Port Forwarding on OSX 10.5 Server using Dynamic External IP Address

I have been able to get Port Forwarding to work properly on OSX Server by following the documentation and following discussion:
http://discussions.apple.com/thread.jspa?messageID=6700460
The problem however, is that you specify a static ip address on the natd.plist file.
I do not have a static ip address, and sometimes it changes. When this happens, of course all the port forwarding configuration will not work, and I need to replace the old external ip with the new external ip address.
This is an easy task to be accomplished, however having the internal network down just for the change of ip address is a hassle.
Is there any way the string entry can be updated with the ip address of the external interface (en0), instead of applying an ip address?
<key>aliasIP</key>
<string>17.128.128.128</string>
I would like to have the ip address (ex: 17.128.128.128) to be updated automatically from my interface ip address. So if my external ip address changes to 17.128.30.30, the natd.plist file will be automatically updated with correct values.
If I could do the following would be great but doesn't work
<key>aliasIP</key>
<string>en0</string>
Any ideas on how to get this accomplished?
Or better yet, can it be accomplished as of now?
I know I can use IPNetRouterX (www.sustworks.com) and that will work just fine. Have tested using the trial and it works, however I do not want to spend $100 for the software either, and I bet there should be a way this can be done on OSX 10.5 Server.
Thanks a lot!!!

This would be best reposted in the appropriate Leopard server forum
http://discussions.apple.com/category.jspa?categoryID=96

Similar Messages

Can anyone tell me how to port forward and setup an XBOX 360 using my Time Capsule??

Xbox 360
When playing the game online, the minimum speed of your network should be 128kbps. The ideal network speed for playing the game online is 768kbps. If you are having a problems with lag check the following:
Network Troubleshooting:
Disable any firewall or security features on your router.
Set port forwarding on your router to the IP address of your Xbox 360. This game uses port 3074 (UDP/TCP). Additionally Xbox LIVE requires ports 80, 53 TCP and 88, 53 UDP.
Place your Xbox 360 into the DMZ of your router.
Disconnect your router and try the game. If it works regularly at this point something about your router may not be completely compatible with the specific needs of this game. Check with your router manufacturer and Microsoft's Xbox Live Connection Issues page for additional steps that may need to be done to resolve the issue you are having. You can also verify that you have an Xbox Live compatible router.
If you are having issues connecting while multiple Xbox 360 consoles are connected on the same network, try forwarding port 3074 (UDP/TCP) for one Xbox 360 and setting the other as DMZ. There is a chance that this may not resolve you issue, if it doesn’t then you may want to consider getting an additional public IP address by contacting your Internet Service Provider and assigning it to one of these two consoles.
NOTE: If setting port forwarding or DMZ helps your connection issue, you may want to assign your Xbox 360 a static IP address within your home network. This can help to ensure that the configurations you made do not need to be done again. You can visit PortForward's Static IP Guide for a detailed guide on how to do this.
NOTE: Many broadband internet modems are coming with routing capabilities built in. Please contact your internet service provider to determine if your internet modem has an integrated router. If it does, they should be able to assist you with the steps above for setting up your router.
Once you have verified that your network setup is not the cause of the issue, try the following:
Try connecting to a different server. Some servers may have other players connected to them that you do not have an optimal connection with. In most games this is accomplished by backing out to the main menu and then selecting multiplayer again. From there you can try connecting to another online game.
Run the Xbox Network Self Test to see how strong your NAT is currently set to. Once the test is completed you will be notified if there is an issue with your connection. If you select "More Info" you will be given information about your NAT type and some steps to resolve any issues with your connection.
Moderate and Strict NAT types may have issues connecting to online matches. You may get the error "Notice - The game session is no longer available." If you do then enabling UPnP, forwarding port 3074, or placing your Xbox in your router's DMZ may resolve this issue. Please consult your router documentation for instructions on how to do this.

