Port is added by upnp but still inaccessible
Hi. I'm new to miniupnpd and iptables.
Just now I successfully installed and started miniupnpd on my Linux router, and I ran Skype which then successfully added port (55043) via upnp. However, the port was still inaccessible from internet.
Is there any other rules blocking the port?
Thanks.
# Generated by iptables-save v1.4.21 on Thu Jan 8 07:32:13 2015
*mangle
:PREROUTING ACCEPT [8930:2247957]
:INPUT ACCEPT [2302:241609]
:FORWARD ACCEPT [6604:2005580]
:OUTPUT ACCEPT [2939:780996]
:POSTROUTING ACCEPT [9533:2786104]
:MINIUPNPD - [0:0]
-A PREROUTING -i ppp0 -j MINIUPNPD
COMMIT
# Completed on Thu Jan 8 07:32:13 2015
# Generated by iptables-save v1.4.21 on Thu Jan 8 07:32:13 2015
*nat
:PREROUTING ACCEPT [54:4075]
:INPUT ACCEPT [11:641]
:OUTPUT ACCEPT [28:3667]
:POSTROUTING ACCEPT [28:3667]
:MINIUPNPD - [0:0]
:MINIUPNPD-PCP-PEER - [0:0]
-A PREROUTING -i ppp0 -p tcp -m tcp --dport 1025 -j DNAT --to-destination 192.168.1.1:22
-A PREROUTING -i ppp0 -j MINIUPNPD
-A POSTROUTING -s 192.168.1.0/24 -o ppp0 -j MASQUERADE
-A POSTROUTING -o ppp0 -j MINIUPNPD-PCP-PEER
-A MINIUPNPD -p udp -m udp --dport 55043 -j DNAT --to-destination 192.168.1.140:55043
-A MINIUPNPD -p tcp -m tcp --dport 55043 -j DNAT --to-destination 192.168.1.140:55043
COMMIT
# Completed on Thu Jan 8 07:32:13 2015
# Generated by iptables-save v1.4.21 on Thu Jan 8 07:32:13 2015
*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [186:55628]
:MINIUPNPD - [0:0]
:TCP - [0:0]
:UDP - [0:0]
:fw-interfaces - [0:0]
:fw-open - [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -i wlp1s0 -j ACCEPT
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -m conntrack --ctstate INVALID -j DROP
-A INPUT -j REJECT --reject-with icmp-proto-unreachable
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m conntrack --ctstate NEW -j TCP
-A INPUT -p udp -m conntrack --ctstate NEW -j UDP
-A INPUT -p tcp -m recent --set --name TCP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with tcp-reset
-A INPUT -p udp -m recent --set --name UDP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -j fw-interfaces
-A FORWARD -j fw-open
-A FORWARD -j REJECT --reject-with icmp-host-unreachable
-A FORWARD -i ppp0 ! -o ppp0 -j MINIUPNPD
-A MINIUPNPD -d 192.168.1.140/32 -p udp -m udp --dport 55043 -j ACCEPT
-A MINIUPNPD -d 192.168.1.140/32 -p tcp -m tcp --dport 55043 -j ACCEPT
-A TCP -p tcp -m recent --update --seconds 60 --name TCP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with tcp-reset
-A UDP -p udp -m recent --update --seconds 60 --name UDP-PORTSCAN --mask 255.255.255.255 --rsource -j REJECT --reject-with icmp-port-unreachable
-A fw-interfaces -i wlp1s0 -j ACCEPT
-A fw-open -d 192.168.1.1/32 -p tcp -m tcp --dport 22 -j ACCEPT
COMMIT
# Completed on Thu Jan 8 07:32:13 2015
what is the make and model of your router and/or modem?
www.portforward.com is a great website with walkthroughs and screen shots for port forwarding.
Bob Robertson - Lighter Klepto - I steal lighters, not bandwith
Similar Messages
-
All email contents are gone.tried deleting and adding email account but still no email contents
HOw can i fix this
I had the same problem on my iphone 4s and before I had realized it my phone synced up with my computer and deleted all the appointments in my outlook calendar as well. I run microsoft exchange and unfortunately my ISP doesnt backup for me so I am left reconstructing my calendar from scratch. Apple support said they had no idea why this had happened and couldnt help me. Not very reassuring.
