Cannot access forwarded ports from the internet

Hi all,
I have a Cisco 800 Series router that i configured to do some port forwarding. However i must have done something wrong, because i am unable to access the ports .
Here is the configuration file of the router.
Sorry it i pasted too much info, i'm new working with Cisco routers
Building configuration...
Current configuration : 9429 bytes
! Last configuration change at 13:39:12 PCTime Thu Jan 5 2006 by xxx
! NVRAM config last updated at 19:45:42 PCTime Mon Jan 2 2006 by xxx
version 15.0
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service sequence-numbers
hostname pbr.mtn.w
boot-start-marker
boot system tftp c860-universalk9-mz.153-3.M.bin 255.255.255.255
boot-end-marker
logging buffered 51200
logging console critical
enable secret 5 xxx
no aaa new-model
memory-size iomem 10
clock timezone PCTime 2
crypto pki trustpoint TP-self-signed-2673109117
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2673109117
revocation-check none
rsakeypair TP-self-signed-2673109117
crypto pki certificate chain TP-self-signed-2673109117
certificate self-signed 01
30820250 308201B9 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32363733 31303931 3137301E 170D3036 30313032 31373232
35395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 36373331
30393131 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100CD17 E55A2286 3F4D2F14 98499254 8DE9B540 7413A05A C229BD7E 72C6E7AA
7BD657C2 D824C6E4 0C0FD8AB 5EF6871B A28F298C 391DA225 FA4C92D7 5E3C6B06
B3447494 EA058319 72A69FEA 305751EE B7D7087A 406216C3 6CC14AB8 056B52F4
117366AD 531E0515 6801228D 7DAA8454 A00A880D 4023B8B3 983DE19C FB00F077
32450203 010001A3 78307630 0F060355 1D130101 FF040530 030101FF 30230603
551D1104 1C301A82 18706272 2E6D746E 2E772E79 6F757264 6F6D6169 6E2E636F
6D301F06 03551D23 04183016 80148E65 3A8C9B6B E552653E EA96DCD1 F13DD1F1
8198301D 0603551D 0E041604 148E653A 8C9B6BE5 52653EEA 96DCD1F1 3DD1F181
98300D06 092A8648 86F70D01 01040500 03818100 B6F568EE 3AFBBF7A B4DEC150
B6B8860B D953E444 8925C26C 4186AED4 8EAF9F2F D2F335E4 916F941C 1E831EEE
77C5A9A2 EB7EB7AA 540FF094 8FA28668 91C39BB2 2852DEB9 414DD37B EE984C20
CE755A14 37C41233 B0B93B55 52E15783 089B59AA AAE54620 352D3820 59DD24A3
F1E3EC91 CCDE72AA 7544C9C6 1C12EDAF 95767D97
      quit
no ip source-route
ip dhcp excluded-address 10.10.10.1
ip dhcp excluded-address 192.168.1.1 192.168.1.219
ip dhcp excluded-address 192.168.1.241 192.168.1.254
ip dhcp excluded-address 10.10.10.21 10.10.10.254
ip dhcp pool ccp-pool1
   import all
   network 10.10.10.0 255.255.255.0
   default-router 10.10.10.1
ip dhcp pool GuestPool
   import all
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.80
   dns-server 217.14.128.50 212.99.2.8 212.108.200.77 212.82.225.7
   lease 7
ip cef
no ip bootp server
ip domain name yourdomain.com
ip name-server 196.44.250.214
ip name-server 196.44.250.215
ip name-server 41.223.226.30
ip name-server 212.118.241.1
ip name-server 213.157.176.2
ip name-server 62.128.175.14
license udi pid CISCO861W-GN-E-K9 sn FCZ161392V5
username xxx privilege 15 secret 5 xxx
ip tcp synwait-time 10
ip ssh time-out 60
ip ssh version 2
class-map type inspect match-any ccp-cls-insp-traffic
match protocol cuseeme
match protocol dns
match protocol ftp
match protocol h323
match protocol https
match protocol icmp
match protocol imap
match protocol pop3
match protocol shell
match protocol realmedia
match protocol rtsp
match protocol smtp
match protocol sql-net
match protocol streamworks
match protocol tftp
match protocol vdolive
match protocol tcp
match protocol udp
class-map type inspect match-all ccp-insp-traffic
match class-map ccp-cls-insp-traffic
class-map type inspect match-any ccp-cls-icmp-access
match protocol icmp
match protocol tcp
match protocol udp
class-map type inspect match-all ccp-invalid-src
match access-group 100
class-map type inspect match-all ccp-icmp-access
match class-map ccp-cls-icmp-access
class-map type inspect match-all ccp-protocol-http
match protocol http
policy-map type inspect ccp-permit-icmpreply
class type inspect ccp-icmp-access
