In message <_A3733@delegate-en.ML_> on 05/11/07(01:55:42)
you Corley Kinnane <psmhabdyi-jk6bmqxgranw.ml@delegate.org> wrote:
 |>  |    I have a problem where I have a group of machines on a local subnet
 |>  |with a box that acts as a NAT to allow internet out but not allow
 |>  |internet into the subnet directly.
 |>  |If I want to setup a proxy on the NAT machine for VMware, can I use
 |>  |delegate to proxy the VMware connection ?
 |>  |
 |>  |VMware server has remote access on port 902 - you just use the special
 |>  |client to connect to this port, however, like ftp, it generates dynamic
 |>  |ports to return to the client side.
 |>
 |> Does not the client support SOCKS(BIND) as FTP clients do?
 |
 |I don't know - Is the SOCKS method the way dynamic ports are allocated ?
 |Does this mean I can use a SOCKS proxy at the gateway and the dynamic
 |ports will be opened there ?

So called data-connections of FTP by the PORT command requires connection
establishment from the server to the client on dynamically allocated port
by the client, and SOCKS relays it by its BIND command.

 |VMware does not have options for connection - I found there were 4
 |dynamic ports by sniffing the interface.

There are tools or libraries to SOCKSify existing executable files replacing
the shared library or so of the socket API.

Cheers,
Yutaka
--
  9 9   Yutaka Sato <pfqcabdyi-jk6bmqxgranw.ml@delegate.org> http://delegate.org/y.sato/
 ( ~ )  National Institute of Advanced Industrial Science and Technology
_<   >_ 1-1-4 Umezono, Tsukuba, Ibaraki, 305-8568 Japan
Do the more with the less -- B. Fuller