HOWTO: Remotely Access your Folding Systems - Part 1 FAHControl

[HaRdLy007]

Just now, Gorgon said:

Did you select the minimal configuration on install or just the defaults?

Defaults

[Gorgon]

UFW is installed by default on Ubuntu but should not be enabled by default

 

https://linuxconfig.org/how-to-enable-disable-firewall-on-ubuntu-18-04-bionic-beaver-linux

 

In reality if the TestBench is just on your local LAN and not accepting connections from the Internet then there's no reason to run it

[Gorgon]

2 minutes ago, HaRdLy007 said:

Defaults

try

sudo ufw status

[HaRdLy007]

2 minutes ago, Gorgon said:

try

sudo ufw status

 

Status: inactive

[Gorgon]

6 minutes ago, HaRdLy007 said:

Status: inactive

Grr. I can see why your frustrated. This should work.

 

All you should need as a config file to get this to work is:

<config>
  <!-- Remote Command Server -->
    <command-allow-no-pass v='127.0.0.1 192.168.1.0/24'/>
  <!-- Slot Control -->
    <power v='full'/>

  <!-- User Information -->
    <passkey v='xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'/>
    <team v='223518'/>
    <user v='yyyyyyyyyyyy'/>

  <!-- Folding Slots -->
    <slot id='0' type='CPU'/>
    <slot id='1' type='GPU'/>

</config>

Can you post your full config file sanitizing your username and passkey?

[HaRdLy007]

<config>
  <!-- Client Control -->
  <fold-anon v='true'/>

  <!-- HTTP Server -->
  <allow v='127.0.0.1 192.168.1.0/24'/>

  <!-- Network -->
  <proxy v=':8080'/>

  <!-- Remote Command Server -->
  <command-allow-no-pass v='127.0.0.1 192.168.1.0/24'/>

  <!-- Slot Control -->
  <power v='full'/>

  <!-- User Information -->
  <passkey v=''/>
  <team v='223518'/>
  <user v=''/>

  <!-- Folding Slots -->
  <slot id='0' type='CPU'>
    <client-type v='advanced'/>
    <next-unit-percentage v='98'/>
  </slot>
  <slot id='1' type='GPU'>
    <client-type v='advanced'/>
    <next-unit-percentage v='98'/>
  </slot>
</config>

As requested.

[Gorgon]

Sorry - had to order Pizza for the Horde

 

There doesn't seem to be anything wrong with that config.

 

The Linux system is up and folding.

You can ping it from the host you wish to manage it on

We can see the host listening on TCP port 36330

But it is silently dropping connections.

 

One last question. Which version of the folding client is running? is it 7.5.1?

[HaRdLy007]

 

2 hours ago, Gorgon said:

Sorry - had to order Pizza for the Horde

 

There doesn't seem to be anything wrong with that config.

 

The Linux system is up and folding.

You can ping it from the host you wish to manage it on

We can see the host listening on TCP port 36330

But it is silently dropping connections.

 

One last question. Which version of the folding client is running? is it 7.5.1?

No worries, I had to feed myself and the daughters.

 

Yes it is the latest, v7.5.1

[HaRdLy007]

 

No.	Time	Source	Destination	Protocol	Length	Info
53	6.739149	192.168.1.12	192.168.1.13	TCP	66	50626 → 36330 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM=1
54	6.739379	192.168.1.13	192.168.1.12	ICMP	94	Destination unreachable (Host administratively prohibited)
89	12.821169	192.168.1.12	192.168.1.13	TCP	66	50627 → 36330 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM=1
90	12.821403	192.168.1.13	192.168.1.12	ICMP	94	Destination unreachable (Host administratively prohibited)

The only other thing I have is this capture from Wireshark and from the looks of it something on my Linux box is blocking the connection.

