it execute SoftSqueeze automatically if you fill in
the 'Execute' field with the java run-time engine and SoftSqueeze jar
file name. Mine says:
"C:\Program Files\Java\j2re1.4.2_07\bin\javaw.exe" -jar "C:\Program
Files\SoftSqueeze\SoftSqueeze.jar"

Hope that helps
Geoff B

Neil Cameron
2006-01-03, 12:29
Thanks; the clearest advive I've ever had!
One follow-up - if I 'forward' port 9000 will that interfere with my home
Slimserver operation?

--
Neil


"Geoff B" <geoffbon (AT) gmail (DOT) com> wrote in
message news:db6b1e410601031110j6a6e72d4h23fcd983222338f (AT) mail (DOT) gmail.com...
On 1/3/06, Neil Cameron <ncameron (AT) msn (DOT) com> wrote:
> Or which port to forward ...

Assuming you want to use SoftSqueeze from a remote location to play
music served up by your SlimServer at home:
Forward port 9000 to allow web access to the SlimServer
Forward port 9090 to allow SoftSqueeze access to the SlimServer
Port 3483 (mentioned in your original post) is actually used for
Terminal Services / remote desktop connection. You probably shouldn't
forward it unless you use a secure tunnel (see below).

I don't use the same router/modem as you, so you're on your own with
finding the port fowarding setup; but it shouldn't be too complicated.
You just need to forward those two ports from the outside world (WAN)
to your SlimServer PC.

This isn't particularly safe. Ideally, you would use a secure tunnel
to make it all a lot more, well, secure. To do this:

Install OpenSSH on your SlimServer PC:
http://sshwindows.sourceforge.net/

Install a client such as Tunnelier on your remote PC:
http://www.bitvise.com/tunnelier.html

Generate a keypair in OpenSSH. I don't have the steps I used for
this, so you'll need to do some googling and reading, but it's not too
hard.

Remove the port forwarding you set up, and instead forward just port 22.

Then, in Tunnelier, set up C2S forwarding:
Listen interface: 127.0.0.1
Listen port: 9000
Dest Host: localhost
Dest Port: 9000

Listen interface: 127.0.0.1
Listen port: 9090
Dest Host: localhost
Dest Port: 9090

If you also want remote desktop access:
Listen interface: 127.0.0.1
Listen port: 3483
Dest Host: localhost
Dest Port: 3483

You can also have it execute SoftSqueeze automatically if you fill in
the 'Execute' field with the java run-time engine and SoftSqueeze jar
file name. Mine says:
"C:\Program Files\Java\j2re1.4.2_07\bin\javaw.exe" -jar "C:\Program
Files\SoftSqueeze\SoftSqueeze.jar"

Hope that helps
Geoff B

Jungle
2006-01-03, 13:20
I'd like to try this and play my files when I'm somewhere else, but I need
some help.

I know I have to open up ports 9000 and 3483, but:

- how do I know what IP address my home PC is presenitng to the outside
world - I have a SpeedTouch Broadband modem?
- do I have to use iTunes or WinAmp remotely; can't I just connect to the IP
address using Slimserver directly?

--
Neil

Hi Neil

I was going to be facetious and suggest that you just take your iPod (and external speakers of course) with you when you travel but I have just worked out that if you get this sorted, I could access all your music on my Squeezeboxes as well! Therefore I wish you all the best in your endeavour and will be in touch via normal mail to see if I can hook up.

Jon Gould

Neil Cameron
2006-01-03, 14:51
And...if I want to use SoftSqueeze do I just put the IP address in the
'SlimServer Hostname' and '9090' in SlimServer Slim ProtoPort?

