Help needed to do port forwarding in ipfw...

For the last weeks I have been working to get the new open-source content management system Alfresco working. It is a pure Java web application that runs under Tomcat. There is official support for Mac OS X but only Windows and Linux gets true installer binaries with guides and everything.
The unique thing about this platform is that it has a built in Java-based CIFS/SMB-server to expose the content not only in web browser but as a mounted volume as well. However, it turned out more than difficult to get that working in my Mac OS X Server 10.4.9 running on an XServe G5 2.0Ghz.
I can run the startup script for the Tomcat as root on my laptop running Mac OS X 10.4.9 and then the CIFS-server can use standard ports like 137, 138, 139 and 445. Finder can mount that as a volume called Alfresco. However, I do not want to run it as root because of several other issues related to X11. There is a note in the installation text that if running the script not as root but as admin or a designated Alfresco user requires port forwarding. That means setting up firewall rules to forward requests from the standard CIFS TCP ports 139/445 to the non-privileged ports the Alfresco CIFS server is listening on (which are 1137,1138,1139 and 1145).
I have understood that this is not possible through the Server Admin GUI-app but needs to be done either in the terminal or by using an app like WaterRoof. I guess also Apple´s server tools are famous for overwriting config files made by a "third-party" app. However, I can't make it work and ipfw syntax still looks very confusing to me. Any ideas of what I need to do in order to have this port forwarding to work.
I have tried something like this so far:
# ! /bin/sh
echo "Setup CIFS Port Forwarding ..."
sysctl -w net.inet.ip.fw.enable=1
sysctl -w net.inet.ip.forwarding=1
sysctl -w net.inet.ip.fw.verbose=1
sysctl -w net.inet.ip.fw.debug=0
#ipfw add 100 count log ip from any to any
ipfw add 200 allow ip from any to any via lo0
# Forward native SMB and NetBIOS sessions to non-privileged ports
ipfw add 300 fwd 192.168.1.2,1445 tcp from any to any dst-port 445 in
ipfw add 400 fwd 192.168.1.2,1139 tcp from any to any dst-port 139 in
# Forward NetBIOS datagrams to non-privileged ports
ipfw add 500 fwd 192.168.1.2,1137 udp from any to any dst-port 137 in
ipfw add 600 fwd 192.168.1.2,1138 udp from any to any dst-port 138 in
Windows filesharing i Mac OS X Server is turned off and there are firewall rules to allow traffic on the designated ports.
http://www.alfresco.com
Any hints would be very helpful!
XServe G5 Mac OS X (10.4.9)

Ok, thanks for the tip. Had a look at that page and it was only about NAT which is not what I am looking for. I have a server with public IP where I need to forward from one port to another on the same IP. However, I find the information about how to configure IPFW rather limited so I wanted to know if the rules in the first post look right and what pitfalls there are when using the GUI-based server admin tools from Apple

Similar Messages

Need some help with ip camera port forwarding

Setting up a ip wireless security camera to provide internet access thru a airport extreme router. Using the free ip scanner software provided with the camera, I can see and connect to the camera on my own home network, wirelessly. I believe that port forwarding will give me access to the camera outside the local network. I'd like to be sure I am setting up the port forwarding correctly. Also if I decide to use back to my Mac in the future will this camera setup interfere with the settings?

OK I figured out how to Port forward and how to do DHCP reservations. Unfortunately the latest 5th Gen Airport extreme software has a bug and neither ip Cam would work. Rolling back the software on the Airport to a previous version finally allowed the DHCP reservations to work. But the port forwarding or something is not working. I can not log on to the ip cams remotely or wirelessly. I may have to borrow a different Wireless router from a IT friend and disconnect the Airport Extreme, to get the cams on wirelessly. Hopefully they fix the problem some day.

Help needed finding display port (NOT mini) to VGA adapter please!

