RVS 4000 wont vpn

I am having a hard time using the Quick VPN client to connect into my RVS4000. I am using Windows 7 64-bit. When I try connecting I get the following error: The remote gateway is not responding. Do you want to wait? If you click yes, the box reappears. If you click no, the current session disconnects.
I have tried opening remote management, changing the vpnserver.conf file for another IP address.
Any other ideas. I have seen many people with the problem, but non of them have worked for me.
On a second note, one of my users are using a Mac. Will QuickVPN work on Macs?
Thank you,
Daniel

Hi,
since this question is about a product in the Cisco Small Business / Linksys range, I suggest you move it to the community, where you will have a better chance of getting expert advice.
best regards,
Herbert
Moderator for the Cisco Support Community VPN section

Similar Messages

Drive mapping with 2 RVS 4000 over VPN

Hello
i have the following problem. I have created a VPN VPN connection with two RVS 4000 (release 2.x)
i have a local network on one site with some PC's and a NAS drive. I have shared some of the direcorys. From the other Network i can ping each device, but mapp the shared directory isn't possible.
Hope someone can give me a idea
Thansk
HP.Meyer

Hi Derek my name is Johnnatan and I am part of the Small business Support community, your case involves multiple devices and QoS features, you can contact us to open you a case and get a better help.
https://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html
I hope you find this answer useful,
Greetings,
Johnnatan Rodriguez Miranda.
Cisco network support engineer.

Connecting 3 RVS 4000 with VPN

Hello,
i want to connect in a triangle 3 RVS 4000 Router with VPN
i have configured 3 routers, which are able to connect to the Internet. Each of them are configured as a gateway.
i have created 2 tunnel on each router. But the vpn connection can't be established,
here is the configuration of router1 the other are configured in the same way, only the remote group setup is different
Do i have to open also some ports for the VPN , if yes which one and were
Thanks fpr your help and response
HP.Meyer

Hello,
Are you trying to ping the IP address of the clients behind the routers or the computer name? You will need to use the IP addresses only unless you add the names to the LMHOSTS file in your PCs. Also, if there is any antivirus or third party firewall software running on those clients it will block the PC from replying to pings from an untrusted subnet. For example you ping from R1 with 192.168.100.1 to a PC behind R2 that has 192.168.101.x. Because the antivirus or firewall software on the PC sees that the ping request is coming from a different subnet it will block the response. You will need to either disable any security software or add the untrusted subnet to the trusted list in that software. Sometimes it is best to test by pinging something that does not have any software, such as a printer or print server.
Please keep us updated.

No Internet Access with Static IP and RVS 4000

I have an RVS 4000. I have several PC's to which I have assigned static IP addresses. I have recently upgraded most of the PC's to Win 7 (64) machines. I updated the firmware on the RVS4000 to 1.3.3.5 in conjunction with this. After such update (and actually before as well) I could not assign a static IP address to a PC and have access to the internet. It connects fine to my LAN, just no internet access. This is also affected on several other machines running Win XP and Win 2003 Server, so it's not just this computer.
I have:
     1. Shut down (powered off/unplugged) everything, router, DSL modem, switches, server, etc.
     2. As I said firmware is current.
     3. Yes, DNS servers and gateway, subnet, etc. are all correctly specified on the PC.
     4. Router is set for gateway mode.
     5. Set to only IPV4.
The only way it allows internet access is to use DHCP. I've even tried taking the IP address via DHCP and manually assigning the DNS servers and that works fine, but as soon as I assign a static IP internet access is immediately gone.
There must be something I'm missing, but I can't seem to find it.
Everything worked fine prior to the conversion of the Win 7 machines, i.e. I had several PC's with static IP's and no problems.
Any thoughts appreciated.

As an addendum, if I turn off the Firewall (internet access policy to disable) it will allow the static IP computer to have internet access. I have the DHCP range set to be .5 - .54 and am using a static ip outside this range. The Internet access policy is to restrict those PC's getting IP via DHCP.

