TCP's port mapping for safe access

So, I have a statical IP and need to organize safe access to my domestic NAS via Capsule from Global Internet, it means I need https://.
As I know (may be it's not) TCP's set 443 can provide https:// only.
I could not find such TCPs pre-set in Capsule.
I tried to use all pre-set (one after the other) and even made a new set with TCP 443 (just by hand), but all my attempts ended by changing TCP's 443 to 8080 automatically and I saw https:// when I tried to make a safe enter.
Pls., explain, how can I do it?
Thanks' a lot advance.

You have to map port 443 to the NAS IP in your local lan..
You should be able to access it no problem.. there is nothing preset on the TC.
Read the instructions by Tesserax on port mapping for v5 or v6 utility depending on which one you use.
https://discussions.apple.com/community/wireless/airport?view=documents
IMHO if your TC is not the latest AC you will have far more success with v5 utility.
v6 seems to have issues making it stick.
You can load the older version into Mountain Lion .. but according to your profile you are on 10.6 so still fine for v5.

Similar Messages

Setup Airport Extreme Port Mapping for Swann DVR16-2600

Have a Swann video surv system and want to use iPhone 4 and Web to view camera displays remotely. It requires setting up port mapping for the DVR so it can serve ports 80 and 9000 to the remote display app and web screens.
Have signed up for a static public ip address from ISP since they do not allow port mapping using DHCP. Trying to setup so I can use the SwannView application on iPhone 4 and use Webview in browser to access/see security camera displays on/through the DVR. Not working correctly - only partial success.
Reconfigured Airport Extreme for the new ip address and tried to setup port mapping for dvr which needs a web port 84 and another port 9000. Can connect to DVR on internal network using the public static ip:84 and the internal static ip:84 but it only shows a SWANN splash page and an error about not able to load ipaddress:84/65536. Seems like something is preventing the Web display from completely launching - should see a login page but not getting it.
Airport is set to use static ips in the 10.0.1.2 to 10.0.1.10 range with the DVR assigned 10.0.1.5. Tried to set the port mapping for 84 and 9000 but not sure those are working correctly. Swann support tried accessing the DVR over the public ip address and they cannot get through. So suspect problem is with configuring the Airport Port Mapping settings and services, etc. on the Airport Extreme. I can get to the DVR internally using the public ip address:84 and the internal static ip address of the DVR:84 but support cannot get to it from external web.
Tried both Safari and IE 5 and both show same problem trying to launch the Swann login page, etc. iPhone Swannview app doesn't work either.
Any ideas about proper port mapping settings for those ports in the Airport Extreme? Is this correct setting for the Service Type: _http._tcp and do you need to add settings for the public and private udp ports. The udp port fields are empty. Only have entries in the Private IP Address and Public and Private TCP port fields.
Is there a way in Safari or IE5 to set security to see the public ip address as a friendly site and not block anything from loading?

Set port mapping for 85 (not 84) and 9000
Also, if you haven't, be sure to go into the Swann DVR setup and disable the "enable UPnP" option. The UPnP protocol will not work with Port mapping feature of the Apple Airport Extreme.

Port Mapping...access home network remotely

Hello,
Has anyone successfully established port mapping through the AE (802.11n)?
SSH access has worked for me but nothing else. Apple tech support was courteous but unable to solve problem.
I'm trying to get port mapping (port forwarding on other routers) to work for AFP and FTP.
Any help would be appreciated.
Greg
iMac, MacBook Mac OS X (10.4.8)

Hi Greg,
Thanks for your response. I will try it out.
Yes, I did get her the new AE 802.11n.
I am so impressed by it, I would go buy it for myself to add the print server capability, and dual band feature.
To take advantage of N, I will either get a new Macbook Pro, or a new wireless card for my PB G4, preferrably the former.
Cris
Hi Cris,
I have actually been successful now with AFP too.
Does your sister have the new AE 802.11n? That's the
one I have and here's what I did.
1) Open AirPort Utility
2) Select Airport Extreme
3) Menu "Base Station", "Manual Setup"
4) Select Advanced icon
5) Select Port Mapping tab
6) Click "+"
7) Select a service "SSH" or "AFP" which ever you
prefer.
8) For ssh, private tcp port needs to be 22. Public
IP address should be the IP address of your sisters
imac on her local network. Private TCP port should be
22.
AFP is the same setup as ssh, except the Public tcp
port should be any unused port number, for example
5912. (You can get a list of used port numbers here:
http://docs.info.apple.com/article.html?artnum=106439
) and the private tcp port needs to be 548.
Helping your sister out will be much easier when OS
10.5 becomes available later this spring and perhaps
by the end of this month. Go to this link and click
on the iChat icon. It will show you ichat's new
capabilities. http://www.apple.com/macosx/leopard/
Hope that helps,
Greg
iMac, MacBook Mac OS
X (10.4.8)
Powerbook G4 (17") Mac OS X (10.4.9)