inspect
class class-default
drop
policy-map type inspect ccp-inspect
class type inspect ccp-invalid-src
drop log
class type inspect ccp-protocol-http
inspect
class type inspect ccp-insp-traffic
inspect
class class-default
drop
policy-map type inspect ccp-permit
class class-default
drop
zone security out-zone
zone security in-zone
zone-pair security ccp-zp-self-out source self destination out-zone
service-policy type inspect ccp-permit-icmpreply
zone-pair security ccp-zp-in-out source in-zone destination out-zone
service-policy type inspect ccp-inspect
zone-pair security ccp-zp-out-self source out-zone destination self
service-policy type inspect ccp-permit
interface Null0
no ip unreachables
interface FastEthernet0
interface FastEthernet1
interface FastEthernet2
interface FastEthernet3
interface FastEthernet4
description $ES_WAN$$FW_OUTSIDE$
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
ip flow ingress
duplex auto
speed auto
pppoe-client dial-pool-number 1
interface wlan-ap0
description Service module interface to manage the embedded AP
ip unnumbered Vlan1
no ip redirects
no ip unreachables
no ip proxy-arp
ip nbar protocol-discovery
ip flow ingress
ip flow egress
arp timeout 0
interface Wlan-GigabitEthernet0
description Internal switch interface connecting to the embedded AP
switchport mode trunk
interface Vlan1
description $ETH-SW-LAUNCH$$INTF-INFO-HWIC 4ESW$$ES_LAN$$FW_INSIDE$
ip address 192.168.1.80 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip nbar protocol-discovery
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly
zone-member security in-zone
ip tcp adjust-mss 1412
interface Dialer0
description $FW_OUTSIDE$
ip address negotiated
no ip redirects
no ip unreachables
no ip proxy-arp
ip mtu 1452
ip flow ingress
ip nat outside
ip virtual-reassembly
zone-member security out-zone
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname xxx
ppp chap password 7 xxx
ppp pap sent-username xxx password 7 xxx
no cdp enable
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip flow-top-talkers
top 20
sort-by bytes
cache-timeout 20
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 192.168.1.25 8890 interface Dialer0 8890
ip nat inside source static tcp 192.168.1.25 80 interface Dialer0 80
ip nat inside source static tcp 192.168.1.45 21 41.186.26.35 21 extendable
ip route 0.0.0.0 0.0.0.0 Dialer0
logging trap debugging
access-list 1 remark INSIDE_IF=Vlan1
access-list 1 remark CCP_ACL Category=2
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 100 remark CCP_ACL Category=128
access-list 100 permit ip host 255.255.255.255 any
access-list 100 permit ip 127.0.0.0 0.255.255.255 any
dialer-list 1 protocol ip permit
no cdp run
control-plane
banner exec ^C
% Password expiration warning.
Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username "cisco" for one-time use. If you have
already used the username "cisco" to login to the router and your IOS image
supports the "one-time" user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.
It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.
username <myuser> privilege 15 secret 0 <mypassword>
Replace <myuser> and <mypassword> with the username and password you
want to use.
^C
banner login ^C---------------------------------------------------------------------------
                              NOTICE TO USERS
THIS IS A PRIVATE COMPUTER SYSTEM. Unauthorized or improper use of this
system may result in administrative or disciplinary action and civil and
criminal penalties.
Any or all uses of this system and all files on this system are monitored,
and recorded.
This system is the property of xxx .
Disconnect IMMEDIATELY if you are not an authorized user!
^C
line con 0
login local
no modem enable
transport output telnet
line aux 0
login local
transport output telnet
line 2
no activation-character
no exec
transport preferred none
transport input all
line vty 0 4
privilege level 15
login local
transport preferred telnet
transport input telnet
scheduler max-task-time 5000
scheduler allocate 4000 1000
scheduler interval 500
end