-
Found ports setting...but still cant video conference with ichat
I was once able to use iChat to type back and forth and use video conference (i was borrowing my neighbors wireless connection). But since I got this siemens SE567 router, the video chat fails to connect. I can still chat by typing. I have set up port forwarding for the following ports (all UDP): 5060, 5190, 5297, 5298, 5353, 5678 and 16384-16403. Also, thanks to Kappy and Barney, I have allowed iChat to access the internet. I think these ports are for iChat. But are the same for the videos, or do I have to open other ports (may be for isight). please help. May be i didnt have to open those ports I did since I was always able to use iChat to type.
In the Mac Firewall setting it to Allow All is just that it allows all ports or rather all apps to use any port they want.
In the routing device it tends to be different and somewhat different depending on the device.
A routing device will need to open the ports above 1024 in some manner (UPnP, Port Forwarding, Port Triggering or DMZ).
With some the firewall if it has a software version as well will be effective on those ports and will allow traffic.
On other devices the ports that are to be firewalled also need to be set.
Next comes what does the firewall actually do.
This for example is based on Levels
It includes at different stages things like Not Responding to Internet Pings, Intrusion detection, DOS and SPI but couches them in none threatening (friendly) terms that can be seen as being less informative.
On some devices the DOS or SPI (Some have both but must have one or the other) and Responding to Internet Pings can be separate features making you wonder what the actual firewall is doing.
This 3com emulator page makes it clear what the firewall here does and links the things that are going to be affected by it under it as sub headings in the menu.
This Netgear one has Firewall place and in the WAN menu item has either SPI or DOS (depending of firmware version) and Ping Blocking in that menu item. The actual firewall just seems to allow All Outgoing connection and block incoming ones but does not actually say what it is protecting you from.
(I had one of these and only did the WAN page stuff)
The upshot is that in your case you may need to set the ports in Port Forwarding (NAPT on yours) and also set them in the firewall. But having said that if it has an Off setting it would seem it firewall the ports that are in use.
Now in addition some routing modem are SIP aware and expect any SIP data to go to a VoIP phone. In theses cases there is a special Binding of SIP to port 5060. I know that Thomson-Alcatel Speedtouch range does this and some Drayteks but I am not aware of any of the Siemens range doing it.
My Netgear DG834G had a firmware Update which added a SIP ALG
ALGs are Application Level Gateways and are supposed to help with those particular applications. I could not work out if the one in my Netgear did actually help or not so I turned it Off
At the bottom.
I can not see from the Port Forward pics that suggests that you have these either.
The Manual seems to be downloadable from here which may help
http://gigaset.siemens.com/shc/0,1935,hqen_0_141461_rArNrNrNrN_variation%253A-5_pageType%253AmanualsimagePos%253A0,00.html#content
10:09 PM Tuesday; July 8, 2008 -
Port Forwarding Rule Added Via UPnP
14:24:13, 27 May.
(2110048.260000) Port forwarding rule added via UPnP. protocol: UDP, external ports: any->57902, internal ports: 57902, internal client: 192.168.1.65
14:23:34, 27 May.
(2110008.940000) Port forwarding rule added via UPnP. protocol: UDP, external ports: any->57902, internal ports: 57902, internal client: 192.168.1.65
14:22:53, 27 May.
(2109967.800000) Port forwarding rule added via UPnP. protocol: UDP, external ports: any->57902, internal ports: 57902, internal client: 192.168.1.65
14:22:10, 27 May.
(2109925.160000) Port forwarding rule added via UPnP. protocol: UDP, external ports: any->57902, internal ports: 57902, internal client: 192.168.1.65
14:21:37, 27 May.
(2109892.130000) Port forwarding rule added via UPnP. protocol: UDP, external ports: any->57902, internal ports: 57902, internal client: 192.168.1.65
14:21:06, 27 May.
