Quantcast

Special Sponsored Section


The video player requires Flash 8 Player or later. Please download the latest Flash Player.


Maclife Hottest Articles
Thumbnail
FEATURE
100 Snow Leopard Tips, Tricks, and Features
Browser
FEATURE
OS X Browser Speed Wars: May the Fastest App Win
iTunes History
FEATURE
The Complete iTunes History -- SoundJam MP to iTunes 9
iTunes Tips
FEATURE
iTunes 9 Tips and Tricks - Solve the Mysteries of the New iTunes
Download iTunes Movies Away From Home With VNC
Posted 08/22/2008 at 5:22:00am | by Jason Whong

Purple Rain

For Apple TV owners with slow broadband connections, the ability to download rentals from the iTunes store is bittersweet. Once your rental of choice has downloaded, you're already asleep on the couch after being bored silly by network television. 

If your Internet connection is too slow to watch movies as they download to your Apple TV, you may want to try downloading the movie before watching. In fact, you may want to begin the download while you’re away from home. With the right preparations, you can login to your Mac remotely and begin the download so it’s ready by the time you get home. Sure Back to My Mac will do this, but if you don't have Leopard and a MobileMe account, you're out of luck. Harnessing the power of VNC, we'll get you ready to control your home Mac with not only your work machine, but your iPhone/iPod touch.

What you need: An administrator account on a Mac with iTunes running Mac OS X 10.4.9 or later; A routable IP address for the Mac (less likely on a home network), or the ability to route traffic on certain ports to a non-routable IP address (more likely); A computer outside of the home network with a VNC client; Internet connections for both computers.

To make it work, you want your Mac to accept incoming Virtual Network Computing (VNC) connections; your home network to route the incoming VNC connections to your Mac; and a VNC client to connect to your Mac from across the Internet.

The main drawback of doing it this way is, when using iTunes to rent video, there’s no way to rent the HD version of the movie. (To do that, you need to use Apple TV.) And, though Apple offers its Remote app for iPhone and iPod touch, which theoretically could control the Apple TV from a different network through a VPN, the app doesn’t talk to the iTunes Store. Hopefully, Apple will extend the features of the Remote app for iPhone/iPod touch to talk to the iTunes Store on the Apple TV. Until then, we'll stick with VNC.

1. Set up Mac OS X’s VNC server 

 

Sharing screenshot
Click to Embiggen

 

Screen Sharing is built on VNC, or Virtual Network Computing.

Open System Preferences, and click on the Sharing icon to reveal the Sharing preference pane. Click the checkbox next to Screen Sharing (or, under Mac OS X 10.4, Apple Remote Desktop) to turn it on. Click on the Computer Settings button (or, under Mac OS X 10.4, the Access Privileges button) to reveal its corresponding sheet. Click the checkbox next to “VNC viewers may control screen with password” and select a password, preferably with at least eight characters. Click OK, and authenticate as an administrator.

Choose a secure password, because it’s the only thing you use to login, and thus, the only thing an intruder needs to guess.

Use the Energy Saver preference pane to tell your Mac not to sleep.

2. Route VNC traffic to the Mac 

Airport Utility
Click to Embiggen

 

Picking a dynamic or private port (between 49152 and 65535) prevents intruders from breaking in over the default port.

Telling your Mac to accept VNC connections doesn’t necessarily mean that you can connect to it from elsewhere. If you are running a firewall upstream from your Mac, you may have to tell it not to filter out the VNC Connections.

If your Mac is using a translated address (that is, sharing the IP address assigned by your Internet service provider through a router using Network Address Translation), you need to tell the router how to detect and route the incoming VNC connections.

To do this with Airport Extreme, launch the Airport Utility. Click the Advanced icon at the top, and then click Port Mapping in the pane below. Click the + button to add an entry for VNC connections.

For public TCP and UDP ports, pick a port between 49152 and 65535, and remember it. (This should thwart attempts by hackers to break in over port 5900, the default for VNC). Under Private IP address, enter the translated IP address of your Mac. Under private TCP and UDP ports, enter 5900. Now incoming traffic on the port you picked will be routed to your Mac on port 5900. Click the update button at the lower right to get your Airport Extreme base station to restart with the new configuration.

These settings should work with most routers on the market. Check your routers manual for directions on port forwarding for VNC.

3. Use a VNC Client to connect to your Mac

 

iTunes screenshot 
Click to Embiggen

 

The movie studios are pretty picky about only one copy of the rental being in use at a time, so be sure to "move" the rental from your Mac to the AppleTV.  

Write down the IP address that your router uses to talk to the Internet (or, if your Mac has a routable IP address, write that down), and take it to work with you. Some Internet Service Providers don’t let you keep the same address from day to day unless you pay for a static IP address, so check back periodically, just in case.

mocha
Mocha VNC Lite running on the iPhone

Install a VNC client onto your work computer. If you are stuck looking for one, try RealVNC Free on Windows; Chicken of the VNC on a Mac; or Mocha VNC Lite on the iPhone.

When you connect to your Mac at home, enter the computer’s routable IP address, as well as the port you assigned, if any, for VNC traffic. Also, tell the VNC client to connect in 32-bit color mode, because the Mac requires it.

Once you’re in, launch iTunes and go to the iTunes store. Rent the movie. When it has downloaded, click on the AppleTV in the Devices list, and move the movie from your Mac to the AppleTV. You can watch it once it has finished moving.

 
Got a sweet VNC task? Share it in the comments below. 
 
COMMENTS: 3
TAGS:  AppleTV
COMMENTS
avatarDoes this work without a static IP Address?

Maybe I'm missing something but how does this work without a static IP address? What is meant by "Under Private IP address, enter the translated IP address of your Mac."

For anyone in the know, how secure is it to just pick a random port b/w 49152 and 65532? Can't someone scan/ finger for open ports?

If anyone has a clue better than me, I'd appreciate it.

Login or register to post comments
avatarThe translated address is

The translated address is the non-routable IP address that your Mac uses. In my case, it was 10.0.1.197. This has been my IP address for a while. If, by static IP, you mean static, translated IP, I can see your point. I have only been using an Airport Extreme for a few months; prior to that I had an SMC Barricade router that let me assign static, translated IP addresses to computers. It is possible that the Airport Extreme may decide one day to hand out a different IP address, but I have not noticed this yet on my setup.

 

To get around the potential problem, you can set an IP address manually for your Mac; you can even tell it to use DHCP for everything except its IP address.

(If by static IP you mean the routable IP assigned by your ISP, then that's answered in the article: check your IP address periodically to make sure you know what it is... or pay up the extra money for a static IP.)

 

Picking one of the dynamic ports (between 49152 and 65532) adds security because you're changing the port to one that is nonstandard. The first place an intruder usually checks is the standard port. If there is no answer, they can try other ports, but usually the intruder is not targeting you specifically; they're targeting machines until they break in. It is quicker for them to try to break in over the standard port, and if they fail, they move on to someone else. If they want to keep trying to break in, they can try all of those ports; if they happen to guess the port, they then also have to guess the password. Enabling VNC is a security risk, but having it on a non-default port is more secure than having it on the default port.

Login or register to post comments
avatarAnd what about the screensaver?

If you have a dynamic IP address, you can use no-ip (www.no-ip.org). It works pretty well for me.

My question: how do you make the Mac leave the screensaver? I couldn't do it remotely with VNC. Any tips?

André

Login or register to post comments