You need...
Either a Fixed IP from your ISP, or a service like no-ip.org to look up your current IP.
How to find the "Outside" IP on that machine go here...
http://www.whatsmyip.org/
If there's a Router involved at home then incoming ports must be directed to the proper local IP.
Setup Sharing on the home Mac.

Similar Messages

Best way to access Time Capsule from the Internet?

I wanted to see if anyone knew of a program or setting I can use in order to access Time Capsule from the internet? I know that probably I will not be able to at this point access it directly, even though it is connected to the internet through my modem, but I do have a Mac at home that is connected to Time Capsule. Isn't their a way that I could connect to the Mac, but not through Back to My Mac, that would show Time Capsule as connected to it, so that way I could access the files? Any ideas would be appreciated.

It is possible to mount the TC as a network hard drive when outside your regular network.
1) You will need to reconfigure your router to forward the ports used for AFP (by default 548) to the Time Capsule.
2) Then when outside the network make sure Finder is active, press Apple+K to bring up the 'Connect To Server' dialog.
3) Input the WAN IP address of the network to which the TC resides on.
4) You will be asked for the password used to access TC.
5) The TC should appear as a mounted drive.
It is then possible to access files on the TC as well as do a TM backup. To make life easier you can drag the mounted TC into your dock for easier access in the future.
However, it is obviously recommended to use a strong password to protect the TC (configurable using Airport Utility in the 'Disks/File Sharing' tab). You may also need to use a service like DynDNS if your network does not use a static IP address.
But I am using my home networks' Time Capsule successfully from the office.

I cannot download any files from the internet

Hi-
I am operating on Windows 7 Home Premium
IE 9.1
Model PSKA8U-02900R
Norton AntiVirus
I get an error message every time I try to download a file from the internet. All types,This has been happening for about 6 months, but I've used my work computer instead..getting kinda old.
The message simply states "This file could not be downloaded"
I've seen similiar posts, but no resolution posted. Anyone out there able to help me solve this issue?
Thanks Jane

Satellite L855-S5240
reset IE settings to defaults and turn on smart screen filter.
Control panel, internet options, advanced, restore advanced settings, apply.
If that does not take care of it reset all settings to defaults:
Control panel, internet options, advanced, reset.
Then select tools from your toolbar, smart screen filter, turn on smart screen filter.
Satellite L855-S5240 support page is here - http://support.toshiba.com/support/modelHome?freeText=PSKA8U-02900R
S70-ABT2N22 Windows 7 Pro & 8.1Pro, C55-A5180 Windows 8.1****Click on White “Kudos” STAR to say thanks!****

Remote access to PC from the Internet over a DSL connection!

Hello! I have a PC on the local LAN which is hooked to the Internet over a DSL Modem (Speedstream 4100) connection using a 2620 Router with 12.3 IOS. A remote vendor wants to access this PC using "Port forwarding" to Port 3389. He was able to do this using a Linksys Router instead of a 2620.
There are no leased public IP addresses on this connection. The vendor was able to use some DDNS to accomplish this successfully. Now, the Linksys Router has been replaced with 2620 and I need help configuring this.
Any ideas? Thanks in advance!

Try:
ip nat inside source static tcp 3389 interface fastethernet0 3389
If the IP address for FA0 is dynamic, you can use DDNS as mentioned (requires additional configuration), or simply look it up in the router and communicate verbally to the vendor.
Hope this helps, please rate post if it does!

Access to SharePoint from the Internet

I have a couple of users that are always on the run, using computers that is not a member of our domain. They want to access the SharePoint from oiutside our firewall, and use OneDrive for Business to sync document archives on our site.
I have opened up the nessesary ports in the firewall and they can access the site and sync the archives. But SharePoint keeps asking for username and password for every document they try to open.
I basically want the user to enter username and password once. How can i achieve this? Is it at all possible? What is best practice for giving remote users access to SharePoint recources?
Best regards
René

Hiya,
No. The "usual" SSO experience is gained if computers are part of the same domain and the web site your logging into is part of Local Intranet zone in the client browser settings. This allows for automatically login. However as your machines are
not domain joined, this is not an option.
The Wep application Proxy is a proxy role to the ADFS server role, so it would actually be two servers if implemented according to recommendations. However WAP and ADFS could serve multiple applications, so it's more to be regarded as an extension of your
directory services, than an application specific gateway. WAP and ADFS is part of the Windows 2012 R2 license, so no additional software costs beyond O/S license. This will allow you to use Windows Integrated authentication, meaning that it is their domain
users they are using.
With Forms based authentication, your creating a new set of users. Meaning that users will have to manage both their domain user and a form based user. You also need to manage a separate repository for the forms based users, which is typically a SQL database.
I would not recommend Forms based authentication, if you have the choice to use authentication gateway.
An alternative, which I still see used, could be the TMG. Which is a combined Firewall/Router/ReverseProxy/Authentication Gateway product. However Microsoft has already stated they they will discontinue this product in favor of WAP/ADFS.
Implementing the WAP/ADFS also opens up for the possibility to implement and use federated identities within your applications.
I hope that covers your questions, else do ask more :)

Is it possible to access my DVR from the Internet using an Airport Express and Airport Extreme?