Help port mapping for lorex security system

i need to find out how to do my port mappping, not sure what to put in the fields . trying to set up for remote viewing. i have ddns set up, but need port mapping

The following are the basics for setting up an 802.11n AirPort for port mapping/forwarding:
Port Mapping Setup
To setup port mapping on an 802.11n AirPort connect to the AirPort's wireless network, and then use the AirPort Utility, in Manual Setup, to make these settings:
1. Reserve a DHCP-provided IP address for the host device.
AirPort Utility > Select the AirPort > Manual Setup > Internet > DHCP tab
On the DHCP tab, click the "+" (Add) button to enter DHCP Reservations.
Description: <enter the desired description of the host device>
Reserve address by: MAC Address
Click Continue.
MAC Address: <enter the MAC hardware address of the Lorex security system device>
IPv4 Address: <enter the desired IP address>
Click Done.
2. Setup Port Mapping on the AirPort.
AirPort Utility > Select the AirPort > Manual Setup >Advanced > Port Mapping tab
Click the "+" (Add) button
Service: <you can safely ignore this option as you will be making custom port mapping choices for your security device>
Public UDP Port(s): <enter the appropriate UDP port values>
Public TCP Port(s): <enter the appropriate TCP port values>
Private IP Address: <enter the IP address of the Lorex security system device>
Private UDP Port(s): <enter the same as Public UDP Ports or your choice>
Private TCP Port(s): <enter the same as Public TCP Ports or your choice>
Click "Continue"

Enabling ports / port mapping for FTP

Greetings! I have an iMac G5 (Tiger) connected to the internet via an Airport Express. Connected to the Airport is a DSL modem. The Airport uses a static IP for internet access via the DSL modem.
I've enabled FTP services on the G5, and am trying to figure out how to map the appropriate ports to allow FTP access remotely from the internet. I assume I would need to use the static IP with the remote FTP client, then the Airport would route the request to the iMac using port mapping... correct, or incorrect? How, specifically, should this be set up? ie... what ports need opening, routed to where, etc.
Thx!
J

http://discussions.apple.com/thread.jspa?threadID=121828

NAT configuration and Port Mapping for xBox

I'm looking for help with port mapping to open up the NAT for an xBox One. I'm working with the following network devices:
xBox One
DSL Modem: Embarq (ZyXEL) 660R series
Airport Extreme version 7.7.3
I understand the following from researching the issue:
The default settings for both devices block the ports needed for xBox Live.
Airport Extremes are not on the compatible list for xBox.
Port Mapping is better then creating a DMZ for the xBox.
The xBox needs its own manually set IP address.
I switched my Network>Router Mode from Off (Bridge Mode) to DHCP and NAT. I then created a DHCP Reservation and the Port Settings for that IP.
After doing this, the Airport would restart and display a warning - Double NAT. I figured this was because the 660 settings showed the NAT Mode to be SUA Only. The Edit Details link displayed an empty table where you edited the SUA/NAT Server Set. I switched from NAT Mode>SUA Only to None. So there was my Double NAT and I would have thought that would have removed one.
I also disabled the Firewall and Enabled the UPnP.
After restarts the Airport continued to display the Double NAT error. However, with the 660's NAT Mode set to None, the Internet was not there. Web browsers and email accounts replied with server not found.
Only with the 660 set to SUA Only and the Airport in Bridge Mode is the Internet accessible. I now have the details for the SUA filled out for the xBox's IP address and ports.
Hypothesis
Since both devices are acting as DHCP servers the port mapping is not working. Rather then have the 660 distribute IP addresses and then having the Airport distribute another range of numbers, I need to have both devices bridge and distribute one range of numbers. Currently the 660 is using the 192.168 range and the Airport is using the 10.0 range.
Am I correct? Any thoughts and suggestions are welcome.