(2109861.170000) Port forwarding rule added via UPnP. protocol: UDP, external ports: any->57902, internal ports: 57902, internal client: 192.168.1.65
14:20:26, 27 May.
(2109820.740000) Port forwarding rule added via UPnP. protocol: UDP, external ports: any->57902, internal ports: 57902, internal client: 192.168.1.65
Hi guys, would anyone be able to tell me what the above messages in my HH3's log mean? My connection has been fine but I would like to know why this is happening every few seconds.
At first I thought it was because of a certain program I was using but it happens even when this program isn't running so I just don't know!! Any help is appreciated.
EDIT: So I'm guessing it's something to do with having UPnP turned on. The reason I'm asking is because I've seen other people's logs and they aren't filled with this message.Thanks, TommyBobbins.
I will turn off UPnP and see what happens.
I checked the logs again my computer has a lease of 192.168.1.64 - this IP address is also showing the same error in the logs. I suspect the other IP address, ending in 65 is my Dad's computer. He uses Windows and I use Mac.
I'll keep you posted.
EDIT: Just turned off UPnP and that was OK. I checked a program called uTorrent and it says the incoming TCP port (54488) is working.....I find this strange as I have portforwarding turned off... :s
Any ideas?
EDIT AGAIN:
Just wanted to add this in:
18:54:38, 27 May.
(2126273.250000) Port forwarding rule added via UPnP. protocol: UDP, external ports: any->52503, internal ports: 52503, internal client: 192.168.1.65
18:53:53, 27 May.
(2126228.130000) Port forwarding rule added via UPnP. protocol: UDP, external ports: any->52503, internal ports: 52503, internal client: 192.168.1.65
18:53:20, 27 May.
(2126194.690000) Port forwarding rule added via UPnP. protocol: UDP, external ports: any->52503, internal ports: 52503, internal client: 192.168.1.65
20:34:34, 27 May.
(2132268.320000) Port forwarding rule added via UPnP. protocol: UDP, external ports: any->54488, internal ports: 54488, internal client: 192.168.1.64
20:34:31, 27 May.
(2132266.240000) Port forwarding rule deleted via UPnP. protocol: UDP, external ports: any->54488, internal ports: 54488, internal client: 192.168.1.64
20:34:29, 27 May.
(2132264.190000) Port forwarding rule added via UPnP. protocol: TCP, external ports: any->54488, internal ports: 54488, internal client: 192.168.1.64
20:34:27, 27 May.
(2132262.050000) Port forwarding rule deleted via UPnP. protocol: TCP, external ports: any->54488, internal ports: 54488, internal client: 192.168.1.64
As you can see it happens on different ports and UDP and TCP ports....
Hasn't happened in the 20mins or so I've had UPnP turned off. Still, I am curious as to what causes this. -
My computer runs on Windows 7, and I've installed and updated the latest versions of itunes etc, but still to no avail! I've tried different usb ports, troubleshooting, etc... But it still says "One of the USB decuces arrached to this omputer has malfunctioned and windows does not recognize it".
The iPod is brand new, sent to me by Apple as part of the 1st gen replacement programme. I've been using the cable that came with the 1st gen iPod (I bought the first gen second hand) It always worked on my computer with the 1st gen iPod. So I was wondering, do you think I need to replace my cable in order for my PC to recognize my iPod or is it something else?
ThanksTry a different cable. And are you connecting directly to your computer or through a USB hub?
-
I have added Open in browser add ons in Firefox browser, but still not able to see the .shtml files on local machine.
Can any one please tell me how to view .shtml files in Firefox?SHTML files are regular HTML files that make use of Server-Side Includes. In some server configurations, the special file extension is required to instruct the server to parse the file for SSI code.
If Firefox doesn't recognize the file type, it is likely the MIME type is incorrect.
Try this Addons
*https://addons.mozilla.org/en-US/firefox/addon/open-in-browser/ -
i cant remember the answers to my security questions. i have reset my password and added the recovery email account but still cant figure out how to purchase new content. it asks me the same security questions. i also have a temp pin. how do i fix this?