All RVS-4000's with firmware versions less than 1.3.2.0

Hi,
For those of you without the time to explore the Cisco site. I thought you guys might want to know about the following vulnerability. Which is fixed in the latest firmware version 1.3.2.0 for the RVS-4000:
Cisco Security Advisory: Cisco Small Business Video Surveillance Cameras and Cisco 4-Port Gigabit Security Routers Authentication Bypass Vulnerability
Document ID: 111641
Advisory ID: cisco-sa-20100421-vsc
http://www.cisco.com/warp/public/707/cisco-sa-20100421-vsc.shtml
Revision 1.1
Last Updated 2010 MAY 19 2030 UTC (GMT)
For Public Release 2010 APR 21 1600 UTC (GMT)
Software Versions and Fixes
To determine the software version running on a camera, administrators can click the "About" tab at the top-right of the device user interface. The software version information can be obtained on the System Status page under the "Status" tab.
The latest camera software can be downloaded at http://tools.cisco.com/support/downloads/go/Redirect.x?mdfid=282414029 ( registered customers only) .
The software version of the RVS4000 is displayed on the main router page displayed after users log in.
The latest RVS4000 software can be downloaded at http://tools.cisco.com/support/downloads/pub/Redirect.x?mdfid=282413304 ( registered customers only) .
When considering software upgrades, also consult http://www.cisco.com/go/psirt and any subsequent advisories to determine exposure and a complete upgrade solution.
In all cases, customers should exercise caution to be certain the devices to be upgraded contain sufficient memory and that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, contact the Cisco Small Business Support Center or your contracted maintenance provider for assistance.
Product
First Fixed Version
PVC2300
1.1.2.6
WVC200
1.2.2.0
WVC210
1.1.0.15
WVC2300
1.1.2.6
RVS4000
1.3.2.0
Bruce

Yes, I posted this same information in the Video Surveillance section a few weeks ago. it was actually a Partner on the
community who found this and brought it to our attention and we fixed it.
Thanks for cross posting here, since you are right in it also effected this router.
And a big thank you for taking the time to collaborate some very useful information with the community. I have noticed your recent posts and I think they are well writen, helpful, and well organized. I also like your idea of turning some threads into solutions documents and resource labs perhaps.
If you would ever like to post something of that natire, you may also. Just creat a document with your findings.
Steve

RVS 4000 Email responses that need addressing

I have been bounced around between Cisco and Linksys for months….
I have two simple questions… One I know the answer on… the second, I haven’t a clue…
I have corresponded with 12-15 people at Linksys, and Cisco…
Their last answer is I should contact you…. So… Here goes…. The 16th person I’m requesting this information from….. (I can’t believe that Linksys/Cisco can’t answer these simple questions!)
Seeing that I've been checking for new firmware and IPS downloads from the Cisco site for months now, and not seeing any new downloads......
And Seeing that I'm getting nagging emails that my IPS Signature is too old, Please Update it!!!!
And Seeing that I'm still getting emails that I don't understand from the RVS 4000: -IPSEC EVENT: KLIPS device ipsec0 shut down
and I can't seem to understand How or Why it is happening, and have read manual cover to cover, and all the FAQ's, and can't upgrade it because there is no current software......
I sent the following email to [email protected] :
Hello. Have an RVS4000 Router, being used as a Gateway...
I have emails enabled, so that I'll be informed whenever there is greater than a set level of threats.... However...
If I check the logs, there are no threats... Yet....
I keep getting the following emails:
Your Signature Version is beyond 143 days. Please Update it!
I've also been getting the following emails:
-IPSEC EVENT: KLIPS device ipsec0 shut down
I'm using V1.40 IPS signature, and V1.2.11 firmware....
Yet I keep getting these emails...
I can't update the IPS Signature Version if you don't provide it!!! And you aren't!
Secondly, WHAT THE HECK DOES: "-IPSEC EVENT: KLIPS device ipsec0 shut down" MEAN????
May I suggest that the next version of firmware have options to disable the IPS "Nags" if you are not planning on writing any more code?
And, What the Heck does: "-IPSEC EVENT: KLIPS device ipsec0 shut down" mean?
Sincerely
Jan Janowski