--
Neil


"Neil Cameron" <ncameron (AT) msn (DOT) com> wrote in message
news:dpejak$5at$1 (AT) sea (DOT) gmane.org...
> Thanks; the clearest advive I've ever had!
> One follow-up - if I 'forward' port 9000 will that interfere with my home
> Slimserver operation?
>
> --
> Neil
>
>
> "Geoff B" <geoffbon (AT) gmail (DOT) com> wrote in
> message
> news:db6b1e410601031110j6a6e72d4h23fcd983222338f (AT) mail (DOT) gmail.com...
> On 1/3/06, Neil Cameron <ncameron (AT) msn (DOT) com> wrote:
>> Or which port to forward ...
>
> Assuming you want to use SoftSqueeze from a remote location to play
> music served up by your SlimServer at home:
> Forward port 9000 to allow web access to the SlimServer
> Forward port 9090 to allow SoftSqueeze access to the SlimServer
> Port 3483 (mentioned in your original post) is actually used for
> Terminal Services / remote desktop connection. You probably shouldn't
> forward it unless you use a secure tunnel (see below).
>
> I don't use the same router/modem as you, so you're on your own with
> finding the port fowarding setup; but it shouldn't be too complicated.
> You just need to forward those two ports from the outside world (WAN)
> to your SlimServer PC.
>
> This isn't particularly safe. Ideally, you would use a secure tunnel
> to make it all a lot more, well, secure. To do this:
>
> Install OpenSSH on your SlimServer PC:
> http://sshwindows.sourceforge.net/
>
> Install a client such as Tunnelier on your remote PC:
> http://www.bitvise.com/tunnelier.html
>
> Generate a keypair in OpenSSH. I don't have the steps I used for
> this, so you'll need to do some googling and reading, but it's not too
> hard.
>
> Remove the port forwarding you set up, and instead forward just port 22.
>
> Then, in Tunnelier, set up C2S forwarding:
> Listen interface: 127.0.0.1
> Listen port: 9000
> Dest Host: localhost
> Dest Port: 9000
>
> Listen interface: 127.0.0.1
> Listen port: 9090
> Dest Host: localhost
> Dest Port: 9090
>
> If you also want remote desktop access:
> Listen interface: 127.0.0.1
> Listen port: 3483
> Dest Host: localhost
> Dest Port: 3483
>
> You can also have it execute SoftSqueeze automatically if you fill in
> the 'Execute' field with the java run-time engine and SoftSqueeze jar
> file name. Mine says:
> "C:\Program Files\Java\j2re1.4.2_07\bin\javaw.exe" -jar "C:\Program
> Files\SoftSqueeze\SoftSqueeze.jar"
>
> Hope that helps
> Geoff B

Neil Cameron
2006-01-04, 01:40
OK; getting there. Forwarded ports 9000 and 9090, and now I have managed to
connect to the home PC and open the Slimserver Web interface and use it
remotely.
But not yet able to get SoftSqueeze to see the home machine.
In Softsqueeze Preferences I am putting the same IP Address that works for
Slimserver in the 'Slimserver Hostname' field; I have '9000' in Slimserver
HTTP Port, and '3483' as Slimserver SlimProto Port.
Is this right? Should there be a 9090 in there somewhere?

--
Neil


"Geoff B" <geoffbon (AT) gmail (DOT) com> wrote in
message news:db6b1e410601031110j6a6e72d4h23fcd983222338f (AT) mail (DOT) gmail.com...
On 1/3/06, Neil Cameron <ncameron (AT) msn (DOT) com> wrote:
> Or which port to forward ...

Assuming you want to use SoftSqueeze from a remote location to play
music served up by your SlimServer at home:
Forward port 9000 to allow web access to the SlimServer
Forward port 9090 to allow SoftSqueeze access to the SlimServer
Port 3483 (mentioned in your original post) is actually used for
Terminal Services / remote desktop connection. You probably shouldn't
forward it unless you use a secure tunnel (see below).

I don't use the same router/modem as you, so you're on your own with
finding the port fowarding setup; but it shouldn't be too complicated.
You just need to forward those two ports from the outside world (WAN)
to your SlimServer PC.

This isn't particularly safe. Ideally, you would use a secure tunnel
to make it all a lot more, well, secure. To do this:

Install OpenSSH on your SlimServer PC:
http://sshwindows.sourceforge.net/

Install a client such as Tunnelier on your remote PC:
http://www.bitvise.com/tunnelier.html

Generate a keypair in OpenSSH. I don't have the steps I used for
this, so you'll need to do some googling and reading, but it's not too
hard.

Remove the port forwarding you set up, and instead forward just port 22.

Then, in Tunnelier, set up C2S forwarding:
Listen interface: 127.0.0.1
Listen port: 9000
Dest Host: localhost
Dest Port: 9000

Listen interface: 127.0.0.1
Listen port: 9090
Dest Host: localhost
Dest Port: 9090

If you also want remote desktop access:
Listen interface: 127.0.0.1
Listen port: 3483
Dest Host: localhost
Dest Port: 3483

You can also have it execute SoftSqueeze automatically if you fill in
the 'Execute' field with the java run-time engine and SoftSqueeze jar
file name. Mine says:
"C:\Program Files\Java\j2re1.4.2_07\bin\javaw.exe" -jar "C:\Program
Files\SoftSqueeze\SoftSqueeze.jar"

Hope that helps
Geoff B

mherger
2006-01-04, 02:00
> HTTP Port, and '3483' as Slimserver SlimProto Port.
> Is this right? Should there be a 9090 in there somewhere?

You don't need 9090 (it's the CLI), but 3483. Configure the mapping for
this port, too.