Port forwarding through a double NAT.. is near impossible.. !!
And the xbox is so attuned to using UPNP it is very hard not to.. even port mapping is not a great fix. Since apple decided gamers did not count as users for Airports.. I think honestly it is best to bypass the airport and stick to upnp from the modem router.
What method of authentication does your ISP use? Because it is really better to use one router.
And in fact the router should be the Zyxel. If you plug the Xbox to the Zyxel running in full router mode, with the airport removed from the network does it work and open NAT??
If not replace the Zyxel with a modern listed router that is xbox compatible and bridge the airport to it.

Ports Required for SMTP access from DMZ

We have a Windows 2000 Adv Server on a DMZ interface of a PIX firewall. We are using native Windows SMTP services as a Front End server for Exchange mail. Our Exchange server has a SmartHost entry that sends outbound mail to the server on the DMZ. Our MX record points to the server on the DMZ for inbound traffic.
We originally allowed DNS resolution and SMTP (Port 25) traffic to the server. We've done this numerous times from the Internal interface of the PIX. Yet, there apparently is at least one other port that needs to be opened up because the mail stays in the Queue of the SMTP server on the DMZ. We got around the problem by opening up all outbound ports from that server.
My question is: "Does anyone know what ports are required for an SMTP server to work on a PIX DMZ?"
Thanks

Should just be TCP/25 and probably DNS (UDP/53). Probably the easiest way to figure out what other port it's using is to look at the active connections from this going through your PIX.
Let's say the IP address of the mail server is 10.1.1.1. Doing:
sho conn | include 10.1.1.1
will give you all the connections. This will tell you where it's connectig to and on what ports. The output will look something like:
FW1(config)# sho conn | incl 10.1.1.1
UDP out 10.2.2.1:17127 in 10.1.1.1:10655 idle 0:01:23 Bytes 1000
UDP out 10.2.2.1:18733 in 10.1.1.1:10477 idle 0:01:38 Bytes 1000
UDP out 10.3.3.2:18429 in 10.1.1.1:10789 idle 0:01:10 Bytes 1000
The numbers after the colons are the port numbers on the connection. Of course yours will show TCP and port 25 (and something else hopefully), but you get the idea.

Does port mapping (for minecraft) compromise the security

Hi,
My son wants to install the minecraft server on his laptop, so he and his brothers can play in one world.
I did find the information how to forward ports, but I am a little reluctant to do so, because I don't know how save it is. Does port mapping compromise the security of my network? Would this open a backdoor for hackers to invade all computers conneted to the network?
I would apreciate any advice.

No, not if done properly.
Generally, port mapping is designed to allow a direct connection from the Internet to a specific computer running a specific service on the local network. In this case the specific computer is your son's laptop and the specific service is the Minecraft server. Any other computers and services on that local network, other than your son's laptop will remain off limits to the Internet.
The key to making sure that this stays secure is that you assign the laptop a static IP address, so it is the only one that is directly addressable from the Internet, and only the ports required for the Minecraft server are mapped to that static IP address belonging to the laptop.

Port mapping for outside cameras

When I go into my Airport Extreme Airport Utility and look at the Network options, it appears that I have ports 80/9000/18004 open. But the cameras are not working and when I go to canyouseemenow.org it says that the ports are NOT open.
Any suggestions of what to try?

when I go to canyouseemenow.org it says that the ports are NOT open.
That does not mean the cameras are not working.. it simply means they are not responding in the expected way.. considering it is not a computer this is hardly surprising.. the only method of testing is using your laptop or something from a real wan address and trying to access.
If the actual test fails.. then show us the actual details of your port mapping... as it is we can see nothing whatsoever.
We also need to see that your airport router is the one and only router in the network. Any double NAT issue will kill this from working.

Port Mapping for Nicecast

i can get the broadcast to play on the LAN but it wont play elsewhere and everytime i use the server check it tells me that it cant connect. its gotta be the port mapping... im not sure how to do this if anybody can help i would appreciate it!

Does the ABS port mapping feature concern both UDP and TCP ports, although in the window it mentions only TCP?
Yes it opens both UDP and TCP ports.

