# Remote access/ Behind a NAT **URL:** \ **Category:** Community Support\ **Tags:** tlclient, linux, tlserver, thinlinc\ **Created:** [16 March 2023 21:21 UTC](https://community.thinlinc.com/t/remote-access-behind-a-nat/577 "2023-03-16T21:21:27Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![garrom](https://avatars.discourse-cdn.com/v4/letter/g/ed8c4c/32.png) [@garrom](https://community.thinlinc.com/u/garrom)\ **Post date:** [16 March 2023 21:21 UTC](https://community.thinlinc.com/t/remote-access-behind-a-nat/577/1 "2023-03-16T21:21:27Z")
I am very new to all of this so please forgive me. i can access remotely on same home network but outside of home on say xfinity hotspot or my phone’s hotspot, i can’t remote in to my server. Tried following along from another forum here, seems NAT is my issue and a SSH tunnel would be the easiest way to deal with that. After attempting to follow along and alter the tlclient.conf file and messing with host\_aliases im officialy at wits end and would just love to talk to anyone who knows what simple little thing im doing wrong or missing. ports 22, 300,9000 for thinlinc are forwarded in my xfinity gateway. ufw is enabled on both my server and my laptop which is running the exact same ubuntu instance, and the same ports are allowed in ufw. I can connect to my server via a ssh connection… like log in and run updates but my knowledge has so far been scour google for hours and trial and error. Any help and understanding would be greatly appreciated! ---
**Author:** ![martin](https://dub1.discourse-cdn.com/flex005/user_avatar/community.thinlinc.com/martin/32/41_2.png) [@martin](https://community.thinlinc.com/u/martin)\ **Post date:** [22 March 2023 16:01 UTC](https://community.thinlinc.com/t/remote-access-behind-a-nat/577/2 "2023-03-22T16:01:10Z")
Hello @garrom, and welcome to the forum! First of, sorry for letting you wait this long for a response from us. I think the easiest way forward for you is to set up HOST\_ALIASES. This set up requires three steps to be taken. - 1. Configure HOST\_ALIASES in ~/.thinlinc/tlclient.conf - 1. Start an ssh tunnel from your laptop to your internal server (over the forwarded port in xfinity) - 1. Connect with ThinLinc client, utilizing step 1 and 2 1. Configure HOST\_ALIASES in ~/.thinlinc/tlclient.conf ```auto HOST_ALIASES=192.168.0.1:22=localhost:2222 ``` Replace `192.168.0.1` with the actual internal IP address of your Ubuntu server. Save tlclient.conf and exit 1. Before launching ThinLinc client, set up the ssh tunnel to your internal server from your laptop: ```auto ssh -L 2222:192.168.0.1:22 username@your.public.ip ``` Again, replace `192.168.0.1` with the actual internal IP address of your Ubuntu server. Also replace `your.public.ip` with the public ip address of your xfinity router. 1. Start ThinLinc Client. For the `Server:` field, you’ll enter the internal IP address of your Ubuntu server. This connection will now look up the HOST\_ALIAS parameter in tlclient.conf, and utilize the local tunnel on port 2222 to reach your internal server at. Kind regards, Martin ---
**Author:** ![garrom](https://avatars.discourse-cdn.com/v4/letter/g/ed8c4c/32.png) [@garrom](https://community.thinlinc.com/u/garrom)\ **Post date:** [5 April 2023 09:02 UTC](https://community.thinlinc.com/t/remote-access-behind-a-nat/577/3 "2023-04-05T09:02:57Z")
Thank you so much! I thought I had it figured out when I downloaded tailscale lol! But for whatever reason my cruddy HP laptop from Walmart, I installed Ubuntu on just dislikes me for doing so. Ive even tried reinstallaling windows and I just can’t no matter what I try. But thats a problem for another day lol! This is working and I’m so frickin happy!