--

Michael

-----------------------------------------------------------
Help translate SlimServer by using the
SlimString Translation Helper (http://www.herger.net/slim/)

Neil Cameron
2006-01-04, 05:31
That did it! Excellent.
Now to add some security - but if I implement SSH how can I allow friends
access from their homes direct via their Squeezeboxes (as opposed to
SoftSqueeze)?

--
Neil


"Michael Herger" <slim (AT) herger (DOT) net> wrote in
message news:op.s2uivkckkpbrd7 (AT) chtvdwbe198 (DOT) tierverkehr.ch...
> HTTP Port, and '3483' as Slimserver SlimProto Port.
> Is this right? Should there be a 9090 in there somewhere?

You don't need 9090 (it's the CLI), but 3483. Configure the mapping for
this port, too.

--

Michael

-----------------------------------------------------------
Help translate SlimServer by using the
SlimString Translation Helper (http://www.herger.net/slim/)

mherger
2006-01-04, 05:57
> Now to add some security - but if I implement SSH how can I allow friends
> access from their homes direct via their Squeezeboxes

With ssh you don't need port mapping on the router. Use ssh's tunneling
instead. You'd have to have a PC running at your friends'. Connect it
using ssh to your server, tunneling the ports you need. His SB would then
have to see that PC as the local SlimServer.

--

Michael

-----------------------------------------------------------
Help translate SlimServer by using the
SlimString Translation Helper (http://www.herger.net/slim/)

geoffb
2006-01-04, 07:16
On 1/4/06, Michael Herger <slim (AT) herger (DOT) net> wrote:
> > HTTP Port, and '3483' as Slimserver SlimProto Port.
> > Is this right? Should there be a 9090 in there somewhere?
>
> You don't need 9090 (it's the CLI), but 3483. Configure the mapping for
> this port, too.

Bugger, sorry - my fault, I mis-remembered the portnumbers.
Geoff

geoffb
2006-01-04, 07:26
On 1/4/06, Michael Herger <slim (AT) herger (DOT) net> wrote:
> > Now to add some security - but if I implement SSH how can I allow friends
> > access from their homes direct via their Squeezeboxes
>
> With ssh you don't need port mapping on the router. Use ssh's tunneling
> instead. You'd have to have a PC running at your friends'. Connect it
> using ssh to your server, tunneling the ports you need. His SB would then
> have to see that PC as the local SlimServer.

I think you still need to forward port 22, which is the default SSH
port. You can (and should) stop forwarding the others (9000, 3483),
though. As Michael said, once you get your remote machine talking
correctly to your home machine, you would just set up your friend's
machine the same way.

One more note on port 22: if you leave it at the default, you'll get
people hammering on it with scripts every hour of the day and night.
Change it to a high port number (can't remember where this was set -
read through the OpenSSH config files), and change your router's port
forwarding correspondingly. That'll solve it.

Note that many broadband connections have limited upload bandwidth,
which is of course exactly the bandwidth you need for remote
streaming. If your friend is streaming at the same time as you, it
may max out your bandwidth and cause dropouts. One solution is that
you can limit the bitrate for remote players; using the web interface,
go to player settings | audio | bitrate limiting. Choose a value that
fits easily within your upload speed. Alternatively, some ISPs have
higher upload speed options (at a price, of course!).

Cheers
Geoff B

Neil Cameron
2006-01-04, 07:39
OK. Thanks for all the help so far; I've now entered the world of OpenSSH
and I am now totally lost and somewhat nervous. I have installed OpenSSH
and generated the Group and Password files - but am not able to understand
the key pair generation 'instructions'.
Also, do I need a client SSH tunnelling program if I am using Softsqueeze to
connect and play?
Any really simple source of instructions about how to do this for Noddy's
like moi?!

--
Neil


"Geoff B" <geoffbon (AT) gmail (DOT) com> wrote in
message news:db6b1e410601040616m6e1ab5b1od782badc544ef5b (AT) mail (DOT) gmail.com...
On 1/4/06, Michael Herger <slim (AT) herger (DOT) net>
wrote:
> > HTTP Port, and '3483' as Slimserver SlimProto Port.
> > Is this right? Should there be a 9090 in there somewhere?
>
> You don't need 9090 (it's the CLI), but 3483. Configure the mapping for
> this port, too.

Bugger, sorry - my fault, I mis-remembered the portnumbers.
Geoff

geoffb
2006-01-04, 09:13
On 1/4/06, Neil Cameron <ncameron (AT) msn (DOT) com> wrote:
> OK. Thanks for all the help so far; I've now entered the world of OpenSSH
> and I am now totally lost and somewhat nervous. I have installed OpenSSH
> and generated the Group and Password files - but am not able to understand
> the key pair generation 'instructions'.
> Also, do I need a client SSH tunnelling program if I am using Softsqueeze to
> connect and play?
> Any really simple source of instructions about how to do this for Noddy's
> like moi?!