V1.41 IPS file has been released!!!
Version: 1.41     Total Rules: 1098
In this signature, we addressed the exploits/vulnerabilities and applications
as below:
-EXPLOIT MS Video ActiveX Control Stack Buffer Overflow
A buffer overflow vulnerability exists in Microsoft DirectShow.
The flaw is due to the way Microsoft Video ActiveX Control parses image files.
An attacker can persuade the target user to open a malicious web page to exploit
this vulnerability.
-EXPLOIT Oracle Database Workspace Manager SQL Injection
Multiple SQL injection vulnerabilities exist in Oracle Database Server product.
The vulnerabilities are due to insufficient sanitization of input parameters
in the Oracle Workspace Manager component. A remote attacker with valid user
credentials may leverage these vulnerabilities to inject and execute SQL code
with escalated privilegesof SYS or WMSYS account.
Support P2P application named uTorrent up to version 1.7.2.
Signature content for 1.41
========================================================================
New Added signature(s):
1053635 EXPLOIT MS Video ActiveX Control Stack Buffer Overflow -1
1053636 EXPLOIT MS Video ActiveX Control Stack Buffer Overflow -2
1053632 EXPLOIT Oracle Database Workspace Manager SQL Injection -1
1053633 EXPLOIT Oracle Database Workspace Manager SQL Injection -2
1053634 EXPLOIT Oracle Database Workspace Manager SQL Injection -3
Modified signature(s):
1051783 P2P Gnutella Connect
1051212 P2P Gnutella Get file
1051785 P2P Gnutella UDP PING 2
1051997 P2P Gnutella Bearshare file transfer with UDP
1052039 P2P Gnutella OK
1052637 P2P Foxy Get file
Deleted signature(s):
1050521 Worm.Klez.E1 - 1
1050522 Worm.Klez.E1 - 2
1050523 Worm.Klez.E1 - 3
1050524 Worm.Klez.E2 - 1
1050525 Worm.Klez.E2 - 2
1050526 Worm.Klez.E2 ¡V 3
1050536 Worm.Blaster.B - 1
1050537 Worm.Blaster.B - 2
1050538 Worm.Blaster.B - 3
1050539 Worm.Blaster.C - 1
1050540 Worm.Blaster.C - 2
1050541 Worm.Blaster.C - 3
Number of rules in each category:
========================================================================
DoS/DDoS 51
Buffer Overflow: 241
Access Control: 92
Scan:   41
Trojan Horse: 62
Misc:   3
P2P:   40
Instant Messenger: 121
Vrus/Worm: 410
Web Attacks: 37
No Problem updating it, and the date reports Correctly!!!
THANK YOU!!!

RVS 4000 HTTP mgmt interface hangs @ Port 80 & DHCP stops working

This is the RVS 4000
Firmware version 1.3.3.5
STAR 9202 Chipset
64 MB DRAM
8MB Flash
DOS, Block WAN Rq, Remote mgmt all OFF
IPSec Tunnel none used
Internet connection is DHCP
LAN is set to DHCP with several Static devices defined
DMZ is dsabled
Functionining as a gateway
Time is set via NTP & the NRC
IPV4 Only
Everything is pretty much dedault except for QoS
Trust mode is Port, set to 4, 4, 4, 1
( Port 4 has a Linksys ATA plugged into it for VOIP services )
SIP Port Forwarding is enabled for 5060
Every day or so the Router becomes unresponsive to the HTTP mgmt interface, as well as it no longer offers DHCP services.
When this happens the only remedy is to power reboot.
Everthing comes back online just fine, however, the LOGS are initilaized so no data to figure out what`s going on.
My next step is to setuo a syslog server and have the logs copied out.
Anyone see this kind of behavior before ?
Any ideas ??
( No, I have no Torrents running at all, but I do have several devices like AppleTV, PS3s etc that run streaming Video plus I have the SPA3102 )
Thanks Derek

