![]()
This manual describes the tools offered by Resco Explorer to access other computers:
Each of these tools has its strong and weak points. We'll try to give sufficient description — the final decision is up to the user.
Most of the materials concentrate on the networking. It is because FTP is conceptually simpler: If you have a working network connection (common requirement for all networking alternatives) and somebody gives you FTP server account, it is trivial to make the data transfers. So, let's start with the networks — we'll return to the FTP later.
Explorer networking attaches your PDA to the computer and LAN you are connected to.
Any public drive in this LAN can be mounted similarly to a Palm expansion card.
You must login as a user of this computer and then can perform all operations this user is allowed to do.
If your PDA can already communicate with a PC, then you should have no problems to mount your PC drives to the Explorer. This means easy sharing of images and documents, making remote backup and dozens of other applications.
On the other hand — if your PDA is isolated from the desktop world, then maybe it's time to give it a try. There are various ways how to realize the connection, easier (WiFi) or more difficult (BT, cable, VPN), but the final result will please you.
As already indicated, networking consists of several steps:
So far we talked about kind of "home connections". However, mainly enterprise users require more — safe access to remote computers.
This is the territory of the VPN (Virtual Private Networks). You will need a product such as Mergic VPN and a consultation with your network admin.
Where are the Treo users in this scheme? They have web connectivity and might logically expect implied advantages. Well, to some extent yes — e.g. they passed the first step towards VPN networks. However, as far the local LAN connection is concerned, the web connectivity is of no help.
Complex picture? Yes, as with each technology. But the result is worth the effort.
Explorer offers two network components:
Network browser enumerates accessible computers and allows for selection and mounting of selected drives. Note that you can bypass the browser and setup the connection manually. In some cases (when the LAN uses non-standard protocols) the manual setup might be the only viable alternative.
Network file manager: Once you mounted a drive, you can do the same file operations as you are used to do on the expansion card; the only limit are the user rights that you received after your PC login.
Here are the main networking alternatives and their brief characteristics:
Local connection
Serves to access local LANs that support needed network protocols (the usual case).
You need working network (TCP) connection between your PDA and local PC. Then you can browse the PC and related LAN and mount selected LAN drives to the Explorer.
Because of the connection locality, security is of no real concern in this case.
Remote connection over VPN
Presents secure connection to a remote network that implements VPN server.
You need any kind of remote tcp connectivity. The two most frequent cases are:
Then you need to install a VPN client onto your PDA and setup the connection to a VPN server that serves as a gateway to the remote LAN.
Then you can browse the remote LAN and mount selected LAN drives to the Explorer.
This is for those who (logically) miss the last option - direct remote connection, i.e. accessing remote computer with fixed IP address that offers public File and Printer Sharing service (sometimes called SMB/CIFS or Windows Networking).
In this case any tcp connection (incl. the phone connection) can be used, hence it looks like an easy attractive option. (A downside: The Network browser won't work and you have to setup the connections manually.)
BUT:
Exposing TCP channels used by File Sharing to public access presents huge security risk. As it turns out a computer with unprotected Internet interface can be subject of an attack within a few seconds. (If you think it might be an academic debate, read this article http://news.bbc.co.uk/1/hi/programmes/click_online/4423733.stm.)
Summary:
We do not recommend direct remote connection unless you are a network professional who understands all the risks etc. However, in such a case you don't need our help.
This manual does not consider direct remote access as a viable alternative.
1. Read the chapter about the connections and select the one that best suits to your needs. (E.g. Bluetooth) Even if your final goal is the VPN, you may appreciate benefits of the local connection.
2. Realize selected connection and setup Internet sharing on the PC side. You gain thus:
Note that in most cases already these benefits are enough to justify needed effort.
3. Some users might go now for Explorer FTP access as the first alternative for the remote networking.
4. Or try to access local LAN via Explorer. In most cases (see the chapter "Accessible computers") everything will just work - Explorer will show the network drives and you'll be able to mount them as "network cards".
5. Those who want to go for VPN, can continue now with the installation of the selected VPN client, etc.
While Resco Explorer tries to do its best to access networks, final success heavily depends on the setup of your network.
Resco is not responsible for any failures in the networking.
We are no network experts and do not provide networking support.
In case of problems try to contact your network administrator - these are the real experts able to provide qualified help.
Many Treo users think that because they have Internet connectivity they should be able to connect to networks as well. Indeed, the phone connection is a remote connection and enables access to remote networks, i.e. VPN or FTP.
However, there are also disadvantages:
Network connections are about the access to your (corporate or home) LAN or - in a simplified case - to your home PC. It is about accessing folders and files on a computer, reading remote documents, uploading/downloading or doing other file manipulations.
