Modify your firewall or router to support Internet Sessions in Dameware Mini Remote Control
To successfully connect to Internet Sessions with users outside of your network, you must modify your externally facing firewall or router to forward TCP requests to the Dameware Internet Proxy. You must also allow ports 6129, 6130, 6132, and 6133 to listen for incoming requests. For reference, review the port requirements.
All firewalls and routers operate differently. Please consult the manufacturers documentation for specifics, and use the information in this topic as a general guide.
When you install the Dameware Internet Proxy, you can install it on a computer with or without a pre-existing web server. See Install the Dameware Internet Proxy with another web server for more information.
Use the Test Connection button in the Configuration Wizard to ensure that outside users can communicate successfully through your firewall or router.
Dameware Internet Proxy installed without a Web Server
When you deploy the Dameware Internet Proxy on a computer without a web server, you or your network administrator must open port 443 on your firewall or router. Create a forwarding rule so that all TCP traffic going to your Internet Session URL is directed to your Dameware Internet Proxy instance. You must also allow ports 80, 6129, 6130, 6132, and 6133 to listen for incoming connections.
If you do not have a security certificate from a certificate authority installed, end users may encounter security warnings if they download an Internet Session agent before joining an Internet Session.
Dameware Internet Proxy installed with a Web Server
If you install the Dameware Internet Proxy on a computer that hosts a web server, port 443 is open. Your network administrator must allow ports 80, 6129, 6130, 6132, and 6133 to listen for incoming connections. See Install the Dameware Internet Proxy with another web server for more information.
Consider the following:
- By design Apache cannot serve multiple sites out of port 443. If you are currently using HTTPS with Apache, you cannot co-locate the Dameware Internet Proxy on the same computer and use the same port number. See Install the Dameware Internet Proxy with another web server for more information.
- Do not use a URL for your Internet Session URL that is already in use.
- For the optional ports for specific Dameware features, see Dameware centralized installation system requirements.
Why must you open the ports?
The Dameware Internet Proxy uses port 443 (HTTPS) to communicate with Mini Remote Control and Internet Session agents on the end users' computers. The Dameware Internet Proxy also includes a web server, which allows end users to download the Mini Remote Control or Internet Session agent. The port number used can be modified where you configure the Internet Session URL. When you configure the Dameware Internet Proxy using this port, the Configuration Wizard generates a self-signed certificate and installs it. If a certificate exists already, the Configuration Wizard uses that certificate and does not generate a self-signed certificate.
6129 (Dameware Mini Remote Control Port)
Dameware agents listen on this port for incoming remote desktop connections.
6130 (Mobile Gateway Communication Port)
The Mobile Gateway listens to this port to allow communication between the Mobile Client and the agent on the remote computer. You can change this port number in the Configuration Wizard.
6132 (Dameware Central Server and Dameware Internet Proxy Communication Port)
Dameware Central Server and Dameware Internet Proxy listen to this port to allow communication between the Mini Remote Control application and the remote agent. This is specific to Internet Sessions. You can change this port number in the Configuration Wizard or the Administration Console.
6133 (Dameware Service Port)
Dameware uses this port to communicate between Dameware Server components. Dameware components listen to all communications inbound through this port. You can change this port number in the Configuration Wizard.
Common issues when configuring the firewall or router
Other websites may not start
If two or more websites are using port 443, non-Dameware products may not start. Change the port number on the other products, use different IP addresses, or install each product on separate computers.
Communication does not occur
If users cannot access the Internet Session URL or download agents, the ports may not be open. Check that changes were applied correctly and to the correct appliance. The Internet Session URL may also already exist on the computer.