I would like to use my Airport Express to connect to my DVR and use it to access the Internet by setting it up to wireless extend my Airport Extreme network?
This would allow me great flexibility to place the DVR wherever I wanted. I would create a static IP address for the DVR but would I also have to create one for the Airport Express as well? What would I put as my Gateway address? Would it be the IP address of the Airport Extreme or the Airport Express?
Looking forward to the advice to see if this is possible...

It may not be compatible with the iPad. See below for reference.
H.264 video up to 1080p, 30 frames per second, High Profile level 4.1 with AAC-LC audio up to 160 Kbps, 48kHz, stereo audio in .m4v, .mp4, and .mov file formats;
MPEG-4 video up to 2.5 Mbps, 640 by 480 pixels, 30 frames per second, Simple Profile with AAC-LC audio up to 160 Kbps per channel, 48kHz, stereo audio in .m4v, .mp4, and .mov file formats;
Motion JPEG (M-JPEG) up to 35 Mbps, 1280 by 720 pixels, 30 frames per second, audio in ulaw, PCM stereo audio in .avi file format

Cannot downoad files/programs from the internet, any suggestions on how to fix this problem? thanks!

hi, i upgraded my previous version of firefox to firefox 4 and then added the toy factory theme to the firefox 4 browser. after trying to update my plugins, the files from the adobe site are not downloaded into a file on our computer.

after reinstalling firefox 4, still unable to successfully download plugin program updates from the software publisher's websites.

I cannot access my mail from the Comcast main screen, firefox says it may be a problem with having deleated cookies.

From the Comcast main screen, using FF 3.6.13, when I click on my mail to get it, I get an error page that says Firefox has detected the server trying to direct my request to the wrong place and that it may be because i have deleted cookies. I had in fact done this while looking around the other day, but now, under tools, it says I am allowing cookies and I found a list that looks like they are all there. I am unable to get my mail, but am able to go to other web sites ok.

Your problem is typical of the many problems reported with McAfee, and that may well be the cause. McAfee is free with Infinity but isn't built-in in the sense that you have to take it. Is your previous anti-virus still installed? If so, you should get rid of one of them anyway, and the usual advice here would be to ditch McAfee.
Even if McAfee is the your only AV I would replace it. If your previous AV is no longer available there are plenty of free options, and Microsoft Security Essentials (MSE) is as good a choice as any. There's advice on uninstalling McAfee here.
You can click the white star next to this message if you think it was helpful.

How do I access my Airdisk from the Internet?

Hello,
I have been scouring the web for the answer to this, and have found very little, why doesn't Apple help out more with this. They say it is possible, just not how to do it.
My AE is bridged to my ISPs Netgear router which supports dyndns. I've created an account with dyndns.com and when entering the details into my router, it successfully automatically updates it. This is probably the first hurdle in getting web access to my disk that other people may not have? But what do I do next?
I can access my Airdisk within my home network and have told my AE to share and advertise via Bonjour, but are the Bonjour wide-area hostname settings the same settings as my dyndns account? I've read that the hostname is a single name that I've selected on dyndns.com and the domain is dnsalias.net, then Name and Password is the same as my dyndns account?
Thanks very much for your help!
SH