Hi there Vijay !
I cannot upgrade to that version of Firmware as my RVS4000 is a V1, not a V2.
Is there some way I can change it such that it will load the newer Firmware ?
This is the error I receive when trying to upgrade anyway :
"Upgrade file is not the correct type or version for this device.
Upgrade failed.
Please obtain the correct file and try again."
Otherwise the newest firmware I can load is 1.3.3.5
( which seems to have this problem )

RVS 4000 Drops LAN devices

I recently updated my network with the following:
RVS 4000 v1.3.2.0 - Linksys by Cisco version
SG200-26
AP541N [WAP]
All devices have the latest version of firmware.
Users only connect laptops via wireless, they are a mix of MAC and Windows users, devices such as printers and network storage are all wired connections.
The RVS 4000 would drop the internal Lan after several hours or sometimes days, there would be no reason to the periodicity it would retain and then drop the LAN. By dropping the Lan I mean:
Internet Access would cease, devices such as laptops would lose their wireless connection, a laptop requesting an IP address would be ignored. Effectively we were down.
Connecting a laptop to the network via a cable connection would eventually get an IP address but all other wired devices such as the NAS Storage and printers would be unreachable and require powering off and on to get an IP.
A reboot of the RVS 4000 by powering off the router would have to happen to restore the LAN quickly. I followed advice on the Internet and this forum by upgrading the firmware and resetting to factory defaults and then reloading the configuration.
The only change that seemed to make any sort of differnece was connecting the AP541N directly to the RVS 4000 rather than the SG200-26. Throughput increased and the period between LAN drops extended but the RVS 4000 would ciontinue dropping the LAN eventually.
When it dropped the LAN during a work day, that was it!
I read a lot of negative feedback on the version of RVS 4000 firmware and as the version 2.0 will not install I purchased the Cisco version of the RVS 4000 v 2.0.0.3.
The new RVS 4000 also drops the LAN! The period between drops is much longer, but it still drops the Lan.
Ventilation is good and it is sitting on its edge using the platsic feet that come in the package.
The AP541N is still directly connected to the RVS 4000 rather than the SG200-26.
Any ideas on how to fix the RVS 4000 or an alternative... I would like to stay with Cisco, an alternative, if the RVS 4000 is unfixable should have a browser based admin facility!
Thanks

Mark,
Very strange behavior; it would seem with the earlier version and new version of the RVS4000.That this will be more an environmental issue. Now trying to find out what is causing this type of behavior. Need some logs from the router and the SG200 switch before any reboots. If you have the ability to set up a syslog server and capture this information would be great. Also detail information on what port each device is plugged into. Hopefully from this we can tell what might be happing in your network to cause this type of behavior.
Jarkko,
Your issue sounds like you have a default ip address conflict, this usually happens when you leave the default ip address of RVS4000 to 192.168.1.1 and many times modem are hard coded with a similar address of 192.168.1.1, which can cause the type of behavior I have seen the in past.
Also I would leave IPS enable unless you are trying to reach download speeds above 20Mbs
Thanks,
Hope this helps.
Jasbryan

RVS 4000-V2: PPPoE failed - "unrecognized option '1492'

I've got a brand new RVS 4000-V2 router (firmware: Release 2.0.0.3)
Can't get a connection to my ISP using "Internet Connection Type" PPPoE.   The connection works fine with any other router.
MTU size is set to "auto".
Logfile says:
Plugin pppoe loaded
PPPoE Plugin Initialized
Plugin pppoe called.
unrecognized option '1492'
I use the standard Web-administration client.
Any ideas?

Thanks
for the reply.
In the meanwhile I've tried it with another DSL-Modem - same effect: No connect to the Internet-Provided
,    "unregognized option '1492'" in den Log-File.
I have no problems with the Internet Connection using a differend router from another brand with both of the modems (Siemens Plus or D-Link DSL 321B).
I have attached a screenshot of the WAN settings as requested.   I tried both the auto and the manual mode. No success.
If you give me directions how to trace the WAN Port with your router, I would do so.
Best regards
helmut

RVS 4000 on Port 587

hi
I just bought RVS 4000 a week ago. My previous router can send email through port 587,
Ever since i bought RVS 4000, it stop sending emails. I opened port 25 and I have tried all my best to do port forwarding to port 587 but still it cannot send email.
My ISP is using port 587.
Please help help me on this. What should i do to be able to send email on port 587?