ouman88 wrote:
Whoa....this just went way over my head.... I already have 6.1 installed for my Airport Utility.
Read again what I wrote.. 6.1 is the problem.. or part of it.
You need to install the earlier 5.6 version which I have given you explicit instructions to do.
I have done something now and can not connect the XBOX at all now....unless you can provide me step by step directions I may have to call Apple Support.
This will happen over and over.. just press reset and start again.. you need to learn how to do the setup and using 5.6 utility will help you.. as will using ethernet from the computer to the TC.. trying to fix things over wireless is like sitting on a tree branch you are sawing off. As soon as you update you will fall to the ground.
I am not that sure that Apple Support will have any idea.
Do a google search .. you will find most people struggle with this.. Microsoft made the xbox to use upnp with vista specs.. if you use a router without upnp, ie any apple router.. you will have issues.
Have a go at bypassing the problem.. I have no idea if this will work.. I do not use a TC as the main router because much of my network including xbox and ps3 is just a pain.. I use a modem router with upnp. And bridge the TC.. that is the setup I would recommend.
Try this.. once you have installed 5.6 utility.
Get the IP of the XBox and click enable default host.. and put the IP address in there.. this is called DMZ.. all unassigned packets are forwarded to this ip address.. it is like a port forwarding for all ports.
See if it helps.. If it does you will need to lock the xbox address so it doesn't change.. we can get to that.
Tell me what kind of broadband you have and what modem router first.. none of this will work if you have double NAT.

I want to port forward my time Capsule which I use as my router.

For my son I'm trying to set up a Minecraft server and I want to open access via port forwarding. How do I do that? I have seen quite a few directions on the net, but one compatible with the OS X 10.8.3 version.

See this User Tip by forum expert Tesserax to get started.
AirPort - Port Mapping Basics using AirPort Utility v6.x

I need help changing settings (port forward?) after a physical server move

Hi! I have a 10.6 server that I use at home. All is well and good there. The Airport Extreme assigns IP addresses for the network. I have www.mydomain.com that runs on the server -- I use it for testing web apps, etc. I use DynDNS with their client app that send the Comcast dynamic IP address back to DynDNS to keep the server on the grid.
My friend has a 10.6 server. He has www.hisdomain.com as a home business. He also uses DynDNS in a similar way. His landlord just informed him that his apartment is going to be sold from underneath him and he has to move ASAP. It looks like he won't have a permanent place for a month or two, so I offered to let him keep his server at my place.
We both run websites on port 443 and port 80.
After attaching his server to my network, his domain name updates, but typing www.hisdomain.com into a browser lands me on www.mydomain.com. I guess that the problem is port forwarding... the router sends all 443 and 80 requests to my server.
How do I configure this so that services for hisdomain.com are forwarded to his server while services for mydomain.com are forwarded to my server?

Short answer: you can't, although there are a couple of ways to sort-of kluge it.
Long answer: When your router gets an incoming connection, the only thing it has to go on is the IP address and port number (the domain name is sent much later, after TCP session with the server is established). So unless you have multiple public IP addresses (and a router that can handle them), or want to put the sites on different ports...
Speaking of which, here's kluge #1: run his server on different ports (e.g. 81 and 444, or maybe 8080 and 8043) and set the router to forward them to his server. Problem: the user has to include the port number in the URL when they connect, or they'll get your server.
Partial solution (and kluge #2): add a virtual site on your server, with the hostname www.hisdomain.com, go to its Aliases section, and add a rule in the URL Aliases & Redirects section, with these settings:
Type: RedirectMatch
Pattern: (.*)$
Path: http://www.hisdomain.com:81$1
Then build an SSL version that redirects to https://www.hisdomain.com:444$1. Problem: when the client connects, they'll get your SSL certificate instead of his (again, it happens before the client sends the domain name it's trying to reach), and get a cert error. No fix for this.
Kluge #3: instead of making the virtual site redirect clients to his server, add a reverse proxy so your server'll transparently forward requests to his server, and proxy the replies. I haven't done this, but I think what you need to do is make a virtual site (as above), and under its Proxy tab (the one under the virtual site, not the one under the Settings section), check the Enable Reverse Proxy box, leave the Proxy Path as "/" and the Sticky Session Identifier field blank, and add a Balancer member with the Server URL "http://hisinternalipaddress" and a blank Route. Or something like that. Again, you could do the same for https as well, but you'll have the same certificate problem.