Thanks for letting me know the port, but what I didn't know how to do was actually connect to it. Out of the blue, I tried map network drive at work on a pc to my AEBS at home and wala it worked! I just wish they would post this somewhere! The manual for the AEBS would be a logical place, and yes I have it configured in bridge mode. Is there not a way to connect to AirDisk from Internet Explorer?
Some more things I discovered ON MY OWN since there seems to be ABSOLUTELY no guidance on this ANYWHERE, if somebody knows where, then please do tell:
1. port 548 (thanks duane) needs to be opened for Apple formatted AirDisks using Apple Filing Protocol on the mac (from Finder, Go, Connect to Server, afp://home network ip or dns name/disk name) or map network drive on the pc:
(2 back slashes, leaning back)home network ip or dns name\disk name
2. port 445 needs to be opened for Windows formatted AirDisks using Server Message Block on the mac (from Finder, Go, Connect to Server, smb://home network ip or dns name/disk name) or map network drive on the pc:
(2 back slashes, leaning back)home network ip or dns name\disk name (haven't tried this yet, but will shortly)
3. for guest access (usually read only), you may use guest and nothing for the password to connect to your AirDisk
4. for user access (usually to write), you may use anything for the username and the disk password you set for the AirDisk to connect
MAJOR PROBLEM!! >>
I was so psyched to have access to my AirDisk and tried several small files to test it out, no problem. However, when I try to upload .avi files of about 700MB size, I get an error stating that the device is no longer connected either at home or outside of home most of the time completely freezing the AEBS! Is there any size or file type of restrictions with AirDisk?? This is crazy, I get this far and I'm stuck by what appears to be a substandard device!?! I'm using PCs at both places, but it shouldn't matter since the AEBS fully support PCs! Could I possibly be doing something wrong?
<< MAJOR PROBLEM!!
There could be a problem with my AEBS as I wrote in another post, channel 1 of it's wifi appears to be completely inoperable.
SH

Cannot save a PDF from the internet

Someone has sent me a link to a PDF file and I can open it but when I try to save it to my dropbox like normal I get the message 'The document could not be saved. There was a problem reading this document (26)'.
Does anyone know what this means and how I can fix it?

"The document could not be saved. There was a problem reading this document (26)"
I FOUND A WORK AROUND! Save As, wasn't working for me Either.
So, after you have made your changes,
click on create PDF
Select From Multiple Files.
Window will pop up with current open files.
Make sure only the document you want is on the list.
Click Ok.
Now it has [Binder 1] open.
Click File > Save As
Choose Location Desired
Name document as Desired.
Click Save.

How can I access my home security DVR from the internet?

My Time Capsule (as a router and not a bridge) blocks me from accessing my home security DVR from the internet. I can access it from other computers connected to my LAN but not from the internet. I guess it's a firewall setting issue. I can't add the home security application to the list of firewall allowed incoming connections since it's a Windows app that I cannot install on my Mac. On the other hand, the app is installed on my old PC but I can't access the Mac firwall settings from the PC and add the security app (If that's the problem).
My DVR is connected to a Netgear switch which is connected to the Time Capsule which is connected to a Cisco modem provided by Comcast. I thought one of the modem ports had to be opened by Comcast. That was not the issue. After spending 2 hours on the phone with Comcast going in circles talking to 10 different overseas agents, they concluded the Netgear switch was blocking me from accessing the DVR. I think they are wrong and that it's a Mac firewall problem. HELP!!! Does anyone know what could be the problem and how to solve it?

Did you forward the required ports in the TIme Capsule? If not it won't work.. it has nothing to do with firewall unless the DVR is plugged into the Mac. If it is plugged into a switch you need to lock the IP of the DVR and find out what ports are required.. usually just port 80, ie html.. but it could be some others.
Since Apple do not use upnp to open ports.. the TC will have to manually be provided with the ports.. Apple use PMP-NAT that is not used by the rest of the known world.. Just to ensure you stay in the camp.

RD Web Access From The Internet/External

I’m requesting help with accessing from the internet (external web) a RD Web Access Connection (SSL) that I setup and configured on a Windows 2008 R2 Server.
My setup is as follows. All server rolls are configured and running on one Windows 2008 R2 Server (VM).
1.
Remote Desktop Services
a.
RemoteApp Manager
b.
Remote Desktop Connection Manager
c.
RD Gateway Manager
d.
RD Session Host Configuration
e.
Remote Desktop Service Manager
f.
Remote Desktop Licensing
2.
Web Server (IIS)
All my configurations are working perfectly internal/intranet. I can access all published applications and remote desktop connectivity via (SSL) from IE 9 web browser.
The URL that is used internally is: (https://ServerName/RDWEB).
When I attempt to connect via the internet I’m getting an “Internet Explorer cannot display the webpage” message.
I’m using Dynamic DNS to access the server hosting the (IIS Remote Access Web Page URL), example (https://DDNS/RDWEB). I’ve opened ports 443 & 80
on my Untangle firewall, also port forwarding for 3389.
Any and all help will be appreciated.