Hi Lui,
When you say send mail on port 587, are you referring to sending mail from the LAN to the WAN on port 587? Or a port forward translation from 25 on the WAN to 587 on the LAN?
On the RVS4000, you can perform port translation by going to the Firewall Page, then Single Port Forwarding. Create an application name (text based, will not affect config) and then you can choose an external port to internal port. Lastly point to the internal IP address of the mail server.
If you are referring to sending mail on port 587, the router is by default going to allow all outbound traffic out and will not block or filter ports.
Please let me know if this resolves your issue.
Thanks!
Dave

RVS 4000 DDOS Attacks

Hello!
Since I got a NAS System connected to my Network (one Month ago) I get attacked every day by DDOS attacks.
I Just set my NAS to the DMZ of my Router and opened 3 Ports for Service of QNAP.
I assume that at this moment I got scanned and thererfore the intrusions started.
For the last month I experianced nearly every Day Internet Connection Problems and the Router didn't respond anymore.
As I found last week a new Firmwar-Version I updated my router, enabled IPS and applied the latest Security file.
In the IPS Report I found loads of DDOS and Synflood attacks.
With IPS my Router Works and I got no more problems that my Inet access is corrupted BUT now I got the Problem that my
downloadrate sunk to 20Mbit from formerly 100Mbit.
I already wrote my ISP about this situation and want them to change my WAN-IP Adress but they to it only in very urgent cases.
Is there any option to operate the RVS 4000 save AND fast???

Sorry I seem to have no access to the documentation,
I get:
Forbidden File or Application
The file or application you are trying to access may require additional entitlement or you are trying to access a file with an invalid name. Additional entitlement levels are granted based on a users relationship with Cisco on a per-application basis.
If you feel you have reached this page in error, please try one of the following methods to locate your document:
If you are manually entering the URL into your browser location bar, be sure to include the file name of the page you are trying to access (file names typically end in .htm, .html or .shtml).
Use the Search feature located in the upper right section of this page.
Return to the Cisco.com Home or select a primary site area from the top navigation bar.
Consult with your Cisco Account Manager to confirm you have the appropriate entitlement to access this page.
If you would like to contact someone about this problem, please click on the Contacts & Feedback link below.
Back
Sorry to bother You again but I have to know in other words if I have extra costs for the IPS or just have to purchase the device like the RVS4000?!? I still do not understand what you mean with paid feature.
Sorry english is not my mothertounge.

RVS-4000 and Gmail error: 501 5.5.4 Unrecognized parameter

Hi,
My domain's MX record points to my RVS4000 router, which sends mail to our Exchange server. We get a ton of mail everyday, but some mail never makes it to the Exchange server.
If I send a simple gmail To: Joe He'll get the email just fine.
If I send a simple gmail To: Joe, Sally I will get the followiing error message:
Delivery to the following recipient failed permanently:
[email protected]
Technical details of permanent failure:
Google tried to
deliver your message, but it was rejected by the recipient domain. We recommend
contacting the other email provider for further information about the cause of
this error. The error that the other server returned was: 501 501 5.5.4 Unrecognized
parameter (state 15).
The email is not logged in Exchange or the spam software.
Some international email never arrives.
Is there a setting in the router that could be kicking out some of our email?
Thanks for your time.
Bruce

Thanks for your reply.
If all VPN routers from Linksys limited themselves to Class C addresses, why my configuration was accepeted?
Remote: 192.168.0.0 (255.255.0.0) => Class A?
Local: IP only 192.168.5.0
but not Local: 192.168.5.0; 255.255.255.0
Anyway I shall inquire the headquarter whether they can adjust their IP ranges "192.168.0.0; 255.255.0.0" to such as "192.168.2.0; 255.255.255.0"
thank you.
go4ecs

Laserjet 4000 wont print two-sided with windows 8.1

My Laserjet 4000T prints fine, one copy a time, duplex, whatever. When I put in a number for multiple copies, it prints only one copy, period. I am using drive PCL5.

My Laserjet 4000T prints fine, one copy a time, duplex, whatever. When I put in a number for multiple copies, it prints only one copy, period. I am using drive PCL5.

[RVS 4000] Setup secure ACL

I want to make an ACL that will allow the minum traffic. For example only; HTTP, DNS, SSH, FTP, TeamSpeak, Torrents.
This doesn't seem to be possible with the ACL on my Cisco Small Business RVS4000, I can only choose from predifined settings.
I can't setup my own source and destination IP's and ports. So that isn't very useful.
I might be wrong, so that's why I posted this threat. Is there a way to allow a mimimum traffic flow with the ACL?
When I only allow HTTP, DNS, etc. and deny the rest I can't use my TeamSpeak, MSN and Torrents anymore.
This is what I have now and which works, but isn't secure... Check the screenshot below. Below that is my iptables configuration, an ACL like that would be my idea of secure
#!/bin/sh
IPTABLES=/sbin/iptables
MODPROBE=/sbin/modprobe
INT_NET=192.168.1.32/28
LO=127.0.0.0/8
###   Flush existing rules and set chain policy setting to DROP   ###
echo "[+] Flushing existing iptables rules..."
$IPTABLES -F
$IPTABLES -F -t filter
$IPTABLES -X
$IPTABLES -P INPUT DROP
$IPTABLES -P OUTPUT DROP
$IPTABLES -P FORWARD DROP
###   KERNEL modifications   ###
echo "[+] Setting up KERNEL modifications..."
$MODPROBE ip_conntrack
# Disable IP forwarding
echo 0 > /proc/sys/net/ipv4/ip_forward
# Enable IP spoofing protection
for i in /proc/sys/net/ipv4/conf/*/rp_filter; do echo 1 > $i; done
# Protect against SYN flood attacks
echo 1 > /proc/sys/net/ipv4/tcp_syncookies
###   INPUT chain   ###
echo "[+] Setting up INPUT chain..."
### State tracking rules
$IPTABLES -A INPUT -m state --state INVALID -j LOG --log-prefix "DROP INVALID " --log-ip-options --log-tcp-options
$IPTABLES -A INPUT -m state --state INVALID -j DROP
$IPTABLES -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
### ACCEPT rules for allowing connections in
### Loopback
$IPTABLES -A INPUT -i lo -s $LO -d $LO -m state --state NEW -j ACCEPT
# SSH
$IPTABLES -A INPUT -p tcp --dport 22 --syn -m state --state NEW -m recent --set --name SSH
$IPTABLES -A INPUT -p tcp --dport 22 --syn -m state --state NEW -m recent --update --seconds 120 --hitcount 4 --rttl --name SSH -j DROP
$IPTABLES -A INPUT -p tcp --dport 22 --syn -m state --state NEW -j ACCEPT
### Anti-spoofing rules
$IPTABLES -A INPUT -d $INT_NET -j LOG --log-prefix "SPOOFED PACKET "
$IPTABLES -A INPUT -d $INT_NET -j DROP
### Default INPUT LOG rule
$IPTABLES -A INPUT ! -i lo -j LOG --log-prefix "DROP " --log-ip-options --log-tcp-options
###   OUTPUT chain   ###
echo "[+] Setting up OUTPUT chain..."
### State tracking rules
$IPTABLES -A OUTPUT -m state --state INVALID -j LOG --log-prefix "DROP INVALID " --log-ip-options --log-tcp-options
$IPTABLES -A OUTPUT -m state --state INVALID -j DROP
$IPTABLES -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
### ACCEPT rules for allowing connections out
# Loopback
$IPTABLES -A OUTPUT -o lo -s $LO -d $LO -m state --state NEW -j ACCEPT
# SSH
$IPTABLES -A OUTPUT -p tcp --dport 22 --syn -m state --state NEW -j ACCEPT
# Whois
$IPTABLES -A OUTPUT -p tcp --dport 43 --syn -m state --state NEW -j ACCEPT
# DNS
$IPTABLES -A OUTPUT -p udp --dport 53 -m state --state NEW -j ACCEPT
# HTTP
$IPTABLES -A OUTPUT -p tcp --dport 80 --syn -m state --state NEW -j ACCEPT
# NTP
$IPTABLES -A OUTPUT -p udp --dport 123 -m state --state NEW -j ACCEPT
# HTTPS
$IPTABLES -A OUTPUT -p tcp --dport 443 --syn -m state --state NEW -j ACCEPT
# MSN
$IPTABLES -A OUTPUT -p tcp --dport 1863 --syn -m state --state NEW -j ACCEPT
# RWhois
$IPTABLES -A OUTPUT -p tcp --dport 4321 --syn -m state --state NEW -j ACCEPT
# Google Talk
$IPTABLES -A OUTPUT -p tcp --dport 5222 --syn -m state --state NEW -j ACCEPT
# KTorrent
$IPTABLES -A OUTPUT -p tcp --dport 6881 --syn -m state --state NEW -j ACCEPT
$IPTABLES -A OUTPUT -p udp --dport 6881 -m state --state NEW -j ACCEPT
$IPTABLES -A OUTPUT -p tcp --dport 4444 --syn -m state --state NEW -j ACCEPT
$IPTABLES -A OUTPUT -p udp --dport 4444 -m state --state NEW -j ACCEPT
# IRC
#$IPTABLES -A OUTPUT -p tcp --dport 6667 -m state --state NEW -j ACCEPT
# Teamspeak Voice
$IPTABLES -A OUTPUT -p udp --dport 9987 -m state --state NEW -j ACCEPT
# Teamspeak Serverquery
$IPTABLES -A OUTPUT -p tcp --dport 10011 --syn -m state --state NEW -j ACCEPT
# Teamspeak Update Server
#$IPTABLES -A OUTPUT -p udp --dport 17384 -m state --state NEW -j ACCEPT
# Teamspeak Filetransfer
$IPTABLES -A OUTPUT -p tcp --dport 30033 --syn -m state --state NEW -j ACCEPT
# Ping
$IPTABLES -A OUTPUT -s $INT_NET -p icmp --icmp-type echo-request -j ACCEPT
### Default OUTPUT LOG rule
$IPTABLES -A OUTPUT ! -o lo -j LOG --log-prefix "DROP " --log-ip-options --log-tcp-options
###   FORWARD chain   ###
echo "[+] Setting up FORWARD chain..."
### State tracking rules
$IPTABLES -A FORWARD -m state --state INVALID -j LOG --log-prefix "DROP INVALID " --log-ip-options --log-tcp-options
$IPTABLES -A FORWARD -m state --state INVALID -j DROP
$IPTABLES -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
### Anti-spoofing rules
$IPTABLES -A FORWARD -d $INT_NET -j LOG --log-prefix "SPOOFED PACKET "
$IPTABLES -A FORWARD -d $INT_NET -j DROP
### Default FORWARD LOG rule
$IPTABLES -A FORWARD ! -i lo -j LOG --log-prefix "DROP " --log-ip-options --log-tcp-options

I explored that feature, but it doesn't feel like it's related to the rules I apply. For example I have these 3 rules now, when I go into that manager and I will define a port for SSH for example then that port is also in the manager for 'deny all'. So what's the clue? Do I have to give the ACL and the port definition the same name and then only those two are related to eachother? Because at this point the two menu's don't feel related.
PS: Thanks rshao

Rvs 4000 dynamic ip and static dns

hello
I just want to know if its possible to use static dns (those of opendns) when my internet provider connect me through dynamic IP?
i am using the last firmware 1.3.0.5
thank you for your help ?
bolbix

With this router model, there is not the option to use custom dns on the wan if your getting your ip address dynamically. In order to implement the static dns you would need to implement a static ip address on this router. However any of the rv042, rv082 and rv016 routers will allow that function. Hopefully this helps you out Jerbol.

RVS 4000 wont vpn

Similar Messages

Maybe you are looking for