Hi Neil,

Good for you - sounds like you've made a pretty good start.

The easy question first: technically, you don't need to use a SSH
client if you're using SoftSqueeze, since it includes a built-in SSH
client. BUT, I would recommend the one I mentioned before
(Tunnelier), for two reasons: it makes it easier to diagnose
connection problems, and it includes some nice utilities (graphical
SFTP for file transfers, auto-launch of remote desktop, remote command
line). You can't beat the price, either.

The other part of your question is more difficult, mainly becuase I
went through this process a while back and had to do a bit of reading
to work it out - I can't remember the exact steps. Richard's
SoftSqueeze page:
http://softsqueeze.sourceforge.net/ssh.html
points to a useful SSH howto:
http://www.vbmysql.com/articles/ssh-tunnel-part2.html#part4
I'm pretty sure I just followed through the steps in the second link,
above, and it worked ok. I then did a bit of digging to find how to
change the default port (22) to something higher and more random.

Hope that helps,
Geoff B

Neil Cameron
2006-01-04, 09:39
Thanks Geoff; unfortunately none of those sites explains how to generate Key
Pairs - or what to do with them. I've found sites that purport to explain
it; but not simply by any means!

--
Neil


"Geoff B" <geoffbon (AT) gmail (DOT) com> wrote in
message news:db6b1e410601040813g50f3dad7p55d6541146d121bd (AT) mail (DOT) gmail.com...
On 1/4/06, Neil Cameron <ncameron (AT) msn (DOT) com> wrote:
> OK. Thanks for all the help so far; I've now entered the world of OpenSSH
> and I am now totally lost and somewhat nervous. I have installed OpenSSH
> and generated the Group and Password files - but am not able to understand
> the key pair generation 'instructions'.
> Also, do I need a client SSH tunnelling program if I am using Softsqueeze
> to
> connect and play?
> Any really simple source of instructions about how to do this for Noddy's
> like moi?!

Hi Neil,

Good for you - sounds like you've made a pretty good start.

The easy question first: technically, you don't need to use a SSH
client if you're using SoftSqueeze, since it includes a built-in SSH
client. BUT, I would recommend the one I mentioned before
(Tunnelier), for two reasons: it makes it easier to diagnose
connection problems, and it includes some nice utilities (graphical
SFTP for file transfers, auto-launch of remote desktop, remote command
line). You can't beat the price, either.

The other part of your question is more difficult, mainly becuase I
went through this process a while back and had to do a bit of reading
to work it out - I can't remember the exact steps. Richard's
SoftSqueeze page:
http://softsqueeze.sourceforge.net/ssh.html
points to a useful SSH howto:
http://www.vbmysql.com/articles/ssh-tunnel-part2.html#part4
I'm pretty sure I just followed through the steps in the second link,
above, and it worked ok. I then did a bit of digging to find how to
change the default port (22) to something higher and more random.

Hope that helps,
Geoff B

geoffb
2006-01-04, 13:19
On 1/4/06, Neil Cameron <ncameron (AT) msn (DOT) com> wrote:
> Thanks Geoff; unfortunately none of those sites explains how to generate Key
> Pairs - or what to do with them. I've found sites that purport to explain
> it; but not simply by any means!

Sorry, can't remember any more of how I tweaked it. There is a
reasonable text file explaining public key authentication setup in the
/docs directory in the OpenSSH install; try having a look through
that.
Failing that, you could set up Password authentication; this is
reasonably easy, I think. Again, I think there are steps in the /docs
directory.

Cheers
Geoff

geoffb
2006-01-05, 11:27
On 1/4/06, Neil Cameron <ncameron (AT) msn (DOT) com> wrote:
> Thanks Geoff; unfortunately none of those sites explains how to generate Key
> Pairs - or what to do with them. I've found sites that purport to explain
> it; but not simply by any means!

One more note on this: there is a reasonable page here describing the
setup of OpenSSH for Windows with public key auth:
http://bmonday.com/articles/653.aspx

Cheers
Geoff

rme
2006-01-05, 19:29
why is public key auth better than userid and password?

bishopdonmiguel
2006-01-05, 19:54
> why is public key auth better than userid and password?

Highly secure. The time it would take to crack is significant whereas user/pass is generally vulnerable to brute force attack.

pfarrell
2006-01-05, 20:49
On Thu, 2006-01-05 at 18:29 -0800, rme wrote:
> why is public key auth better than userid and password?

Fundamental security.
If done properly, it is not subject to replay attacks.
With userid/password, once you snoop it, you can use it forever.

And implemented properly, it is no more work for the user.


--
Pat
http://www.pfarrell.com/music/slimserver/slimsoftware.html