Freek,
Thank you for your response. I tested Telnet as you suggested, and both FQDN and IP address were able to establish a Telnet connection to my RD Web Access Server.
The “NSLOOKUP” resolved the DNS server name. Also, I am able to us the IP address, URL (https://IP/REWEB) in IE9 to browse to my RD Web Access Server site. The above should confirm DNS IS working correctly within my internal network.
My connection issue is from external/internet access to my RD Web Access Server site. All my networked devices (internal) are natted IP assigned behind an “Untangle
Gateway” firewall and routable internally only.
Although, I’ve opened ports, created firewall rules to pass traffic on ports 443, 3389 my problem still exist. Since my internal natted devices are not routable
from the internet, I am using a DDNS host URL from (www.dyndns.org) to route from the internet to my internal site server. As it stands now, I suspect the problem maybe at the Untangle Gateway”. I will focus my attention there.
Thank you again for your help.
Aubrey R. Martin

How do I setup my Time Capsule (3rd Generation) to be accessed from the internet while I'm traveling?

How do I setup my Time Capsule (3rd Generation) to be accessed from the internet while I'm traveling? It is installed on my home network behind my TWC broadband router.

Ok.. since the TWC modem is also a router.. all configuration takes place on this box.. NONE whatsoever takes place on the TC.
There is no airport utility 7.7.3 but there is a firmware of that number for the latest AC model TC..
Is it tall like this.
Then it is Gen5.
otherwise it will have a firmware.. 7.6.4 or earlier and the airport utility must be 6.3 or earlier.
Open the Airport utility and give us a screenshot of the summary page.
That will also help us determine that you have the TC, which version and how it is setup.
You might want to press the edit and also give us the Internet and Network tab as they should be set correctly as well.
I have created a DDNS through DYN.com although I am not sure how to implement this into the TC.
You do not do anything in the TC.. set it up in the Ubee router.
Port forward 548 to the TC in the Ubee router.
And make sure the TC has a static IP in the Ubee router.
Overall if you find this too hard I strongly recommend you buy a product designed for remote access .. eg WD MyCloud.. they are cheap and easy peasy to setup for remote access.. by PC or Mac and since it is built outside of Apple you not bound up in Apple limitations built into all their equipment to prevent you using it the way you want.. rather than apple want you too.. eg BTMM and iCloud being the only way apple provide for access to the TC and only when it is the main router of the network.
You are fighting hard because Apple made this hard.. not easy.

HTTP 400 Bad Request when accessing Oracle XE/Apex from the Internet

I have Oracle Express Edition upgraded to Apex 3.2. I can access everything (SQL prompt, Apex HTTP) from my local machine. I have configured the server for remote access on a non-default (not 8080) port.
I have executed: exec dbms_xdb.setListenerLocalAccess(false);
I can access the server using:
http://coyote:9977/apex (brings me to Application Express Administration Services login screen)
(where "coyote" is the local machine name of my Windows Vista box, where the Oracle/Apex server is installed.)
But when I try:
http://internet_server_name:9977/apex
(where "internet_server_name" is the internet DNS name visible of my machine visible from the internet.)
I get "HTTP 400 Bad Request"
I know the request is hitting the Oracle Listener (getting through firewalls, cable modem router, etc) since the http attempt causes the entry:
20-MAR-2009 20:36:53 * http * (ADDRESS=(PROTOCOL=tcp)(HOST=68.189.244.22)(PORT=52540)) * handoff * http * 0
to be made in the C:\oraclexe\app\oracle\product\10.2.0\server\network\log\listener.log
An attempt using the local (Windows) machine name makes a similar entry in the listener log:
20-MAR-2009 20:47:35 * http * (ADDRESS=(PROTOCOL=tcp)(HOST=192.168.1.7)(PORT=52811)) * handoff * http * 0
This seems like a security issue of some kind (is the server dropping a request from "outside" the local domain?)
I'm new to Oracle so I am not familiar with how to debug this sort of connectivity issue. In case it helps:
LSNRCTL> status
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC_FOR_XE)))
STATUS of the LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 10.2.0.1.0 - Production
Start Date 20-MAR-2009 19:27:00
Uptime 0 days 1 hr. 30 min. 59 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Default Service XE
Listener Parameter File C:\oraclexe\app\oracle\product\10.2.0\server\network\admin\listener.ora
Listener Log File C:\oraclexe\app\oracle\product\10.2.0\server\network\log\listener.log
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC_FOR_XEipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=coyote)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=coyote)(PORT=9977))(Presentation=HTTP)(Session=RAW))
Services Summary...
Service "CLRExtProc" has 1 instance(s).
Instance "CLRExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "PLSExtProc" has 1 instance(s).
Instance "PLSExtProc", status UNKNOWN, has 1 handler(s) for this service...
Service "XEXDB" has 1 instance(s).
Instance "xe", status READY, has 1 handler(s) for this service...
Service "XE_XPT" has 1 instance(s).
Instance "xe", status READY, has 1 handler(s) for this service...
Service "xe" has 1 instance(s).
Instance "xe", status READY, has 1 handler(s) for this service...
The command completed successfully
Any help appreciated,
john