[Gorgon]

Just now, HaRdLy007 said:

 

No.	Time	Source	Destination	Protocol	Length	Info
53	6.739149	192.168.1.12	192.168.1.13	TCP	66	50626 → 36330 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM=1
54	6.739379	192.168.1.13	192.168.1.12	ICMP	94	Destination unreachable (Host administratively prohibited)
89	12.821169	192.168.1.12	192.168.1.13	TCP	66	50627 → 36330 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM=1
90	12.821403	192.168.1.13	192.168.1.12	ICMP	94	Destination unreachable (Host administratively prohibited)

The only other thing I have is this capture with Wireshark and from the looks of it sometihing on my Linux box is blocking the connection.

That makes sense but the question is what. The firewall is turned off so the only other candidate is the Folding Client itself.

 

You could try removing ufw.

 

Just a thought. Try listing the IPTables rules

iptables -L

which, in theory should show that they are all empty as UFW is off and UFW is just a front-end for configuring iptables.

 

This shows how to remove UFW and clear any residual iptables rules.

 

And if that doesn't work the next step I'd suggest is removing FAHClient and then re-installing it.

[HaRdLy007]

1 minute ago, Gorgon said:

That makes sense but the question is what. The firewall is turned off so the only other candidate is the Folding Client itself.

 

You could try removing ufw.

 

Just a thought. Try listing the IPTables rules

iptables -L

which, in theory should show that they are all empty as UFW is off and UFW is just a front-end for configuring iptables.

 

This shows how to remove UFW and clear any residual iptables rules.

 

And if that doesn't work the next step I'd suggest is removing FAHClient and then re-installing it.

Thanks so much for the assistance.

 

Cheers

[Gorgon]

4 minutes ago, HaRdLy007 said:

Thanks so much for the assistance.

 

Cheers

No problem. This is a weird one. It usually just works. I have 7 systems running Ubuntu and I've never seen this before and, like you, I monitor from a Windows desktop so I can run HfM

[HaRdLy007]

2 hours ago, Gorgon said:

No problem. This is a weird one. It usually just works. I have 7 systems running Ubuntu and I've never seen this before and, like you, I monitor from a Windows desktop so I can run HfM

I found out why it wasn't working. I had installed a package called Firewall, and it seems in doing so it blocked the internal network from contacting the machine. I have since removed the package, and can now access the Linux machine with both HFM and FAHControl.

 

Thanks again for the help.

[mightyskull]

On 4/1/2020 at 10:59 PM, Gorgon said:

Did you

service FAHClient restart

 

 

Yes, restarted the system infact.

I'm able to control via telnet; but the web client gives me a 401

[mightyskull]

On 4/3/2020 at 2:58 AM, Ben17 said:

just a tip btw if you can't see the web viewer try opening incongtico mode in chrome or other browser and typing in 

https://client.foldingathome.org/

 

This works fine on the host running executing FAH

But on my phone/laptop connected to the same network, I can't access the web client.

I think I'm just gonna stick with telnet for now. Although the webclient is nice to see mostly because it retrieves the project info from the FAH servers.

[Ben17]

1 hour ago, mightyskull said:

 

This works fine on the host running executing FAH

But on my phone/laptop connected to the same network, I can't access the web client.

I think I'm just gonna stick with telnet for now. Although the webclient is nice to see mostly because it retrieves the project info from the FAH servers.

yeah

I agree on that tbh

good luck with it btw

[Dravinian]

Thanks, this guide still works.  I got a bit flumuxed by the client not restarting properly, but once I ended task on it this all worked fine.

[Dark_Hunter]

Hello, I managed to use this guide with the comments to get a remote connection to my Pi but I could not get one to my Windows PC.

I have opened the port in Windows FW and this is the current config for remote connections.

 

What the heck am I missing?

[Gorgon]

7 hours ago, Dark_Hunter said:

Hello, I managed to use this guide with the comments to get a remote connection to my Pi but I could not get one to my Windows PC.

I have opened the port in Windows FW and this is the current config for remote connections.

 

What the heck am I missing?

Windows Firewall might need to be adjusted and a reboot might be required

[Dark_Hunter]

50 minutes ago, Gorgon said:

Windows Firewall might need to be adjusted and a reboot might be required

Looks like a reboot was needed, thanks that did it.