I bought a macbook in 2009 and urgently need a VGA adapter (female) but I don't have a mini display port! Help! I can't seem to find an adapters that suit macbooks before the mini dislay port was brought out.
Thanks
Kirsten

Welcome to Apple Support Community.
If you have an earlier MacBook 2006-early 2009, it has a mini-DVI port.
http://store.apple.com/us/product/M9320G/A/apple-mini-dvi-to-vga-adapter
Search for 'mini DVI to VGA adapter' online, and you will find many sources for an adapter compatible with your MacBook.

Help with dmz or port forwarding on Verizon Jetpack 4G LTE Mobile Hotspot 890L

I really need help with this I want to play gta v but I have strict nat type on ps4 and everytime I go to the dmz on the ip website it shows the ip and the other side shows add and a dot I click on my ip and click apply but it tells me delete this ip but it also won't even let me delete the ip

You may wish to ask this question over at the Verizon Wireless forums: https://www.verizonwireless.com/community . This community is for DSL and FiOS support, not LTE hotspot support.
Be aware, Verizon Wireless uses Carrier-grade NAT, and your Hotspot also performs NAT. Game consoles do not like being behind Double NAT. Depending on how your hotspot is set up on the back end, you may only be able to achieve Moderate NAT / NAT 2 on the hotspot. If your hotspot has a public Internet IP, you should be able to hit Open NAT.
========
The first to bring me 1Gbps Fiber for $30/m wins!

Help needed for a port scanning project

Thank you first.
This is actually my shcool project. we are writing a little port scanner in Java. I want to know how to
tell the OS of a target machine.
tell the UDP and TCP ports( which are UDP ports and which are TCP ports).
My understanding of telling UDP or TCP ports is that an active UDP ports will not respond and a closed one will generate an error.
Thank you again for your advice.

this is the just an idea
echo, 7
ftp-data, 20
ftp, 21
telnet, 23
smtp, 25
time, 37
name, 42
bootp, 67
tftp, 69
finger, 79
http, 79
pop3, 110
nntp, 119
login, 513
printer, 515
route, 520
String cIP = "192.168.0.1";
int nPort = 23;
Socket test = new Socket( cIP, nPort );
public Socket(String host, int port) throws UnknownHostException, IOException{
this(InetAddress.getByName(host), port, null, 0, true);
try{
// connection code in here
catch(Throwable e){}
String cIP = "192.168.0.";
int nPort = 23;
for( int nClassC=0; nClassC<=255; nClassC++ ){
try {
Socket test = new Socket( cIP+nClassC, nPort );
test.close();
} catch ( Throwable e ) {}
public class checkSingleIP extends Thread{
private String cIP;
private int nPort;
public checkSingleIP(String cIP, int nPort ){
this.cIP = cIP;
this.nPort = nPort;
public void run(){
try {
Socket test = new Socket( cIP, nPort );
System.out.println( nPort +" disponibile" );
test.close();
catch ( Throwable e ) {
System.out.println( nPort +" NON disponibile" );
checkSingleIP ip =
new checkSingleIP( "192.168.0.1", 23 );
ip.start();

Help needed, example (serial port) streams module not working.

I am trying to make work the tblt.c example of a streams module on Solaris 8.
This sample is the one provided by Sun in it's Driver Dev. Kit.
My test program gets blocked in the I_PUSH ioctl (after having successfully
poped ttcompat and ldterm).
Debug prints in the module tell me that the tbltopen() stays in the loop
     * Now wait for it. Let our read queue put routine wake us up
     * when it arrives.
     while (tbltd->tbltd_flags & TBLT_IOCWAIT) {
          if (!qwait_sig(q)) {
               lwp_error = EINTR;
               goto error;
done, after
iocb = (struct iocblk *)mp->b_wptr;
     iocb->ioc_count = sizeof (struct iocblk);
     cb = (struct termios *)datap->b_wptr;
     cb->c_iflag = 0;
     cb->c_oflag = 0;
     cb->c_cflag = CREAD|CS8|B9600;
     cb->c_lflag = 0;
     bzero((caddr_t)cb->c_cc, NCCS);
     datap->b_wptr += sizeof (*cb)/(sizeof (*datap->b_wptr));
     mp->b_cont = datap;
     tbltd->tbltd_flags |= TBLT_IOCWAIT;     /* indicate that we're */
     tbltd->tbltd_iocid = iocb->ioc_id;     /* waiting for this response */
     (void) putnext(WR(q), mp);
(used to set baudrate, I suppose)
and only a Ctlr-C of my test prog. makes it return via
lwp_error = EINTR;
               goto error;
A few years ago, I had no trouble with the same Solaris 5 example.
and my hardware (tablet + cable) works fine on a Solaris 5 system.