In the ideal case you should be able to work with the remote files similarly as if they were on the local card.
What do you need to make use of such a connection?
Let's start with a preview of various possibilities. Then we shall discuss in full detail perhaps the best alternative for those who do not yet have a connection - the Bluetooth.
1. WiFi connection
This is certainly the easiest possibility - provided your device has built-in WiFi (LifeDrive, TX) and your LAN has WiFi Access point.
In the absence of built-in WiFi you still could use Palm WiFi card (Z72, T3, T5), but then you have to make a compromise - either WiFi or expansion card. A bad choice when we talk about the file management.
Result: You will be able to access the LAN, to which the WiFi Access point is connected to - provided you have needed login/password. (Access point range is some 20-30m.)
2. Bluetooth connection to a PC
Requires PC equipped with a BT adapter.
There are cheap BT USB dongles (around 10-20 USD), that can be simply plugged into the USB port and cover some 10m PDA-PC distance. Installation - mainly on the PC side - can be problematic.
Result: Access to the connected PC and to the computers in the same LAN.
Note that BT connection is discussed in full depth in the next chapter.
3. Virtual Private Networks (VPN)
VPN software provides safe (encrypted) connection between Internet sites.
Most solutions use PPTP (Point-to-point tunneling protocol), which basically encapsulates direct encrypted communication into the normal TCP/IP traffic. The effect is that your PDA becomes a member of a remote LAN with all the rights that you - as a LAN user - have.
Steps to realize VPN connection:
a) Unlike the other forms you can use any form of the tcp connectivity, e.g the built-in phone connection. (Often slow and expensive.)
You can also build a network connection to a PC like in other cases and use tcp connection via PC. (Faster, cheaper.)
b) Check if the remote server supports VPN and which protocol does it offer. There are two basic protocols in use: PPTP and IPSEC.
Based on the protocol get the Palm VPN client: Mergic VPN for PPTP, AnthaVPN for IPSEC.
c) Install VPN client. Since this moment the remote LAN should be accessible via Explorer.
4. Other options
There are really more options how to organize network connection. Physically you can use PDA-PC cable, Infrared or even a modem. Well-known software that might help in building the connection is Softick PPP.
Please see the references chapter for more information on the subject.
If your PC is not equipped with a BT adapter, you have to find one. Visit a computer store or Google for "Bluetooth PC adapter" etc.
There are cheap BT USB dongles covering some 10m PDA-PC distance, but also better (and more expensive) options - Bluetooth access points - that work within much longer range.
If the information presented here is not sufficient, see the references at the bottom, especially the guide How to share your Internet connection via Bluetooth to a Palm OS device.
1. Driver installation
Do not plug in the dongle - start by reading the manual and installing the driver. When ready, you should see BT icon in the task bar.
Rclick this icon and select 'Explore My Bluetooth Places'. You should see your PDA in the BT device list. (Under Entire Bluetooth Neighborhood.)
Test the opposite visibility and try to send a file from PDA to PC.
Expected result: PDA and PC see each other, but the send operation may fail. (Send will work if you allow respective BT service. E.g. if you send a business card, e-mail or a calendar item, you will need the service My PIM Item Transfer. If you send an image, you will need My Bluetooth Imaging. Etc.)
2. Setup BT services
BT software presents a very complex layer that is organized into services (also called profiles)and it's up to you to decide which ones will be active.
When you 2click the BT icon 1st time you will be taken through a wizard, where you need to select BT adapter name and allow BT services. The simplest attitude is to allow all. Send will work and also Palm connection setup will be easier.
Wizard can be started also manually:
Here are the services (profiles) important for the Explorer:
3. Setup Palm connection
We have to do 2 things:
Caveats (let's mention them in advance):
PC side:
Go to 'Explore My Blootooth Places' (Double click BlueTooth Icon), then select 'My Device' and finally 2click 'My Network Access' - this is what we are going to setup.
PDA side:
Prefs > Connections > New
Setup the connection as 'Connect to Local Network', ' Via Bluetooth' and select PC as the device. (The pairing, i.e. the exchange of passwords will take place automatically. The purpose of this procedure is to prevent unallowed access.)
This way you created a connection - a kind of a plug that might be used for networking. Your device will have more such plugs (for example Internet GPRS) and you can pick up one of them as active. This is done in the next step.
4. Setup Network connection
Remarks:
a) Firewall
If you use firewall, make sure it will not block the communication. I.e. these ports should be allowed:
E.g. Windows XP has default firewall, settings are available from Local Area Connection properties.