If you've just added an address to your account then it will be an alternate/secondary email address, a rescue email address can only be added by answering 2 of your security questions. If you already had one on your account then go to https://appleid.apple.com/ and click 'Manage your Apple ID' on the right-hand side of that page and log into your account. Then click on 'Password and Security' on the left-hand side of that page and on the right-hand side you should see an option to send security question reset info to your rescue email address.
If you don't have a rescue email addressthen you will need to contact iTunes Support / Apple to get the questions reset.
Contacting Apple about account security : http://support.apple.com/kb/HT5699
When they've been reset (and if you don't already have a rescue email address) you can then use the steps half-way down this page to add a rescue email address for potential future use : http://support.apple.com/kb/HT5312 -
Hello, I added my library according to the documentation but still do not see your changes?
Hello, I added my library, class according to the documentation, com.sap.mobile.platform.client.openui.extensions, but still do not see your changes, for what? Is this the correct place, what I'm doing wrong? I would like to hide the action bar when the application Agentry, will be launched. Can someone give me examples of your changes in the UI Agentry platform androich, some screenshots, files, source? Documentations? Thank you.
Lukas,
Open UI is not designed to give you that level of control over the application. You cannot hide the action bar on the Agentry client through Open UI. Nor would you want to as the client assumes it will be there and uses it.
Open UI will allow you to extend a field control so for example instead of displaying a string field you could instead write code to display a slider control. There are a set number of fields you can extend through OpenUI.
I suggest looking at the source code that comes with the Open UI SDK and the associated Agentry project for how this works and is implemented in the definitions.
--Bill -
I have airport extreme and just purchased a D-Link DCS-932L home network camera. D-Link says I need UpNp but the extreme doesn't support this. Can I use port mapping? if so anyone know how to set that up? thanks
Since the D-Link DCS-932L is accessible on the local network via a web browser, you should be able to access this camera from the Internet if your router has a publically accessible Public IP address. If your ISP provides you with a dynamic Public IP address, you may want to use a DDNS service to make it easier for you to locate your camera whenever your ISP changes your IP address.
Start the AirPort Utility > Select the 802.11n AirPort Extreme Base Station (AEBSn).
Select Manual Setup.
Verify that Connection Sharing = Share a public IP address is selected on the Internet > Internet Connection tab.
Select Advanced, and then, select the Port Mapping tab.
Click the plus sign to add a new port mapping.
For Service, leave the default; this will change to "Custom" once you start entering port values.
In the Public UDP Port(s) and Public TCP Port(s) boxes, type in a 4-digit port number (e.g., 8888) that you choose. In the Private IP Address box, type the internal IP address of your camera. In the Private UDP Port(s) and Private TCP Port(s) boxes, enter the appropriate port values that should have been provided to you by the camera manufacturer. Click Continue.
In the Description box, type a descriptive name like "Internet Camera Access," and then, click Done.
Click on Update.
To connect to the shared Camera from a remote location using a Mac or PC:
Start your favorite web browser.
Enter either your Public IP address or DDNS-provided Domain Name, followed by a colon and the Public port number that you choose in step 7 of the previous procedure. For example: http://123.123.123.123:8888 or http://www.mydtdnsdomainname.com:8888 -
Accidentally switched off iMac at mains. Now only goes to grey sceen when switched on. Have removed all USB's from ports and cable from screen rear but still grey screen. What next?
I would reset the PRAM
http://support.apple.com/kb/HT1379
or
I would try and reset the SMC
http://support.apple.com/kb/ht3964 -
I have Avira version 14 and have removed/added Firefox to allowed sites but still not working!