darren,
thanks for your help here and over on comp.sys.solaris. ultimately the problem was portmon on ttya, and i think i know how it happened. the machine was set up with a keyboard and monitor, and ttya was enabled using admintool. later, with the machine headless, the console was changed over to ttya via eeprom, which produced the conflict i noted above.
solution:
# pmadm -l
PMTAG PMTYPE SVCTAG FLGS ID <PMSPECIFIC>
zsmon ttymon ttyb u root /dev/term/b I - /usr/
bin/login - 9600 ldterm,ttcompat ttyb login: - tvi925 y #
zsmon ttymon ttya u root /dev/term/a - - /usr/
bin/login - 9600 ldterm,ttcompat neo ttya login: - vt100 y #Terminal
# pmadm -d -p zsmon -s ttya
# pmadm -l
PMTAG PMTYPE SVCTAG FLGS ID <PMSPECIFIC>
zsmon ttymon ttyb u root /dev/term/b I - /usr/
bin/login - 9600 ldterm,ttcompat ttyb login: - tvi925 y #
zsmon ttymon ttya ux root /dev/term/a - - /usr/
bin/login - 9600 ldterm,ttcompat neo ttya login: - vt100 y #Terminal
# echo $TERM
sun-color
# svccfg
svc:> select system/console-login
svc:/system/console-login> setprop ttymon/terminal_type = "vt100"
svc:/system/console-login> exit
# echo $TERM
vt100
also see
http://www.bordergatewayprotocol.net/jon/helpful_stuff/solaris/solaris-advanced-sysadmin-guide/ch09/181-186.html

Help needed in serial port connection

I tried to write a midlet such that an emulator can get images from a webcam which shall is attached to the serial port of a cell phone. But I always get the following error message:
IOException:javax.microedition.io.ConnectionNotFoundException: The requested protocol does not exist comm:0;baudrate=9600
My code appears as follows:
InputConnection cc;
DataInputStream inc;
static byte img_data[];
static int frame_len = 30000;
public void start()
try
System.out.println("I am here:");
cc = (StreamConnection)Connector.open("comm:0;baudrate=9600");
//************* I can't pass through here
//I also try to use
//cc = (StreamConnection)Connector.open
//("comm:0;baudrate=9600;bitsperchar=8;stopbits=1;parity=none");
// to do it, but get same problem
inc = new DataInputStream(cc.openDataInputStream());
inc.readFully( img_data);
catch (IOException e)
{ System.err.println("IOException:" + e); }
finally
// free up the I/O stream after use
try { if (inc != null ) inc.close(); }
catch (IOException ignored) { System.err.println ("Exception:" + ignored); }
// free up the connection after use
try { if ( cc != null ) cc.close(); }
catch (IOException ignored) { System.err.println("Exception:" + ignored); }
System.out.println("I am ok:");
Does anybody know some reasons that probably lead to this error.
thanks in advance

well, as i know, midp 1.0 does not support serial connections, actually, any connection type other than http connection.
this is my problem noeadays too, is it practically possible to use serial connection under midp.
have you had any improvements since than?

Port forwarding for Time Capsule

Could someone be so kind as to forward instructions for portforwarding ports 80, 443,4125, and 554 on my time capsule?
Im a novice user at best but I want to learn to set up security cameras for my small bussiness. Im useing an air link101 IP camera system.
Any help would be great.

Port forwarding on a Time Capsule is done in AirPort Utility's Advanced panel, Port Mapping tab. You'll also need to use the Internet panel, DHCP tab, to reserve a fixed IP address to the camera so that the Time Capsule can forward to a definite address.