Hans Forbrich wrote:
CoyoteTech wrote:
I have tried running with the firewall (F-Secure) completely disabled, but it made no difference. I do see the request hit the listener, and the handoff appears to be successful, but it goes silent from there. I also have a cable modem router that has the port forwarding set, but maybe there are other handoff ports besides the initial one (e.g. 8080) that need to be forwarded?Please also check the Windows firewall is off as well. Yes, Windows Firewall is disabled as well. See my previous post to Tyler - I'm pretty sure the reqwuest makes it through the firewall/router layer, since it causes an entry in Listener.log
Is your problem through the router only? In other words, if you try from a second machine that is on the same side as your XE, are you working OK? (My home ISP blocks a bunch of ports. Including SMTP, FTP, Telnet. And 8080 since that is a traditional default for many Java 'servers'.)
Yes, it appears to be related to a non-local IP address. I'm sure it makes it through the router - I also have several other ports that make it through (e.g. port 80).
I have poked around the DBMS_EPG docs, and ran a few of the commands there (list DADS etc). DBMS_EPG was first 'released' to us in 10gR2. As far as I'm concerned, XE is the public 'beta' or 'release candidate'. (This is supported by Oracle's docs that state that Apex using DBMS_EPG is first supported using 10.2.0.3 or 11g.) There are known bugs and there is no way to patch XE to fix them. However, I do not know whether you are hitting those bugs.
http://www.astral-consultancy.co.uk/cgi-bin/hunbug/doco.cgi?11410 provides some good notes.
Interesting. I will check out these docs later today.
>>
What happens when the listener hands off to a registered handler?
http://download.oracle.com/docs/cd/B19306_01/network.102/b14212/concepts.htm#i1049597 gives a good description.
Thanks.
How do I pick up the [log] trail from there?I'm thniking that the listener's log is still the primary way to go. You may need to increase the log or trace level. I have not investigated how to gen or access logs inside EPG.I tried Tyler's trace but did not seem to add additional info to the Listener.log.

Access a webserver on a computer that has a router from the internet.

Hi I am new to routers and wanted to get some information on how to access a webserver that is on a computer which is connected to a router. I am very confused about port forwarding. Basically lets say that the webserver is on a computer with the ip of 192.168.1.100. I want to know how to use the internet IP (either one that is auto or one that is fixed) to connect to the webserver outside of the local network from a computer on internet. I was able to do it before the router was installed. Can someone explain this to me or point me into the direction of something that is easy to understand? Thanks, Message Edited by wjriv on 03-26-2008 09:16 PM
Message Edited by wjriv on 03-26-2008 09:16 PM

Still having problems..   I have configured the router to forward ports 80 (web server) to my Linksys router address of 192.168.1.100 (which is the address for the computer that the web server is on).   I also tried DMZ to 192.168.1.100..
I use DynDns to direct my IP address...
I know it works, because I can access the router config from the Internet through port 8080...   But when I try to put in my DynDns or actual IP address (for example: 100.110.10.201)   I enter it as follows:    http://100.110.10.201:80
But I am not able to access the web server from out side of my network.
I have also made my computer with the web server keep the IP address static.
Are there any other things that need to be configured in the router or even in the firewall of the computer?
I have noticed that this has been a major issue in different forums, but I have not been successful with a solution.
My ISP is Bellsouth.net..   I am not sure if they could be blocking anything..
It actually works when I remove the router from the system and just connect it directly.. so that is telling me that there is something else that needs to be configured on the router.
Can anyone help me or direct me to the solution?
This is really frustrating....
Thanks..

Cannot access forwarded ports from the internet

Similar Messages

Maybe you are looking for