When I run Firefox it just churns away and expires. Sometimes, if I just leave it, after ten/twenty minutes it will run v, v slowly. I have uninstalled and installed Firefox. I have the most recent version of Avira [14] and have removed Firefox and added to permitted applications, still no joy. Am writing this from another Browser. Also if I close Firefox and then try to restart I keep getting the Firefox is running... Getting seriously annoying now. I can only assume that Firefox is not quite up-to-date with Avira's version yet. The other browser runs without problem.
hello AMc123, you could try to [[Reset Firefox – easily fix most problems|reset firefox]] to make sure that there is nothing wrong with its internal configuration.
firefox should just use the network resources that are provided by the system to connect to the internet. you could test if there is an interference by external software by launching your system in safe mode (with networking enabled) & running firefox then: http://windows.microsoft.com/en-us/windows/start-computer-safe-mode#start-computer-safe-mode=windows-7
<blockquote>I can only assume that Firefox is not quite up-to-date with Avira's version yet.</blockquote>
please note that it's the other way round - third-party software that hooks into firefox would need to adapt and correct bugs, since mozilla cannot fix bugs in a different code base. so you might also try to contact avira, maybe you can get a more detailed reply from them what steps should ideally be taken. thank you! -
Can you use an external hard drive to back up my movies in iTunes but still be able to access them or is there a device so I don't have to use a pc ??
You can store them on a separate hard drive, you don't need to keep them on your laptop's hard drive. On your computer's iTunes on the Advanced tab in Edit > Preferences there is a 'copy files to iTunes media file when adding to library' tickbox - if you untick that, you should be able to copy the films to a separate drive and add them back to your iTunes library (File > Add To Library) and it should then point to them on that separate drive and not copy them to your hard drive. When you are happy that it is what is happening and that they are safely on your external drive you can delete the films from your laptop's hard drive.
If you plug the external drive into a different USB port next time (assuming that your laptop has more than one) then it might get a different drive letter, so you might need to always use it with the same port. -
Okay folks, I need your help out there.
So the nerdy side of me went and picked up the XBOX ONE on release day. Its awesome by the way, BUT..... I cant seem to connect to most xbox live games and absolutely ZERO parties. At first I just thought it was something to do with the xbox itself and would eventually fix itself, but i was wrong. After looking into it on microsoft, i found out that it had to do with my NAT settings on the airport itself. I guess apple and xbox are not compatiable for xbox live and it makes it difficult to have an open NAT setting and is a huge PAIN.
I was able to pinpoint one that the airport time capsule was blocking the IPV6 something or another. Anyways, I unblocked that, and reset the modem and time capsule and jumped on the xbox and now have open NAT settings but still cant connect to multi-player.
Upon further searching, i was told to uncheck the UPNP on my time capsule as well, but have no idea how to find that.
I know it seems confusing, but thats the best i can describe it.
tthanks allBe a long long time before I see an Xbox One.. but whoever told you to uncheck the upnp in the TC.. tell them their dreamin' .. upnp is not support by Apple in any computer or router, never has been.. Apple deliberately wrote their own version called NAT-PMP to do the same thing.. dynamically open ports at the request of an application or client computer.
So there is nothing like that to uncheck.. and as a matter of interest.. there no box to check or uncheck for NAT-PMP either.. since apple do not believe in end user adjustment of settings.. they simply do not exist.
You will have to manually forward all ports required by the Xbox via the TC. For multi-player games you probably need to open more ports than the standard to allow just xbox live. You will need to check the ports required and open them.
OR
Buy a standard vista UPNP compatible router.. and use that.. and simply put the TC in bridge in the network.
I have not seen posts yet about xbox one.. but there are plenty about xbox and ps3 and the fact that Apple really doesn't give a hoot about games consoles.
This is a good basic post for older xbox.
https://discussions.apple.com/thread/5385065?tstart=0 -
I cannot send an email from my iPad 2? No problem receiving, why does this happen? Have tried the suggestions for setting up email and after doing the sync mail through iTunes receiving worked great but still cannot send? Any help would be great!
The fact that you can receive means you have a valid e mail address, and have established the connection to the incoming server, so all of that works. Since the send does not work, that means your outgoing server is rejecting whatever settings you used formthe outgoing set up. Try them again.
Google your particular isp, and ipad and many times you will find the exact settings needed for your isp. Or tell us here, and soneone else may be on the same isp. Some mail services need you to change a port, or have a unique name for the outgoing server.
Kep trying. -
I've tried it all but still slow internet
I've been suffering from very slow connection speeds for months now. At first I thought it was my DSL ISP so I switch to Comcast HSI and it's a little faster but still nowhere near acceptable. I just got off the line with Apple support and I was stunned by the lack of imformation I received! My Apple Care subscription was a total waste of money. So I'm hoping someone here has a nugget of wisdom that will help me out.