Port forwarding using Transmission & Mac Pro

I do a lot of film editing for various clients and make my work available to a host of individuals via torrents using Transmission 2.84. Some complain my client (Transmission) is not connectable and they are not able to directly connect.
To fix this problem I'm told I need to perform port forwarding but I am lost as how to do so.
I'm on a Mac Pro with built-in Airport Extreme using Yosemite. Some advice has been to open System prefs > Security >> Firewall and make sure "Set access for specific services and applications" is selected then click the + button and select Transmission from my Applications folder then make sure the pull down menus is set to "Allow incoming connections".
The problem here is that I find nothing under Firewall offering the "Set access...", just the option to turn on/off Firewall. I turned it off but still no success.
How exactly (step by step would be helpful) do I set up port forwarding using the above machine and torrent application?

I do have exactly 1 computer. The computer came with an internal AirPort Extreme card. The machine is sharing a self-assigned IP address to provide an internal WiFi connection with an HP Printer.
Inserting the IP address takes me to a Comcast Business Gateway screen asking for User Name and Password.
Looking up Name/Password for AirPort Extreme models I get this:
Model
Default Username
Default Password
AirPort Base Station (Graphite) 2
(none)
public
Airport Base Station (Dual Ethernet) 2
n/a
password
Airport Extreme Base Station 2
n/a
admin
airport5 1.0.09
root
admin
AirPortExtreme
NONE
NONE
I also tried the suggested Comcast and Comcast Home Networking router name/pwd. I do not find a name/pwd for a Comcast business router.
All are rebuffed as incorrect.
Here is AirPort Extreme info:
Card Type:
AirPort Extreme (0x14E4, 0x88)
Firmware Version:
Broadcom BCM43xx 1.0 (5.10.131.36.16)
MAC Address:
00:1c:b3:ff:5a:a8
Locale:
FCC
Country Code:
X0
Supported PHY Modes:
802.11 a/b/g/n
Supported Channels:
1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165
Status:
Connected
Am I just using the AirPort Extreme card to provide the self-assigned IP address for WiFi and the actual internet connection is being handled by the business router provided by Comcast?
How do I overcome this hurdle?

RV042 Firewall & Port Forwarding

I am installing a RV042 on a client SBS network. In the configuration, I notice that there is a place for port forwarding where I guess I could open the ports for smtp, http, https, ...
But there are also access rules in the firewall section which seem to be the same except that you can schedule them.
Question is, do I need to configure both, or if only one of them, which one?
Thanks in advance for the advice.
Bob Showalter, Packer International

Bob,
You only need to configure port forwarding, unless you want to specify a source and destination that the packet is allowed or denied; then you would use both.
hope this helps,
Jasbryan

Port Forwarding on a Router

I'm getting quite frustrated with ARD 2.2. I'm trying to use ARD over the internet to teach my parents how to use their iMacs. I have all of the Network and Sharing settings turned on at their end, which isn't easy to accomplish since they are novice users 1500 miles away. I can use ARD to access and control the macs on my local network, but every time I input my parent's IP addresses, I get the message "Verify Failed", and it can't be because I have the wrong User Name or Password.
I've read a lot about port forwarding for macs behind a router and I may need to do it. But it seems like everyone but me knows how to forward a port and nobody has given step-by-step instructions on how to do this. So I have some questions.
1. I have a Linksys router on my end and a MacSense router on theirs. Do I need to enable Port Forwarding on both routers?
2. When I enter their IP addresses, their computers are "seen" by ARD. How can it "see" these computers if the port forwarding is not enabled?
3. My Linksys router has a web page that controls it, but nowhere is there a "Port Forwarding" option. Where is this located? Is it called by another name? Does it have something to do with NAT? How exactly do you "adjust" NAT settings to open a port?
All the macs in question are using OS 10.4.5 or 10.4.6. My version of ARD is 2.2. Here is the line of connection between their macs and mine:
Parent's iMac : MacSense Router : Cable Modem : INTERNET : Cable Modem : Linksys Router : 4 Port Hub : Airport Extreme Base Station : Powerbook G4.
I would appreciate any suggestions at this point. Thanks!