Can not port forward on WRT54GS v6 "You cannot use the router IP"

Hello, I'm trying to open a port number, but when I try to use my router's IP, the following message appears
"You cannot use the router IP, network, or broadband address"
[IMG]http://i45.tinypic.com/107qond.jpg[/IMG]
My ADSL was working as a NAT behind a NAT connection, so I had to change my Local IP Address to 192.168.2.1.
Router: WRT54GS v6 firmware 1.52.8 (latest) - Bellsouth router: Westell 6100
Microsoft Windows [Version 6.1.7600]
Ethernet adapter Local Area Connection:
   Connection-specific DNS Suffix . : launchmodem.com
   Link-local IPv6 Address . . . . . : fe80::40a9:a76e:61b3:6435%11
   IPv4 Address. . . . . . . . . . . : 192.168.2.100
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.2.1
So, please help me, how can I open ports on my router? =[
PS: I tried to use 192.168.2.100, and even though it lets me use it, it still seems not to open that port... my IP is dynamic.

Generally: NAT behind NAT is a bad idea. There is usually no need for double NAT. Either configure the ADSL router as bridge and use the WRT for your internet connection or set up the WRT as simple access point behind the ADSL router.
It's also unclear to me what is working or not. First I thought you can't set up forwarding at all because you get that error message. Then, in your PS you write you tried to use 192.168.2.100 and that seemed to be possible. The IP address to forward to must be the IP address of the computer to which you want to forward. Thus 192.168.2.100 is exactly the IP address you have to set up. Does this work or not?
Also remember: with double NAT you must set up two forwardings: first on the ADSL router then on the WRT. Port forwarding is necessary to allow incoming traffic through NAT. All incoming traffic arrives on the ADSL router. Thus setting up port forwarding on the WRT only won't do a thing.
It's also not recommend to use dynamic IPs for forwarding destinations. Dynamic IP addresses may change over time and that requires you to adjust forwardings accordingly. It's better to reserve fixed IP addresses (if your WRT supports this) or set a static IP address on the computer outside the DHCP address pool.

How do you port forward a dvr home security camera using Actiontec Wi424wr router

I been on this for days now. I viewed the videos, I read the websites and I'm still not able to remotely view my camera. Is there a step I am missing? Do I have to make a change in the Windows program too? ActionTec and Verizon what am I'm missing? Thanks for any help.

Common Problems & Fixes For Port Forwarding.
if you run out of ideas take a look at this.

Setting up using an external email address through MobileMe on the iPhone

I have an external email address set up in my Apple Mail desktop client and in the MobileMe web interface. It's an email alias that I have set up with a personal domain that I own. I have that alias set up to forward to my MobileMe account. For sending out from that address, I use my ISP's smtp server, both in my client, and in the MobileMe web interface. I want to also be able to send mail from this external account from my iPhone. I don't think there is a way to do this because when you set up a new mail account on the iPhone, it presumes you are using the smtp server of the email domain you are using, but I'm not, and there is no way during the set up process to set a specific smtp server to use (in this case, I would want to set it up so that the account would use my ISP's smtp server. Just wondering if anyone figured out a way to make this work.

I'd like to know this as well.
I finally managed to set Mail up in a way to use MobileMe but sent from my personal server AND display said address.
However, on my iPhone I can only send email with the "from" info [email protected]

Port forwarding TO Mac OS X Server

We just bought a Mac Mini server (10.6), and we're setting it up. Let me admit that I know little about how the server software works, but I have been playing around with it for the past couple of days.
I have Mail, iChat, webpage, wiki, screen sharing, SSH, and file transfer (AFP and FTP) set up. I would like to forward the ports for those services from my FiOS router to my Mac Mini.
Which ports should I forward? Is it possible to just forward EVERY port?

In reverse order...
Is it possible to just forward EVERY port?
Yes, but you really do not want to do that. It's asking for trouble. Are you sure you want every service on your machine to be publicly available? really? including Open Directory? I doubt it.
Which ports should I forward?
Each service has its own ports. You need to open/forward the ports appropriate for each service (except FTP which is a PITA and I never recommend running anyway).
Apple public a technote on the common port numbers used by Apple's software.