If you suspect firewall problems, then try to switch it off temporarily.
b) Connection problems
Typically BT dongles add a status icon to the Windows task bar.
Problems use to be signaled by flashing red led on the dongle or via the status icon. The correction is often trivial - unplug and plug the dongle.
c) Connection quality vs. network speed
Tcp protocol that carries network packets, will cope with data errors easily: Bad packets are thrown away and must be re-sent.
If you see that the network is very slow, try to improve connection quality - e.g. decrease PC-PDA distance.
d) Multiple connections
You may create a connection to different computers in the LAN. The Treo users had already working network connection - GPRS, CDMA etc.
All these users finish with multiple connections. Switching among them is trivial - Go to Prefs > Network and decide which service will be used.
Explorer networking refers to the support of the File and Printer Sharing network protocol (called also SMB/CIFS or Windows networking). This is a standard Windows protocol supported also by Unix/Linux and Apple OSX.
Explorer networking consists of two components:
a) Network browser:
The browser discovers neighboring computers and lets you select among their drives (shares). Browser result can be described as
[computer_name, its_IP_address, share_name].
These items are memorized. However, the computer name serves just to validate/refresh stored IP address. (In DHCP networks the IP addresses are temporary.)
What is actually needed to access remote file system is just IP address + share name.
You can bypass network browser altogether if the target computer has fixed IP address. In such case you define the share using direct path, e.g. "\\1.2.3.4\my_share".
The consequence: You can access remote computer and use "non-local" network connection, e.g. GPRS. (Beware of already discussed security risks!)
In some cases it might happen that the browser does not see all computers connected to the LAN. Also in this case you need to bypass the browser and enter the manual path, e.g.
b) Network file manager
Speaking technically the Network file manager is a CIFS(SMB) client. It needs just working tcp connection to an "accessible" computer (that implements needed protocols - see bellow) and the access rights represented by the login. This is a substantial difference against the browser as the target computer need not be "local".
The computer must have tcp connectivity and must be
Network browser further needs proper NetBios version. (NetBios Name Server or WINS are unsupported.)
Distributed file systems are unsupported because of dynamic reconnection needs.
Firewall setup:
You have to ensure that tcp port 445 (or port 139) is open in your firewall.
WARNING:
The Network protocol was never meant to be used directly on the Internet, thus has many weaknesses and security holes. Consequences:
So far we talked about the mapping of the remote drives. However, networking uses more general concept — a share.
Network share is typically a folder on particular computer marked for public use and known by a public name.
Special case represent so-called administrative network shares marked usually as c$ etc. They represent the whole drive and are accessible only by administrators.
Name resolution
Network paths are normally obtained from the Network browser. However, if you want to access computer that is not listed in the browser, you need to enter the connection parameters manually.
The share is accessed through UNC (Universal Naming Convention). The (UNC) syntax is "\\MyPC\share", where
Translation computer_name -> ip_address is cached and used as long as it works. On failure (e.g. temporary IP address due to DHCP) a new resolution is attempted.
Setting up shares
We sketch just the basic idea. On the web there are plenty of articles that will explain the procedure for your computer/OS.
Windows creates shares through Windows network component, while Unix, Linux, and Mac systems need Samba to create network shares.
In all cases the purpose is to designate selected folder for remote access and define the users that can use the share and setup the actions they are allowed to do.
Symbolic name resolution requires that individual computers reply to the NetBios name inquiry.
Explorer uses highest possible encryption supported by the server during the authentication procedure. I.e. maximum effort is exerted in order to deliver correct login information to the server.
Technically speaking:
Login can be done only per user (USER mode).
SHARE mode (login per share) is unsupported. It is 1. insecure, 2. unsupported on Windows since W2K
Explorer applies packet signing (as secure as the server allows). Note that the signing prevents data flow modification. It does not include data encryption, i.e. the data are not secure against reading. If you need encryption, you should go for VPN.
File Transfer Protocol is a standard protocol for exchanging files over TCP/IP networks.
FTP needs just the same as the networking we discussed so far - a network connection. To make it easier, it does not matter whether the connection goes via PC or is phone-based. Perhaps the best option is to have a choice:
Whenever you have this choice, you just need to go to Network Prefs panel and select respective service. (Don't forget to disconnect previously used service.)
FTP communication involves two sides: a server and a client. FTP server listens for client connection requests. Once connected, the client can do file manipulations such as uploads, downloads, rename, delete etc.
Full description of an FTP server account looks like this:
Client connection starts with a login, i.e. supplying user name and password. These parameters determine the user rights, i.e. what is the user allowed to do.
Many servers allow so-called anonymous login. Such users have limited access. If you want to use anonymous login with Resco Explorer, leave name/password fields blank.