Things have taken a turn for the worse. After my last solution, we found that my Mom's iMac could not send email. She could receive mail and surf the internet, but not send. The problem showed up as soon as I mucked about with the router ports. She has a .Mac account, btw.
To complicate things, my ARD connection shows my Dad's iMac, not Mom's. I could connect to Dad's iMac through ARD but not Mom's. Only if we shut down Dad's iMac could I connect to Mom's. The odd thing was the connection I was getting to Mom's iMac was listed as Dad's computer!
I have read that ARD can only connect to one computer behind a router. No biggie, I'll just have them turn one off when I use the other. But how to solve the send email problem?
I decided to use the DMZ (De-Militarized-Zone) setting of their router to open all ports on one IP address. When I did this we could finally see my Mom's iMac with her proper name in ARD. But joy was short lived because my control and observe attempts failed. I get the message "Connection Failed to XXX" where XXX is the name of Mom's iMac. Adding insult to injury, the mail still won't send.
ARD shows the Current Application, Current User and Status (Available). I can send messages through ARD and they are received successfully (they can see the messages on their end).
If I can get this far, why can't I observe? And what happened to the sending of email? Help me Obi Won Kanobi - you're my only hope!
1Ghz Aluminum PowerBook G4 Mac OS X (10.4.6)

Port Forwarding, MI424WR

I'm not even sure I'll give enough information here, because I don't really know what I'm talking about. However, I've been working with a couple of "technical" people from my office.
Essentially, I'm trying to connect two devices (Yamaha Disklavier Pianos) over my FIOS connection (for a process called Remote Lesson) and need to utilize port forwarding. I've tried the instructions on the www.actiontec.com website (Basic Port Forwarding on the MI424WR Verion Fios Router), but have been unable to connect successfully.
Basically, here's the two things I need to do (cut and pasted from a technical document draft). Can someone please advise what might be going wrong?   I could also forward the entire "connection" document to someone who might want to take a look at it and get a clearer picture.
At any rate, here are steps 2 and 3 of the process we're trying to do:
2. Port Forwarding for Remote Lesson (WAN to LAN)
- Port 58092 is used in both TCP and UDP by default.
        - Note: You can choose any port unless it has already used.
- Please configure a system to forward the access of this port to Disklavier.
3. Release of the port to the Internet (LAN to WAN)
- If the access of port 58092 is filtered, please release this port in both TCP and UDP.
         Note: If your partner has configured another port number, please release that port in both TCP and UDP.
Port setting table
PORT FORWARDING (WAN TO LAN): IP Address (original LAN Address)
Port Number (origin)
Protocol: Both TCP and UDP
RELEASE OF THE PORT (LAN TO WAN): Port Number: Destination or all
   Protocol: Both TCP and UDP
Thanks for being patient with a "newbie" - I hope someone can help.

levesq56 wrote:
Essentially, I'm trying to connect two devices (Yamaha Disklavier Pianos) over my FIOS connection (for a process called Remote Lesson) and need to utilize port forwarding. I've tried the instructions on the www.actiontec.com website (Basic Port Forwarding on the MI424WR Verion Fios Router), but have been unable to connect successfully.
Thanks for being patient with a "newbie" - I hope someone can help.
If you're only trying to connect the 2 devices within your local lan you do not need to do anything with port forwarding. You would only need to add port forwarding rules if you are going to access the devices from remote sites.
The below addresses step 2 of your question.
Step 3 of your question is not needed as the actiontec does not block any port access from the LAN to the WAN
Step 2 allowing wan to lan access
If you are doing the latter then you would want to give the device fixed ip addresses, make sure they are out of the dhcp range of the actiontec router.
Then go to firewall setting
Select Port Forwarding tab
Select New Entry
add the IP address of the device in the Local Host field
Make sure Forward to Port is set as Same as incoming Port
Make sure Schedule is set as Always
Under protocols Select User defined
Make the service name whatever you want - e.g Piano
Select new server ports
Under protocols Select TCP
Under source port select single
enter 58092
Make sure destination port saya Any
Hit OK
Select New server ports again and repeat the last five steps for protocol UDP
then say OK
Say OK to the Edit port Forwarding rule
Now you should be able to access the device from the outside WAN

Not enough port fields in port forwarding for Linksys E4200

I have always used netgear routers in the past. After a series of issues regarding configurations not working correctly I invested in what appeared to be a semi pro router, the cisco linksys e4200.
I have a centralized server which I use to access a mass of different services such as mail, dns, VPN, FTP, Kerberos, http and many more. While I am not a massive networking nerd, this server setup is like my garage project. To access these services externally to my LAN as far as I understand I would need to configure port forwarding for each service to my server. Unfortunately the control panel for the linksys E4200 only offers about 15 custom port fields for forwarding, and some documentation I have read shows that with it's basic install my server could be using up to 60 ports at once.
Is this router just not suitable for this sort of network. If so I will be very disappointed because I have spent a quarter of the price on netgear routers with more control than this.
If anybody could assist with details and options I would greatly appreciate it

Wrong forum, use "small business routers".

Trouble with port forwarding, DHCP, VUZE, and downloading speed.

I am using Vuze to download things. I have a slow download speed and yellow smiley face, indicating a NAT problem. I think I need to implement a port forwarding, but that requires a static IP address. My router and security is set up such that I CANNOT connect to the internet using a manual configuration--DHCP only. However, I always have the same IP address. This is because the wireless router--a Motorola SB900--will only recognize approved computers designated by the IP address.
Can anyone advise on what to do next?

Enmnm wrote:
I am using Vuze to download things. I have a slow download speed and yellow smiley face, indicating a NAT problem.
Here are two links that will rate your connection.
http://www.speedtest.net/
http://www.pingtest.net/
You can try downloading directly from the terminal to see how fast one file downloads.
Macintosh-HD -> Applications -> Utilities -> Terminal
mac $ mkdir test
mac $ cd test
mac $ curl "http://www.apple.com" >see
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 11292 100 11292 0 0 22628 0 --:--:-- --:--:-- --:--:-- 62623
mac $ cat see
<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-us" lang="en-US">
<head>
... clipped ...
I think I need to implement a port forwarding, but that requires a static IP address. My router and security is set up such that I CANNOT connect to the internet using a manual configuration--DHCP only.
you are dealing with two networks. There is a network between your computer and your router. There is a second network between your router and your ISP.
Port-forwarding is from your router to your computer.
http://www.portforward.com/english/routers/port_forwarding/Motorola/SBG900/Azure us.htm
However, I always have the same IP address. This is because the wireless router--a Motorola SB900--will only recognize approved computers designated by the IP address.
Can anyone advise on what to do next?
You need to set Port-forwarding between your computer and your router. You will need a fixed IP address on a your Computer. There is to ways of doing this. You can set up a static IP address on your computer. A hack would be to add 10 or 20 to your IP address that your router gives out. For example if your router gives out 192.168.1.10 you of would add 10 to the ten giving 192.168.1.20. you need to make the addition to the right most number of which in the example is ten.
The section way is . . . You can have your router a signed a fixed address based on your MAC address. ( Each Internet device has a fixed address that is called the MAC address. This is a different address than your IP address. the MAC address is assigned in the factory. )
Another hack would be to Port-forward to the number your router assigned at random. If your Computer is the only computer on the router, the number should always be the same. It is a hack because this is not guaranteed.

How to port forward with Modem and Router

I have a Linksys AM300 Modem and a Linksys WRT610N router.
I want to forward ports for Call of Duty Modern Warfare 2 and STEAM.
How do I port forward when I have 2 devices and how can I test that it is working?

I would recommend that you reconfigure your AM300 into bridge mode. In bridge mode it operates like a standard modem would do. Then reconfigure the WRT610N for your internet connection, i.e. most likely PPPoE. Now the WRT has a direct connection into the internet. Now you only need to configure port forwarding on the WRT610N.

Help needed to do port forwarding in ipfw...

Similar Messages

Maybe you are looking for