Home iTune server using USB external hard drive

I have Mac and PC at home, and wish to set up kind of a NAS for backup and stream music. I read that with Airport Extreme, I can hook up any USB-enabled external hard drive to stream music through iTunes.
Do I need one with "iTune server" capability built-in (such as WD My Book World Edition), or any o'regular external hard drive will work?
Must I use Airport Extreme? Or any wLAN hub with USB connection?

hi - thanks for responding! I have comcast and have their modem. I hooked up the router with my laptop and went through the setup fine. Everything with that works ok. The USB drive is recognized on the web based utility program that you use to set up the router. However, no where on my computer can I find the USB drive or where to even set up that driver. The manual says that my router should be listed as a another computer in my network neighborhood and that I should be able to find the hard drive through that. It is not. Its only listed in my wireless connections. I talked to a rep at linksys for awhile. In the end, they just suggested unplugging it and plugging it back in......that didn't work! Does that help?

Forwarding mail from Exchange server to an External email address (SBS 2003)

Hi
I hope someone can help me the above question. I need to forward email sent to a particular exchange email account to an external gmail one. i have set this up by creating a contact, I have altered the users Exchange general with the new contact. I have
also made sure mail forwarding is enabled. I have been though all the basic steps to make this work. and tried many other things. i simply cannot get it to work. if an email is sent internally then it forwards it out fine. anything incoming will not forward.
I looked at the NDR and it is clearly being blocked from leaving. i just cant see how to allow this. i get the following code. smtp;554 5.7.1 <[email protected]>: Sender address rejected: You're not allowed
to send from that domain.
Many thanks in anticipation
Paul

Are you using a smarthost? maybe you can test it to deliver mail trough DNS instead of a Smarthost.

Problems with RDP/RDC from Mac OSX to Windows Server 2008 on External IP

We have a customer that is using Mac and Microsoft's RDC for Mac to their servers.
They've just upgraded from Windows Server 2003 to 2008 and can't connect through RDP to their TS server on external IP.
Their servers is not in any domain and it work for them to connect to another Windows Server 2008 that is located in their office when they use internal IP.
The problem is that when using RDC to the external IP they get bellow:
"Remote Desktop cannot verify the identity of the computer you want to connect to. This problem can occur if:
The remote computer is running a version of Windows that is earlier than Windows Vista.
The remote computer is configured to support only the RDP security layer.
Contact your network administrator or the owner of the remote computer for assistance."
From here they can choose "Connect" as they did on the Server 2003 but now they get: "Remote Desktop Connection cannot verify the identity of the computer that you want to connect to.Try reconnecting to the Windows-based computer, or contact our administrator."
and is only able to choose "Ok".
I've changed the settings on the "configuration for host server for remote desktop sessions" under General from "RDP-Security Layer" to "Negotiate" and in this case I get a logon windows where i type in all my information click logon. Here I get another
error message which says something like: (We get it in Swedish). "Connection to the windows-based computer broke since there was a problem associated with the licensificationprotocol... Try to connect again" Where I can choose "Cansel" or "reconect"
but it just keeps poping up if i chose reconnect.
I've tried all settings in the TS server and there is not much to change on the RDP client. We have installed the server certificate on the Mac client but it didn't help.
We've also tried with CoRD and it works fine as RDP from a normal Windows based computer.
The only solution I've found on google is to use CoRD instead but we got problems with that connection since it keep crasching on our computer.
In my eyes the problem is on the security requirements that the RDC for Mac needs but I can't find any inforamtion on MS sites about it.
Greatfull for all tips and trix!

I too was having the problem same as everyone else. However, for me the problem all started when I replaced my SSL certificate that was used/selected in the Remote Desktop Session Host Configuration utility, connections, RDP-TCP Properties. The security
layer is negotiate and the certificate is the one selected on that screen. It was not licensing related.
The certificate had expired and I didn't believe I needed it. But turns out I did, so I had to generate and validate a new one using GoDaddy (though they specifically were not part of the problem). As my Terminal Servers (Remote desktop servers)
do not have IIS installed, I was a bit stumped on how to create a new certificate request. I finally found some instructions on how to create a certificate request using the MMC snap-in, advanced operations, create custom request. The template
chosen was "legacy key", and without boring the rest of the details that part was the root cause of my problem. The legacy key was not able to be processed correctly by the Mac RDC client. Neither the official 2.1.1 client or the 2.1.2 download.
The Terminal Server system event log was showing the following two errors, 36874 and 36888. The first one contained the best details and said: "An TLS 1.0 connection request was received from a remote client application, but none of the cipher suites
supported by the client application are supported by the server. The SSL connection request has failed." Upon searching the internet for that, I found this page which described the legacy key problem:
http://social.msdn.microsoft.com/Forums/en-US/sqlreportingservices/thread/3a2d2eec-000d-432a-abd7-6b965268c671
So, my solution most familiar to me was to use IIS and create the SSL certificate request, process that with my 3rd party CA, export the certificate with private key and then import that certificate into all of my terminal servers. Then using the session
host configuration tool, pick the new certificate and the problem was now solved.

Use iptables on DMZ server to port forward

Hello!
My ISP have this great idea that we have to go to their site to do port forwarding and changing settings on the router/modem, so I was thinking to just set one of my servers as a DMZ, and do port forwarding with iptables on that server.
The problem is that I can't find out how I can make packets coming in on one port go out to another ip in the LAN.
Here is my network setup:
1. Combined router, modem and wireless AP.
2. Apple AirPort Express connected to the Wifi
3. switch connected to the AirPort Express with ethernet.
4. two servers connected to the switch(also with ethernet).
the two servers have ip adress 192.168.2.3 and 192.168.2.4. And I have set up 192.168.2.3 as DMZ.
How do I use iptables to route connections that is coming to 2.3 on a speciffic port to 2.4?

hunterthomson wrote:
Well, I have kind of turned into an arno-iptables-firewall fanboy. I mean really, you can read through the script in /usr/sbin/arno-iptables-firewall Super well commented and written very well. It covers all your bases.
You will want to use the updated package listed in the comments.
http://dl.dropbox.com/u/1367726/arno-ip … all.tar.gz
You will also want the SystemD Unit file
https://aur.archlinux.org/packages/syst … -firewall/
To do NAT and Port-Forwarding... basically just read through the whole firewall.conf and when you hit the bottom your done.
But really, you just need to change these things.
/etc/arno-iptables-firewall/firewall.conf
Line #41, put your Internet facing interfaces here.
Line #46, Probaly want to set this to '1' becuase it sounds like the server dose get it's IP from DHCP... but that is a bad idea because it needs to have the same IP all the time... so maybe leave it disabled '0'
Line #87, Put your LAN facing interfaces here
Line #94, Put the LAN network here, So like if your Internet facing network is 192.168.2.0/24 you could make the LAN 192.168.4.0/24
Line #140, Change this to '1' to enable NAT for your LAN
Line #162, Change this to '1' to enable Port-Forwarding
Line #193-195, Here is where you define your port-forwards,
Example: Forward TCP port 22 to host 192.168.4.55 and TCP port 80 to 192.168.4.66
--> Line 193, NAT_FORWARD_TCP="22>192.168.4.55 80>192.168.4.66"
Then open port 22 and 80 on the WAN side so they 'can' be forwarded.
Line #1170, OPEN_TCP="22 80"
You should also check out the config's in the plugins directory. This is where you get your moneys worth...
ssh-brute-force-protection.conf
ids-protection.conf
traffic-shaper.conf
ipv6-over-ipv4.conf
traffic-accounting.conf
transparent-proxy.conf
multiroute.conf
ipsec-vpn.conf
And More !!!
Thanks for answer. But it seems like you missed that the server is only connected to the LAN, never to the internet.

WRT610N V1 will not allow port forwarding via HP Mediasmart Server

I have the WRT620N router and an HP MediaSmart server connected to it. My source is a cable modem. WHen I try to set up the server for remote access, the router is not found. I am continually getting "Port Forwarding failed" errors from the server. I also have several iPhone apps used to control devices on the network (DVR, BluRay player,etc) that will not connect. (These worked before I changed to this router.)
I have verified that the UPnP is enabled.
I have been struggling with this issue for several months and have not had any luck getting help from the forums, but will tryi again.
Any help would be appreciated.
Thanks,
Joel WZ
Thanks,
Joel WZ

Did you tried to enable Remote Management Access on the router setup page?
If no, then Enable Remote Management Access under Administration tab and then check.

Sql server 2012 express - tcp/ip connection to named instance using dynamic port not working

I have a named instance on a SQL 2012 Express server that won't connect via TCP/IP when wanting to connect off of the dynamic port. I can connect via shared memory locally on the server.   I can connect to the namespace when specifying the
dynamic port listed in the configuration manager.
This is the only named instance on the server and it is not the default.
TCP/IP is enabled
Allow Remote connections is enabled
the server browser service is running
I can connect via the dynamic port number
I am testing the connection locally on the server, so I don't believe a firewall is the issue. I get the same results if I test it from a remote computer.
When using the sqlcmd (sqlcmd -S tcp:SQLSRVR\NAMEINST -E) I get the message that "the requested protocol isn't supported [xfffffffff]".   The command (sqlcmd -S tcp:SQLSRVR\NAMEINST,59992 -E) works.
Through SSMS, I get the message "the connection was actively refused".
On other boxes, I can connect with the named instance without having to specify the port.
I have looked through the sql logs and nothing much shows up. The log does show that is listening on the port # for ipv4 and ipv6.   There is also a line in there talking about the SPN not being registered and not to worry about it if
you are not using Kerberos. I logged in through shared memory and it said I was using NTLM.
Any help would be appreciated.
thanks.

Hi clw,
I’m writing to follow up with you on this post. According to your description, I do a test, if you configure the database engine to listen on a specific TCP port (59992), and
the port is opened in the firewall. If you want to connect to the SQL Server instance, you 'd better to
use the port number.
In my opinion, by default, the default instance of the Database Engine uses port 1433, usually, if you have configured the server to listen on a non-default port number, when an instance of SQL Server uses dynamic port allocation, the connection string that
is built at the SQL Server client does not specify the destination TCP/IP port unless the user or the programmer explicitly specifies the port. Therefore, the SQL Server client library queries the server on UDP port 1434 to collect the information about the
destination instance of SQL Server.
If UDP port 1434 is disabled, the SQL Server client cannot dynamically determine the port of the named instance of SQL Server. Therefore, the SQL Server client may be unable to connect to the named instance of SQL Server. In this situation, the SQL Server
client must specify the dynamically allocated port where the named instance of SQL Server is listening.
For more information about configuring an instance of SQL Server to listen on a specific TCP port or dynamic port, you can review the following article.
https://support.transfrm.com/entries/503111-How-to-configure-an-instance-of-SQL-Server-to-listen-on-a-specific-TCP-port-or-dynamic-port
Thanks,
Sofiya Li
Sofiya Li
TechNet Community Support

Port Forwarding for Minecraft - Port not recognized as open

I am trying to set up Port Forwarding to host a Minecraft server on a local machine. I am able to connect to Minecraft from within the network, but when I try to use my external IP, it fails. I have port forwarding (supposedly) set up on my Airport Extreme base station, for TCP/UDP port 25565. When I check on canyouseeme.com , it says that the port is not open. Do I have some configuration wrong in Airport Utility? I'm pretty sure it's not something wrong with my Ubuntu box (the one hosting the server) because I am able to connect to it without any problem using it's Internal IP.
Any help is greatly appreciated.

I am having this same problem. My AirPort Utility is v6.2. I have followed a tutorial labeled for v6. I cannot open my ports.
I have a static IP address with the following:
Router Mode: DHCP and NAT
I increased the DHCP Range so it would include the static IP address I selected.
DHCP Reservations
Description: Minecraft
Reserve Address By: MAC Address and entered my MAC address
IPv4 Address: the static IP address that I created in System Preferences- Network
Port Settings
Description: Minecraft
Public UDP Ports: 25565
Public TCP Ports: 25565
Private IP Address: same as above which is the same as the statis IP address
Private UDP Ports: 25565
Private TCP Ports: 25565
I also checked with Comcast, my internet provider, to make sure they were not blocking port 25565. The person on the chat said that that port was open.
I have been using yougetsignal.com to check if my ports are open and so far nothing.
Does anyone have any suggestions?

Port Forwarding on OSX 10.5 Server using Dynamic External IP Address

Similar Messages

Maybe you are looking for