Here's what I know:
HSI line out of modem is good. Plugging a PC into the same modem and cable gets 7mbps download speeds. My dual 1.8 G5 running 10.4.3 gets around 850kbps with the same cable and modem.
Problem exists whether I use Airport or ethernet. I am currently using ethernet to the modem to keep things simple.
I've zeroed out the drive and reinstalled the OS. (not fun)
I've trashed all caches.
I've tried with and without DNS addresses in the network preferences.
Flushed Safari and reset Safari.
Firefox and Explorer get the same slow speeds.
Logging in as new test user gets same speeds.
Tried lookupd -flushcache in terminal
Tried with and without Broadband Optimizer
Ran Onyx
Ran Disk Warrior
ipv6 on or off no difference. Currently off.
All proxys are off
Reset modem, unplugged all cables, zapped PRAM, unplugged and replugged a thousand times.
Repaired permissions at every update.
There is more but I can't remember them all...
I'm hoping this rings a bell with someone and they remember how they solved it. I love Apple and I've been Mac-Only since around 1998 but I'm really disappointed with their support performance today.
Any help will be appreciated.
DavidYes that is indeed slow and inline with your previous testing.
Couple things, you have dual 10/100/1000 ethernet ports in that computer right? I am not familiar with the insides yet to know if they are built-in's or if they are on an expansion card.
It is not likely that the PC laptop and your Mac are using the same brand of ethernet chips so there is an avenue for testing. Nor is it likely he may also have had gigabit ethernet capable ports.
The cable-modem wouldn't likely be a gigabit ethernet equipped unit but its worth checking its specs.
What I would want to do is three fold.
1. The ethernet ports on devices are usually auto-sensing for speed. However problems do occur in networks with some devices not playing well together in the sandbox so we have to force one or more of the devices to use a specific speed and what the call a duplex setting.
If for sake of an example that comcast modem only had a 10 megabit/second half-duplex port for you to plug in, if your computer was through auto-sensing goof-up talking 100 megabit at full-duplex duplex or 1000 megabit at full-duplex ethernet or even 10 megabit at full-duplex to that device you have communication error. At the correct speed but wrong duplex setting you can end up with framing errors and late collisions with devices.
2. You have dual network ports most likely on your computer. It would be worth a test to see if you can disable/shut one of them down and let the OS only have to handle the one.
3. If you have a plug in expansion card with ethernet on it, it would be worth a test if the two you have are built-ins and still not working. Also, and much easier would be to see if a friend or work has another Mac you can use for one day as a test to see if it works. If it does, that pinpoints it to something specifically unique about your computer, not the OS, still perhaps a setting in the OS, but I would focus more on the hardware differences (your network controllers). If you use the same cables and it works on the other Mac then you've eliminated that as well.
Hopefully lots of new ideas to ponder.
I also have some commands you can type in that can speed up your maximum throughput on the internet but while they can give you another 100-200KB/sec on downloads, we need a working base connection.
Jan J.
Maybe you are looking for
-
How can I transfer The Simpsons Tapped Out game from my iPhone 4 to my iPhone 5?
I have just gotten an iphone5 and have done a backup from my iPhone 4. I can't get The Simpsons Tapped Out existing game to work on the iPhone 5, how can I get the original game to work on the new phone? As I've done the restore on the new phone, it
-
Hi all, i am trying to load a file called text1.txt using sql loader. I am using sqlplus but i dont know how to call sql loader in sql plus. can someone provide syntax assumming data file is text1.txt and control file is txt.clt thanks
-
Stagewebview crash ios 6.1 air 3.5
hi my app which using stagewebview crashes after update ios 6.01 to ios 6.1. any ideas?
-
How can we modify alv output list
Hi this is fazil. Please tell me any body How can we modify alv output list. Thanks & Regards Fazil [email protected]
-
At least one detail for every master record
I need at least one detail record for a master, how do I enforce this in the database.