Resco Explorer implements FTP client. You still need the other side — FTP server.
There exist public FTP servers such as ftp.microsoft.com. Their value is limited and serve basically for testing.
A better alternative, FTP hosting services, usually provide paid FTP space. Resco Explorer offers one such service - www.DriveHQ.com - with very attractive free account.
What remains is FTP server of your company (many companies have one) or building own FTP server.
FTP problems
To manage FTP connections use Main menu > FTP Connections dialog. Every new connection added will be represented by a separate tree node under the Network tree branch. If you don't see this branch, then go to General Options and allow network use.
Connection details:
Auxiliary indicators:
Checking the log:
The log contains complete history of the commands sent and server responses received since the last connect. (The data communication is excluded, of course.)
To display the log, select the ftp node in the tree and tap the info icon.
To clear the log, select another root node in the tree. (This causes a disconnect from the FTP server.)
Analyzing the log:
Sent commands are numbered for easier orientation.
Server responses always start with a numerical code, e.g. the 5xx codes denote a negative reply. (The meaning of the codes can be easily found on the web.)
Comparing log with another FTP client:
In case of problem you may verify the server functionality using independent FTP client. (There are plenty of free desktop clients.) Just pay attention that you setup the connection in the same way. (E.g. the mode parameter.)
You can even compare the logs from both programs and come closer to the problem.
If you look for information, use the links in the References section or do the easiest step - Google for "ftp server".
There exist ready FTP servers for each platform and many of them are free - at least for personal use. Newer Windows versions include basic FTP support as part of the IIS (Internet Information Services). Can be enough for personal use, but 3rd party FTP servers provide better support.
While the installation uses to be straightforward, setup may require more work: At the minimum you need to specify the data storage (folders) and users with their access rights.
One problem you will have to solve is the IP address of the FTP server. You can either purchase a fixed IP address (a cheap option) or employ additional software that enables the use of the dynamic IP address. (Basically it takes care that whenever the dynamic address changes, the DNS server gets this information so that the symbolic name of your server always links to the current IP address.)
FTP servers listen by default on port 21 for incoming connections from FTP clients. (Your firewall must allow this port.)
If you don't have access to an FTP server (and don't want to build your own server), you can go for FTP hosting services. These services provide secure storage location on the Internet and are usually paid with the price around $5/month.
Resco Explorer offers one such service - Drive Headquarters. Nice thing on the offer is the free account with respectable limits: 1GB storage and 1 GB download/month - parameters that are hard to beat.
When you consider FTP hosting, then - besides the price - try to evaluate the safety and reliability of the provider, i.e. check the things such as:
How to find such a service? You can start by Googling for "FTP hosting service". The query will return lots of possibilities, often combined with a more frequent service - "web hosting".
A comparison of selected FTP hosting services can be found at www.top10ftphosting.com.
Explorer > Control Panel > Network > Ping
Blazer represents a more complex method to verify Internet connectivity.
The IP address is a unique address that identifies Internet devices (computers, servers, PDAs, etc). To find IP address of your PC open the command prompt and type ipconfig. (One of the possible procedures.)
Addresses of the form 192.168.xxx.xxx (or those starting with 10 or 172) are so-called private address, i.e. they are ignored outside your site and the computers with such an address are not visible on the web. Instead, your PC will use for the outside communication a temporary IP address "leased" from the Internet provider. If you never heard it - this is what the so-called DHCP protocol is about.
You can do complete file management (copy, delete, rename etc.) - as far you have sufficient user rights. Further a few additional actions supported directly by the Explorer:
DNS servers are special web services that translate (user-friendly) www name addresses into the (computer-friendly) numerical IP address.
Example: www.google.com translates into 209.85.129.147.
Every single www/http/ftp... address must be translated into the numerical form before it can be used.
If you have longer address, such as
newsrss.bbc.co.uk/rss/newsonline_uk_edition/world/rss.xml
then the first part (in this case "newsrss.bbc.co.uk") is the "host address" that needs to be translated.
There are a number of DNS servers on the web. Some may work better (faster), some worse (slower). It can even happen that the DNS server is (possibly temporarily) out of work.
Computers (PDA's) have the DNS server address as part of the network setup. They usually use 2 servers - primary and secondary (alternate) - for the case of problems.
Internet providers (e.g. GPRS/CDMA connections) offer yet another way: DNS server query. This means the PDA asks the mobile operator for the DNS server address during the connection setup.
References:
Your Palm device cannot use the network's DNS server for translating www name address into the numerical IP address.
Suggestions:
DNS server was not able to resolve www name address into the numerical IP address.
Suggestions: