Tarantella and Port Forwarding

Hi,
I just installed a Tarantella SGD EE 4.0 Server which will be
established in a firewalled and nat environment.
As the ports 80,443,3144 and 5307 are already captured in this
environment there will be port forwarding as follows:
30080 -> 80
30443 -> 443
33144 -> 3144
35307 -> 5307
When I now try to reach the Server with a browser and
http://firewall:30080 I'll see the 'normal' screen "Welcome to Your
Secure Global Desktop Web Server".
Trying to login fails with no significant reason in /opt/tarntella/var/log/.
Next what I did was to scan the machine with nmap, this is the result:
tarantella:~ # nmap localhost
Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2005-04-07 16:22
CEST
Interesting ports on localhost (127.0.0.1):
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
22/tcp open ssh
25/tcp open smtp
80/tcp open http
111/tcp open rpcbind
427/tcp open svrloc
631/tcp open ipp
1023/tcp open netvenuechat
5001/tcp open commplex-link
8009/tcp open ajp13
Nmap run completed -- 1 IP address (1 host up) scanned in 1.152 seconds
So far, security isn't configured, so its cear, that 443 and 5307 don't
appear, but what about 3144, why isnt't it open?
Where do I have to check what went wrong?
Thanks,
Jens

I don't think this is a Mavericks issue. Read the instructions that came with your camera. Is the camera running correctly? Is port forwarding in your router set up correctly? Does your ISP allow incomming connections to port 80? What ip address are you using from the outside world, you can't use your LAN ip address? The security/camera system must be running some type of web server to allow access. Is this running correctly? Does the camera software work with Mavericks or is it designed for older OSX versions?

Similar Messages

Xbox 360/one problem and port forwarding

For a couple months now (since I got my AirPort Extreme) I have not been able to connect to a certain friend on xbox. I can connect to anybody else however. The only way we can (kind of) connect is if somebody else is host and we both connect to him.
My NAT type is Moderate. When I try to test my connection on my xbox it says that I can connect but I am limited in matchmaking (this is joining games and using voice chat, which is the problem named above for my particular friend). The xbox shows the error and suggests that I enable UPnP or open the port 3074.
The problem is that I have already have! I gave my xbox a static IP and forwarded the port 3074 to that IP.
(I have also tried forwarding all the ports that xbox live uses to the xbox. These being:
Port 88 (UDP)
Port 3074 (UDP and TCP)
Port 53 (UDP and TCP)
Port 80 (TCP)
as found on the xbox website... https://support.xbox.com/en-US/xbox-360/networking/network-ports-used-xbox-live
I made sure to put them in the right text boxes for UDP and TCP so that is not the problem either.)
I know that the AirPort Extreme does not support UPnP but does have a similar thing called NAT Port Mapping Protocol which was already enabled. (I tried all possibilities of enabling/disabling NAT...Protocol and port forwarding/not port forwarding.) --- This is not the solution as I see it
In short: My xbox tells me to open port 3074. I already have. It still tells me to open it and still won't work.
I posted this on the apple discussion page (instead of the xbox discussion page) because I know that it's not an xbox problem. When I had my old linksys router it worked perfectly.

I have this exact same question and problem. I know this doesn't help, but would appreciate any updated information if you find an answer. I'll keep working on this also and let you know if I find an anwer.

Are "Back to my MAC" and "Port Forwarding" mutually exclusive?

I have been using APExtreme and Port Forwarding successfully for several weeks now. The PF is to allow access to game players on a PC which acts as a server on the web. All Good.
One more thing, I have a ISP provided wireless modem/router to talk to the cable and the world. It seems to work either bridged or un-bridged.
I have disabled the wireless on the ISP's modem/router. (Actually the ISP's device doesn't hold a candle to the APE.)
Still all good.
So the firewall is on in the APExtreme and none on the modem router, and I have a port defined for my gamers to get access to my server in the APExtreme.
I now want to implement Back to my MAC on my MBP and my other Apple devices. I believe these use iCloud for which I have an account and it seems to be working well with my iPhone.
In Properties, when I select BtmM, iCloud says communications will be slow if I have port forwarding on. Also I will not be able to use the router function in my Modem/router.
I'd really like to have the modem/router firewall up, and do the port forwarding there, but the BtmM will likely not get through.
So what does anyone suggest?
Can I use BtmM and port forwarding without too much degradation?
Please advise.
Thanks
Barry

To best answer your question on whether the two are "mutually exclusive," let take a look at how Back to My Mac (BTMM) basically works.
BTMM - General Requirements
OS X Leopard 10.7.3+
Active iCloud account. Each Mac & the AirPort router, that will be relying on BTMM, needs to be configured with the same account.
A publicly reachable IP address for your router.
A router that supports either NAT-PMP or UPnP. For AirPorts, be sure it is running 7.6.1+ firmware.
BTMM uses TCP port 5354 and UDP ports 4500 & 5353 for communications.
BTMM - Basic Communication Flow
For a computer connected to the Internet via a router, BTMM "asks" the router for its configuration information. For a router, like your AirPort, that uses NAT-PMP, BTMM will ask the router to assign arbitrary public ports. In turn, the router will provide these port assignments (& the router's Public IP address) back to BTMM.
BTMM then sends this information to the iCloud account. In background iCloud updates a special set of DNS entries to be used by BTMM. These entries are then made available to all BTMM clients using your iCloud account. When a computer, with BTMM enabled, uses your iCloud credentials, it automatically retrieves a list of all other computers/routers that are registered with the same account. All these devices should then appear under the SHARED section of the Finder.
When attempting to connect to a remote computer (or router), BTMM creates a secure connection to that remote device using the information from the iCloud account.
Once the connection is established, the devices can then communicate with each other.
So potentially, unless you are using Port Mapping for any of the ports BTMM uses, they should not conflict.

Trouble with bridge mode and port forwarding

I have a Westell Model 6100F DSL modem in bridge mode into my network and I'm having trouble forwarding ports. Is there any general guidance available to do this. I have set many of my friends networks up to allow port forwarding but all have been on other service providers, mainly cable. (my experience) My network is the only one I have had trouble with.
Basically, my question is, while in bridge mode, does the modem forward all incoming traffic to my NAT router or do I need to apply special port forwarding settings in the modem to allow this?
If bridge mode is the reason I cannot forward the ports, can someone explain how to set the WEstell 6100F back to factory defaults so I can start over.
Any other suggestions?
Thanks in advance.
Paul

If bridge mode is set up correctly, your router should be holding the Public IP address (basically not something that is a 192.168 address) as shown at http://www.whatismyip.com/ and compared against what IP your router has.
If your router has the public IP, all problems lie with either your router or your PC's firewall and configuration. I'd check out portforward.com for some guides on forwarding ports for your router or poarticular application if you need some additional help.
========
The first to bring me 1Gbps Fiber for $30/m wins!

Powerbook G4 with 10.4.10 and port forwarding

Hey guys, so this isn't really a problem, just more of a seeking of answers, since I fixed my own problem. Just looking for some explanations.
So, here the story goes. I am on my mac, seeding my friend's semi-professional indie movie on bit-torrent using Transmission (an old-ish version), when I realize I need to port forward my ports for best seeding speed. Well, I port forward my ports, and then decide 30 minutes later I would re-insert the memory the Apple service guys took out of my powerbook when I got it serviced a few weeks ago (problem happened without my memory in it, so I decided it was not the memory).
I turn back on my computer, everything appears to be good, and then I open iChat and Transmission. Neither program can connect to the internet. I was only able to connect with Xbox Live Friends, Safari (only not https sites), and itunes music store. I spend two hours uninstalling no-longer used stuff like maxtor managers, and the like. I also took out the memory I put back in the computer. (Has manufacturer installed 1gb, and I installed a 2nd 1gb chip)
I finally have no other clue, and decide to just check every possible thing I can in activity monitor. It was then that I noticed that, without anything but activity monitor and finder open, I was sending over 50KBps, and receiving over 30! I decided, as a last resort, to turn off port forwarding, and magically, my PowerBook is working again. I was only forwarding a single port, and had the firewall was set to on.
Anybody have any clue as to what in the world was happening? By the way, my powerbook is now sitting with Finder, Safari, iChat, and iTunes open and is sending and receiving 0 bytes per second. (although the 2nd gig isn't in yet, going to go do that! But I doubt it wont work, it worked for 6 months straight...)
Message was edited by: Johan Henkens

Hi Johan,
Sometimes after changing Memory configurations you need to do a PMU reet, 4 PRAM Restets in a row, or and NVRAM reset -all.
I always start my attempts at a resolution with Applejack...
http://www.versiontracker.com/dyn/moreinfo/macosx/19596
After installing, Reboot holding down CMD+s, then when the prompt shows, type in...
applejack AUTO
Then let it do all 5 of it's things.
At least if it doesn't fix it, it'll eliminate a few questions.
Besides, once you really, really need it... you can't install it!
Check Activety Monitor for mDNSResponder, (Bonjour), it can be quite chatty, the other most common Chatty thing is a bad Routewr/Cable/what have you.

No devices in DMZ drop down and PORT forward does ...

Hi,
We have just purchased B.T broadband with the new home hub, we have set up our hub/router the same as our old one with the correct ports forwarded for exchange to work and remote web space, it all works internally accessing the address but nothing works externally, emails don't get through etc..
Any ideas?
Also why does my device not appear in the DMZ drop down?
Much appreciated any help, thanks a lot

The home hub firewall will offer no protection to a device in the DMZ, as all incoming ports will be forwarded to the device.
All you will be left with is the normal NAT function, which is needed to provide a range of local IP adresses.
If you look at my security page, you will see there is a website you can use to find open ports.
You may find it better to use a router which supports local loopback.
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

UTorrent, Internet Sharing and Port Forwarding: Horrid Trifecta

Every good question has a couple of miles of back story, so here it comes:
I bought a Windows PC recently, and one of the first programs I downloaded was uTorrent. I have an iBook G4 running 10.4.8, but I have no wireless router, so I thought I would use internet sharing to get my new laptop off the ground. Everything connects great, internet sharing is wonderful on the web, but then I use uTorrent and notice that I'm uploading at nearly 3 times the speed I'm downloading, even when I only have 12kb of a file. I then notice the small icon at the bottom of the application that looks like a warning flag that my computer is confused, and I figure out that the problem is my new laptop has no ears, or rather, no listening port through which uTorrent can increase the speed of my DOWNloads. Further searching reveals that the traffic on the appropriate port is not getting through, hence I try to figure out how to manipulate internet sharing into forwarding the appropriate port range. I found Brickhouse, or as it is now known, Flying Buttress, but the program is remarkably confusing (to be perfectly honest, I'm not that bright). I cannot get FB to forward the port, no matter how hard I tried (every time I clicked Start IP Sharing, the it wouldn't work). So I can't use FB. I thought I would be clever and create a network on my Windows PC and share it with my iBook, but apparently my iBook refuses to share the Windows internet.
So now I am stuck trying to figure out how to get this Windows PC to receive traffic on TCP/UDP ports 10000-65535 through my Mac. To be honest, I really thought that the Mac would easily be able to forward the ports (is this in store for Leopard?), and I was a little disappointed the whole thing was so frustrating, but then I tried to setup an ad-hoc network on the Windows PC and realized that my Mac is still FAR easier to use, despite is insufficiencies.
So, long story short, I need help forwarding ports through internet sharing. If you can help me use FB, that's great, but to be honest, I would like a cleaner solution if possible. So my question is: How do I get my Mac to share port traffic with Windows if it is running internet sharing?
iBook G4 Mac OS X (10.4.8) Other Computer: Windows XP, other specs available on request

I was hoping more for a permanent solution that doesn't cost $100. Did I mention I'm in China? That program seems great and all, but I have the same technical difficulties I've had with FB. I can get the thing running and still have an internet connection on my machine, however, the port mapping or port forwarding or whatever you wish to call it doesn't actually work. These programs make it very difficult to understand what's going on; I checked the IP Address on my windows machine and used it as the actual address for the port I wanted to forward, I applied the settings and absolutely nothing changed on the windows machine. I went to portforward.com to check if the port was forwarded properly and still no response. This will sound stupid, but when I hook up the windows machine to the router through ethernet, it works perfectly, no forwarding required, so it is essentially my mac that is blocking or absorbing the intended traffic, but if I hook up the windows machine to the router, I have no internet for my Mac (I'm not sure if that's a problem with my Mac or with ICS). Can you explain to me how to use this program to forward ONE port, and ONLY forward one port (or a range of ports would be even better) without all of its inane firewalling that blocks all the internet traffic? Or am I just hopeless on this issue?

WRT54G2 v1.5 and Port Forwarding.

For some reason my WRT54G2 is not forwarding ports correctly. I have a development server running Windows Server 2008 and IIS behind the WRT with the correct external ports forwarded to the corresponding internal ports however any outside connection to these ports times out. To knock the firmware as being the issue out I downloaded the newest listed on the support site (1.5.00.019) and performed the 30/30/30 reset. Still unable to see these ports open externally. Finally out of frustration I dusted off my old router and opened up the ports to my machine and was able to hit the ports right away. Is this an ongoing issue or anyone know of a surefire fix for this?

Comcast (business with static IP) is the ISP. My WAN IP is correct and I'm able to access the internet just fine on the server and wireless clients connected to it. As far as ports open I currently have four; two of the ports are standard HTTP, one is for SSL, and one is for VPN. All of which point to the same development server. And as stated before I took my old router (WRT54g v2.0) and set it up with virtually the same settings and have been able to communicate with the server remotely.

Help with running Echolink ham radio software and port forwarding

I recently had to replace the router on this system. The old one a D-Link 624 worked fine with the Echolink program. The new router a Attiontec M1424-WR will not work with this application. The ports have been forwarded correctly however, it is unable to make a solid connection. Any assistance will be most appreciated. Thanks in advance. Bill

The problem has been resolved. Although the Ports were forwarded correctly by the Port Forward Program, The router had to be set to operate in the DMZ area. This action was not accomplished by the Port Forward Program. All is working fine now.

WRT610N - Need to Set Static IP for Server and Port Forwarding

Does anyone know how I can assign a static IP for my Home Media Server in the WRT610N router? I need to do this because of the settings I need to set for the server in the Single Port Forwarding.
Thanks in advance!

Never mind. I got it.

Howto: Zones in private subnets using ipfilter's NAT and Port forwarding

This setup supports the following features:
* Requires 1 Network interface total.
* Supports 1 or more public ips.
* Allows Zone to Zone private network traffic.
* Allows internet access from the global zones.
* Allows direct (via ipfilter) internet access to ports in non-global zones.
(change networks to suit your needs, the number of public and private ip was lowered to simplify this doc)
Network setup:
iprb0 65.38.103.1/24
defaultrouter 65.38.103.254
iprb0:1 192.168.1.1/24 (in global zone)
Create a zone on iprb0 with an ip of 192.168.1.2
### Example /etc/ipf/ipnat.conf
# forward from a public port to a private zone port
rdr iprb0 65.38.103.1/32 port 2222 -> 192.168.1.2 port 22
# force outbound zone traffic thru a certain ip address
# required for mail servers because of reverse lookup
map iprb0 192.168.1.2/32 -> 65.38.103.1/32 proxy port ftp ftp/tcp
map iprb0 192.168.1.2/32 -> 65.38.103.1/32 portmap tcp/udp auto
map iprb0 192.168.1.2/32 -> 65.38.103.1
# allow any 192.168.1.x zone to use the internet
map iprb0 192.168.1.0/24 -> 0/32 proxy port ftp ftp/tcp
map iprb0 192.168.1.0/24 -> 0/32 portmap tcp/udp auto
map iprb0 192.168.1.0/24 -> 0/32For testing purposes you can leave /etc/ipf/ipf.conf empty.
Be aware the you must "svcadm disable ipfilter; svcadm enable ipfilter" to reload rules and the rules stay loaded if they are just disabled(bug).
Zones can't modify their routes and inherit the default routes of the global zone. Because of this we have to trick the non-global zones into using a router that doesn't exist.
Create /etc/init.d/zone_route_hack
Link this file to /etc/rc3.d/S99zone_route_hack.
#/bin/sh
# based on information found at
# http://blogs.sun.com/roller/page/edp?entry=using_branded_zones_on_a
# http://forum.sun.com/jive/thread.jspa?threadID=75669&messageID=275741
fake_router=192.168.1.254
public_net=65.38.103.0
router=`netstat -rn | grep default | grep -v " $fake_router " | nawk '{print $2}'`
# send some data to the real network router so we look up it's arp address
ping -sn $router 1 1 >/dev/null
# record the arp address of the real router
router_arp=`arp $router | nawk '{print $4}'`
# delete any existing arp address entry for our fake private subnet router
arp -d $fake_router >/dev/null
# assign the real routers arp address to our fake private subnet router
arp -s $fake_router $router_arp
# route our private subnet through our fake private subnet router
route add default $fake_router
# Can't create this route until the zone/interface are loaded
# Adjust this based on your hardware and number of zones
sleep 300
# Duplicate this line for every non-global zone with a private ip that
# will have ipfilter rdr (redirects) pointing to it
route add -net $public_net 192.168.1.2 -ifaceNow we have both public and private ip addresses on our one iprb0 interface. If we'd really like our private zone network to really be private we don't want any non-NAT'ed 192.168.1.x traffic leaving the interface. Since ipfilter can't block traffic between zones because they use loopbacks we can just block the 192.168.1.x traffic and the zones can still talk.
The following /etc/ipf/ipf.conf defaults to deny.
# ipf.conf
# IP Filter rules to be loaded during startup
# See ipf(4) manpage for more information on
# IP Filter rules syntax.
# INCOMING DEFAULT DENY
block in all
block return-rst in proto tcp all
# two open ports one of which is redirected in ipnat.conf
pass in quick on iprb0 proto tcp from any to any port = 22 flags S keep state keep frags
pass in quick on iprb0 proto tcp from any to any port = 2222 flags S keep state keep frags
# INCOMING PING
pass in quick on iprb0 proto icmp from any to 65.38.103.0/24 icmp-type 8 keep state
# INCOMING GLOBAL ZONE UNIX TRACEROUTE FIX PART 1
#pass in quick on iprb0 proto udp from any to 65.38.103.0/24 keep state
# OUTGOING RULES
block out all
# ALL INTERNAL TRAFFIC STAYS INTERNAL (Zones use non-filtered loopback)
# remove/edit as needed to actually talk to local private physical networks
block out quick from any to 192.168.0.0/16
block out quick from any to 172.16.0.0/12
block out quick from any to 10.0.0.0/8
block out quick from any to 0.0.0.0/8
block out quick from any to 127.0.0.0/8
block out quick from any to 169.254.0.0/16
block out quick from any to 192.0.2.0/24
block out quick from any to 204.152.64.0/23
block out quick from any to 224.0.0.0/3
# Allow traffic out the public interface on the public address
pass out quick on iprb0 from 65.38.103.1/32 to any flags S keep state keep frags
# OUTGOING PING
pass out quick on iprb0 proto icmp from 65.38.103.1/32 to any icmp-type 8 keep state
# Allow traffic out the public interface on the private address (needs nat and router arp hack)
pass out quick on iprb0 from 192.168.1.0/24 to any flags S keep state keep frags
# OUTGOING PING
pass out quick on iprb0 proto icmp from 192.168.1.0/24 to any icmp-type 8 keep state
# INCOMING TRACEROUTE FIX PART 2
#pass out quick on iprb0 proto icmp from 65.38.103.1/32 to any icmp-type 3 keep stateIf you want incoming and outgoing internet in your zones it is easier if you just give them public ips and setup a firewall in the global zone. If you have limited public ip address(I'm setting up a colocation 1u server) then you might take this approach. One of the best things about doing thing this way is that any software configured in the non-global zones will never be configured to listen on an ip address that might change if you change public ips.

Instead of using the script as a legacy_run script, set it up in SMF.
First create the file /var/svc/manifest/system/ip-route-hack.xml with
the following
---Start---
<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM
"/usr/share/lib/xml/dtd/service_bundle.dtd.1">

<service_bundle type='manifest' name='NATtrans:ip-route-hack'>
<service
name='system/ip-route-hack'
type='service'
version='1'>
<create_default_instance enabled='true' />
<single_instance />
<dependency
name='physical'
grouping='require_all'
type='service'
restart_on='none'>
<service_fmri value='svc:/network/physical:default' />
</dependency>
<dependency
name='loopback'
grouping='require_all'
type='service'
restart_on='none'>
<service_fmri value='svc:/network/loopback:default' />
</dependency>
<exec_method
type='method'
name='start'
exec='/lib/svc/method/svc-ip-route-hack start'
timeout_seconds='0' />
<property_group name='startd' type='framework'>
<propval name='duration' type='astring'
value='transient' />
</property_group>
<stability value='Unstable' />
<template>
<common_name>
<loctext xml:lang='C'>
Hack to allow zone to NAT translate.
</loctext>
</common_name>
<documentation>
<manpage
title='zones'
section='1M'
manpath='/usr/share/man' />
</documentation>
</template>
</service>
</service_bundle>
---End---
then modify /var/svc/manfiest/system/zones.xml and add the following
dependancy
---Start---
<dependency
name='inet-ip-route-hack'
type='service'
grouping='require_all'
restart_on='none'>
<service_fmri value='svc:/system/ip-route-hack' />
</dependency>
---End---
Finally create the file /lib/svc/method/svc-ip-route-hack with the
contents of S99zone_route_hack, minus the sleep timer (perms 0755). Run
'svccfg import /var/svc/manifest/system/ip-route-hack.xml' and 'svccfg
import /var/svc/manifest/system/zones.xml'.
This will guarantee that ip-route-hack is run before zones are started,
but after the interfaces are brought on line. It is worth noting that
zones.xml may get overwritten during a patch, so if it suddenly stops
working, that could be why.

WRT54G Setting static ip and port forwarding for Xbox360

1)This is my first post and I'm a little new at this. I have a WRT54G v5 router with the latest firmware update. I have the proper ports fowarded that I found on this site. I basically want full priority to my xbox360 because I have been having some lag issues and dropping out of rooms, especially when someone is on the computer. I set a static ip on the xbox, I just picked 192.168.1.36 (Is that an ok #?).
2)I have everything hardwired so I disabled 'wireless access web" under administration and I also disabled "wireless network mode" under the "Wireless" section. Is this correct or ok?? I don't want my neighbors or anything wireless accessing my router, will that do the trick?
3)I'm looking at the first page you see at the linksys config page (under setup) and I see a section that says
Static DNS 1:xxx.xxx.xxx.xxx
Static DNS 2:xxx.xxx.xxx.xxx
Static DNS 3:xxx.xxx.xxx.xxx
My question is do I need to put the static ip that I assigned to my xbox in one of these static DNS entry spots??
4)Under: Applications & Gaming>QoS I set Ethernet port 4 (the one my xbox is on) to high priority. Is that all I need to do to get priority to the xbox over the computer? Or do I need to enter something under "Device Priority" such as device name, mac address, etc.? And do I need to enter something under "Application priority" such as: Application Name, Optimize Gaming Applications, Priority, and Speciific port #, etc.??
5) Should I disable UPnP?
It's kind of a lot of questions but I really want to understand this fully, any help is greatly appreciated.Thanks alot!
Message Edited by CJ427 on 01-08-2009 10:34 AM
Message Edited by CJ427 on 01-08-2009 10:37 AM
Message Edited by CJ427 on 01-08-2009 10:38 AM
Message Edited by CJ427 on 01-08-2009 10:40 AM

If your XBOX is Wireless , then you need to login to your Router with the Default IP : 192.168.1.1 by opening up a Web Browser.
Then change the Wireless Settings of your Router SSID , Channel : 11, Security : WEP Or WPA Persoanl.
Click on "Applications and Gaming" tab and then click on "Port Range Forwarding" subtab...
1) On the first line in Application box type in ABC, in the start box type in 53 and End box type in 53, leave the protocol as both and under ip address type in 192.168.1.20 and check the enable box...
2) On the second line in Application box type in PQR, in the start box type in 3074 and End box type in 3074, leave the protocol as both and under ip address type in 192.168.1.20 and check the enable box...
3) On the third line in Application box type in XYZ, in the start box type in 88 and End box type in 88, leave the protocol as both and under ip address type in 192.168.1.20 and check the enable box and click on Save Settings...
4) Once you return to the set up page click on the Security tab and uncheck Block Anonymous Internet Requests and click on Save Settings...
5) Click on set-up and change the MTU Size to 1452 and click Save Settings...
6) Goto the XBox Network Settings and IP Address Settings and select manual IP Settings and assign the following on your Xbox
IP Address :- 192.168.1.20, Subnet Mask :- 255.255.255.0, Default Gateway :- 192.168.1.1...
7) Also assign the DNS Addresses on the Xbox
Primary dns :- 4.2.2.2...Secondary dns :- 192.168.1.1..
8) Turn off your modem, router, and Xbox...Wait for a minute...
9) Plug the modem power first, wait for another minute and plug the router power cable, wait another minute and turn on the Xbox and test it...it will connect...

WAG54G V.2 and port forwarding

I currently only have 6 single forwarding slots left and no range forwarding slots left.
Anyway to get more?
I don't want to move my server into DMZ.
tnx for the help.
FYI: Firmware Version: 1.00.19 - no update available on site.

that's a limitation.....try triggering the ports instead of forwarding....

Verification on the asa 8.4 5505 about PAT and port forwarding.

hi all
ihae topology as blow :
inside------------eth0/1-------asa---eth0/7---------outside-------------------internet
my goal is
i want to make pat of inside network (10.66.12.0/24) with outside interface when it request the internet
also ,
i need port forwaridng to following hosts :
10.66.12.122 to 3389
10.66.12.249 to http
10.66.12.249 to https
10.66.12.249 to citrix
=============================================================
just m i need somebody to check my config it is correct
=============================================================
i have asda 5505 with :
ASAAAAA(config)# sh version
Cisco Adaptive Security Appliance Software Version 8.4(2)
Device Manager Version 6.4(5)
Compiled on Wed 15-Jun-11 18:17 by builders
System image file is "disk0:/asa842-k8.bin"
Config file at boot was "startup-config"
ASAAAAA up 1 hour 32 mins
Hardware:   ASA5505, 512 MB RAM, CPU Geode 500 MHz
Internal ATA Compact Flash, 128MB
BIOS Flash M50FW016 @ 0xfff00000, 2048KB
Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)
                             Boot microcode        : CN1000-MC-BOOT-2.00
                             SSL/IKE microcode     : CNLite-MC-SSLm-PLUS-2.03
                             IPSec microcode       : CNlite-MC-IPSECm-MAIN-2.06
                             Number of accelerators: 1
0: Int: Internal-Data0/0    : address is d48c.b597.ce35, irq 11
1: Ext: Ethernet0/0         : address is d48c.b597.ce2d, irq 255
2: Ext: Ethernet0/1         : address is d48c.b597.ce2e, irq 255
3: Ext: Ethernet0/2         : address is d48c.b597.ce2f, irq 255
4: Ext: Ethernet0/3         : address is d48c.b597.ce30, irq 255
5: Ext: Ethernet0/4         : address is d48c.b597.ce31, irq 255
6: Ext: Ethernet0/5         : address is d48c.b597.ce32, irq 255
7: Ext: Ethernet0/6         : address is d48c.b597.ce33, irq 255
8: Ext: Ethernet0/7         : address is d48c.b597.ce34, irq 255
9: Int: Internal-Data0/1    : address is 0000.0003.0002, irq 255
10: Int: Not used            : irq 255
11: Int: Not used            : irq 255
Licensed features for this platform:
Maximum Physical Interfaces       : 8              perpetual
VLANs                             : 3              DMZ Restricted
Dual ISPs                         : Disabled       perpetual
VLAN Trunk Ports                  : 0              perpetual
Inside Hosts                      : 50             perpetual
Failover                          : Disabled       perpetual
VPN-DES                           : Enabled        perpetual
VPN-3DES-AES                      : Enabled        perpetual
AnyConnect Premium Peers          : 2              perpetual
AnyConnect Essentials             : Disabled       perpetual
Other VPN Peers                   : 10             perpetual
Total VPN Peers                   : 25             perpetual
Shared License                    : Disabled       perpetual
AnyConnect for Mobile             : Disabled       perpetual
AnyConnect for Cisco VPN Phone    : Disabled       perpetual
Advanced Endpoint Assessment      : Disabled       perpetual
UC Phone Proxy Sessions           : 2              perpetual
Total UC Proxy Sessions           : 2              perpetual
Botnet Traffic Filter             : Disabled       perpetual
Intercompany Media Engine         : Disabled       perpetual
This platform has a Base license.
Serial Number: JMX162740GP
Running Permanent Activation Key: 0x6801f547 0xe81c57c4 0x20f339f4 0xaaf48040 0x
480e2fbc
Configuration register is 0x100003
Configuration last modified by enable_15 at 23:58:15.999 UTC Wed Jan 22 2014
ASAAAAA(config)# sh run
: Saved
ASA Version 8.4(2)
hostname ASAAAAA
enable password ffffCCSH encrypted
passwd 2KFfffff2KYOU encrypted
names
interface Ethernet0/0
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
switchport access vlan 2
interface Vlan1
nameif ins
security-level 100
ip address 10.66.12.1 255.255.255.0
interface Vlan2
nameif outside
security-level 50
ip address x.x.55.34 255.255.255.248
boot system disk0:/asa842-k8.bin
ftp mode passive
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network obj-0.0.0.0
host 0.0.0.0
object network localsubnet
subnet 10.66.12.0 255.255.255.0
description localsubnet
object network HTTP-Host
host 10.66.12.249
description web server
object network HTTPS-HOST
host 10.66.12.249
description Https
object network RDP-Host
host 10.66.12.122
description RDP host
object network citrix-host
host 10.66.12.249
description citrix
object service rdp
service tcp destination eq 3389
object service https
service tcp destination eq https
object service citrix
service tcp destination eq 2598
object service http
service tcp destination eq www
object-group network RDP-REDIRECT
object-group network HTTP-REDIRECT
object-group network HTTPS-REDIRECT
object-group network CITRIX-ICA-HDX-REDIRECTION
object-group network CITRIX-ICA-SESSION-RELIABILITY-REDIRECTION
object-group service CITRIX-ICA-HDX
object-group service CITRIX-SR
object-group service RDP
object-group network MY-insideNET
network-object 10.66.12.0 255.255.255.0
object-group service DM_INLINE_SERVICE_1
service-object object citrix
service-object object http
service-object object https
service-object object rdp
access-list outside_access_in extended permit object-group DM_INLINE_SERVICE_1 a
ny interface outside
pager lines 24
mtu ins 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-645.bin
no asdm history enable
arp timeout 14400
nat (ins,outside) source static RDP-Host interface service rdp rdp
nat (ins,outside) source static HTTP-Host interface service http http
nat (ins,outside) source static citrix-host interface service citrix citrix
object network obj_any
nat (ins,outside) dynamic obj-0.0.0.0
object network localsubnet
nat (ins,outside) dynamic interface
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 x.x.55.33 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
aaa authentication http console LOCAL
aaa authentication ssh console LOCAL
aaa authentication telnet console LOCAL
http server enable
http 10.66.12.0 255.255.255.0 ins
http 0.0.0.0 0.0.0.0 outside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ca trustpoint _SmartCallHome_ServerCA
crl configure
crypto ca certificate chain _SmartCallHome_ServerCA
certificate ca 6ecc7aa5a7032009b8cebcf4e952d491
    308205ec 308204d4 a0030201 0202106e cc7aa5a7 032009b8 cebcf4e9 52d49130
    0d06092a 864886f7 0d010105 05003081 ca310b30 09060355 04061302 55533117
    30150603 55040a13 0e566572 69536967 6e2c2049 6e632e31 1f301d06 0355040b
    13165665 72695369 676e2054 72757374 204e6574 776f726b 313a3038 06035504
    0b133128 63292032 30303620 56657269 5369676e 2c20496e 632e202d 20466f72
    20617574 686f7269 7a656420 75736520 6f6e6c79 31453043 06035504 03133c56
    65726953 69676e20 436c6173 73203320 5075626c 69632050 72696d61 72792043
    65727469 66696361 74696f6e 20417574 686f7269 7479202d 20473530 1e170d31
    30303230 38303030 3030305a 170d3230 30323037 32333539 35395a30 81b5310b
    30090603 55040613 02555331 17301506 0355040a 130e5665 72695369 676e2c20
    496e632e 311f301d 06035504 0b131656 65726953 69676e20 54727573 74204e65
    74776f72 6b313b30 39060355 040b1332 5465726d 73206f66 20757365 20617420
    68747470 733a2f2f 7777772e 76657269 7369676e 2e636f6d 2f727061 20286329
    3130312f 302d0603 55040313 26566572 69536967 6e20436c 61737320 33205365
    63757265 20536572 76657220 4341202d 20473330 82012230 0d06092a 864886f7
    0d010101 05000382 010f0030 82010a02 82010100 b187841f c20c45f5 bcab2597
    a7ada23e 9cbaf6c1 39b88bca c2ac56c6 e5bb658e 444f4dce 6fed094a d4af4e10
    9c688b2e 957b899b 13cae234 34c1f35b f3497b62 83488174 d188786c 0253f9bc
    7f432657 5833833b 330a17b0 d04e9124 ad867d64 12dc744a 34a11d0a ea961d0b
    15fca34b 3bce6388 d0f82d0c 948610ca b69a3dca eb379c00 48358629 5078e845
    63cd1941 4ff595ec 7b98d4c4 71b350be 28b38fa0 b9539cf5 ca2c23a9 fd1406e8
    18b49ae8 3c6e81fd e4cd3536 b351d369 ec12ba56 6e6f9b57 c58b14e7 0ec79ced
    4a546ac9 4dc5bf11 b1ae1c67 81cb4455 33997f24 9b3f5345 7f861af3 3cfa6d7f
    81f5b84a d3f58537 1cb5a6d0 09e4187b 384efa0f 02030100 01a38201 df308201
    db303406 082b0601 05050701 01042830 26302406 082b0601 05050730 01861868
    7474703a 2f2f6f63 73702e76 65726973 69676e2e 636f6d30 12060355 1d130101
    ff040830 060101ff 02010030 70060355 1d200469 30673065 060b6086 480186f8
    45010717 03305630 2806082b 06010505 07020116 1c687474 70733a2f 2f777777
    2e766572 69736967 6e2e636f 6d2f6370 73302a06 082b0601 05050702 02301e1a
    1c687474 70733a2f 2f777777 2e766572 69736967 6e2e636f 6d2f7270 61303406
    03551d1f 042d302b 3029a027 a0258623 68747470 3a2f2f63 726c2e76 65726973
    69676e2e 636f6d2f 70636133 2d67352e 63726c30 0e060355 1d0f0101 ff040403
    02010630 6d06082b 06010505 07010c04 61305fa1 5da05b30 59305730 55160969
    6d616765 2f676966 3021301f 30070605 2b0e0302 1a04148f e5d31a86 ac8d8e6b
    c3cf806a d448182c 7b192e30 25162368 7474703a 2f2f6c6f 676f2e76 65726973
    69676e2e 636f6d2f 76736c6f 676f2e67 69663028 0603551d 11042130 1fa41d30
    1b311930 17060355 04031310 56657269 5369676e 4d504b49 2d322d36 301d0603
    481d22cd 0b0b8bbc f4b17bfd b499a8e9 762ae11a 2d876e74 d388dd1e 22c6df16
    b62b8214 0a945cf2 50ecafce ff62370d ad65d306 4153ed02 14c8b558 28a1ace0
    5becb37f 954afb03 c8ad26db e6667812 4ad99f42 fbe198e6 42839b8f 8f6724e8
    6119b5dd cdb50b26 058ec36e c4c875b8 46cfe218 065ea9ae a8819a47 16de0c28
    6c2527b9 deb78458 c61f381e a4c4cb66
quit
telnet timeout 5
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
username ADMIN password 5iEuCUW0P3ThngqY encrypted privilege 15
username cisco password eT0.bmvcLOAQcNEL encrypted privilege 15
prompt hostname context
call-home reporting anonymous
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DD
CEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:65c9b8c35749959d1159e162ff106166
: end
=======================================================
i configured PAT , PORTFORWARD and ACCESS RULES
just want to mae verification to my work
regards

Hi,
Dont think I can really give you an answer but thought I'd write anyway.
It does seem on the basis of the documentation of the ASA (8.4) that with Twice NAT you wont be able to do any modifications to the DNS replies.
Heres one quote from Configuration Guide
Gonfiguring Network Address Translation -> Information About NAT -> DNS and NAT
If you configure a twice NAT rule, you cannot configure DNS modification if you specify the sourceaddress as well as the destination address. These kinds of rules can potentially have a differenttranslation for a single address when going to A vs. B. Therefore, the ASA cannot accurately match theIP address inside the DNS reply to the correct twice NAT rule; the DNS reply does not containinformation about which source/destination address combination was in the packet that prompted theDNS request.
So if I'm not totally wrong I guess your options might be to either
Start doing changes to the local DNS server directly?
Separate the remote overlapping network from your current firewall with another firewall device?
I dont know the whole setup so this might be impossible
Thinking that if the NAT for the remote overlapping network was done on another firewall it could do the DNS reply changes before they arrived on your ASA from the remote DNS server?
I have not really had to tackle such a situation before. I most commonly run into situations where a customer has public IP configured with 1:1 Static NAT and there is no DNS parameter in the Static NAT configuration while the customer tries to use the DNS name to connect to their local server.
Just some of my thoughts. Maybe someone else might have more expirience with same type of situations.
- Jouni

WRT160N V3 DMZ and Port-Forwarding dont work

Hi All,
i have a WRT160N V3 and DMZ or Portforwarding dont work.
i tried locally following
WAN_PC-> WAN-PORT -> WRT160N V3 -> LOCAL-PORT -> LOCAL_PC
The WAN_PC has a Static-IP 192.168.1.2, Subnet 255.255.255.0
The WAN-PORT has a Static-IP 192.168.1.1, Subnet 255.255.255.0
ON the WRT160N V3 i configured a DMZ on 192.168.0.100.and Disabled the Firewall.
On the LOCAL_PC (192.168.0.100:8888) is a Apache
So when i type 192.168.1.1:8888 on the WAN_PC i get NOOO Website from the Apache on 192.168.0.100:8888?
WHY??????????????
Solved!
Go to Solution.

Please correct me if I am wrong. My understanding of your setup is that you have a computer plugged-in to the internet port of the router and another computer plugged-in to the ethernet port of the router? Is that correct? You do not have a modem for internet connection or something like that? If you can post here a diagram that will be better. Thank you.

Tarantella and Port Forwarding

Similar Messages

Maybe you are looking for