LS & Port Mapping for Email

Hi folks.
I asked in the Airport Extreme section, but nobody replied. I am hoping the server folks in here would know some more.
Let me explain the problem. I own an iPod that can't get through to my server while I float around where I live. The problem is that the high speed carriers here in Ontario block a lot of ports and are known to force people to use their outgoing servers for POP. I use IMAP and wish to use my server for outgoing mail SMTP. I have an Airport Extreme as my router. I can get my mail, but I can't send anything while I am out having a coffee, etc.
I know they only block up to port 1000 or something convenient. Most services are on ports < 1000, so they just block ports that are obvious.
Can I use a port > 2000 that can be shunted to the normal internal ports? I am currently trying this:
Public SMTP TCP port 2500
Private SMTP TCP port 143
Is this how routers work? Can I link private and public ports that are different, and the router takes care of this for me? I'm assuming it is re-addressed as it passes through the router.
Any help appreciated.
Cheers

Actually, I'd rather just give traffic directions to the router instead of fussing with Postfix. Is that possible? The Airport Extreme Airport Utility's GUI is confusing about how it works and documentation is...well, for the GUI.
The Airport forwards ports. That is, it sends a request for a specific port on a specific address to the same port on a different IP address. At its core, this is the essence of NAT, and Airport is a basic NAT firewall.
The Airport does not remap ports. That is, the Airport does not alter the target port requested by the remote client, it solely alters the target IP address.
The Airport makes a good home WiFi router when combined with client devices, and is an entirely serviceable Access Point (AP) device for larger configurations. The Airport +is not a server firewall+ and does not provide features that many server administrators can require. It is a very limited device.
I will archive these notes though. How do I accomplish a postfix reload? sudo postfix restart?
The command +sudo postfix reload+ is typical. Google is your friend; postfix gets discussed widely, whether here in the forums or elsewhere, and the documentation at the [Postfix web site|http://www.postfix.org> is reasonable.
It sounds like closing SMTP ports is quite popular.
It is common to require ESMTP and related connections in many environments, or to require folks to use a VPN. Port 25 is best left used for traffic among SMTP servers, and many sites prefer to keep the clients out of that mix.

Port forwarding for external access to VNC server on multiple machines

I will have 10 PCs connected to the WRT54GL wireless AP. I am testing with 1. It has a static addresses 10.155.22.51. It is running a VNC server at port 5951.
If I set my VNC client up to access 10.155.22.51:5951 it works through the WRT54GL wireless AP.
I set the WRT54GL port forwarding to 5951 - 5951, set the IP address to 10.155.22.51 and enable. The external address of the AP is 10.155.0.29 on the company LAN.
So I set the VNC client to access the AP address with the VNC port, i.e. 10.155.0.29:5951. I expect the AP to change the address to 10.155.22.51:5951. This does not work.
Note: the problem could be that the AP is going through NATting because I can also access it at 10.155.22.9 along with all the other PCs on that LAN, i.e. I can access the LAN directly from elsewhere on the company net.

You can try changing the IP of the AP manually ... connect it to the Computer ..... access the setup page using http://192.168.1.245 .... use password as admin ....
Configure the IP settings first ...
Again login with new IP address .... configure wireless settings .....
Power down the AP & then the router ....
Wait for few minutes .... then power on the router ...first then the AP ...

Can Prime Infrastructure 2.0 enable port 8080 for Browser access?

By the offical document, port 8080 is pre-defintied for the Browser access but it is disabled by default.
I am finding a way to enable the port, but I cannot find any guide on cisco site.
Did anyone know how to enable the 8080 port?
Thanks in advance.
Louis

HIi Hoi;
As per cisco document : http://www.cisco.com/en/US/docs/net_mgmt/prime/infrastructure/2.0/administrator/guide/config_server_settings.html#wp1082023
Configuring Server Settings
The Server Settings page allows you to enable or disable the TFTP, FTP, HTTP, HTTPS, or Compliance Service. To turn the server settings on or off:
Step 1 Choose Administration > System Settings.
Step 2 From the left sidebar menu, choose Server Setting.
Step 3 If you want to modify the FTP and TFTP directories or the HTTP and HTTPS ports that were established during installation, enter the port number (or port number and root where required) that you want to modify and click Enable or Disable.
The changes are reflected after a restart.
I am not sure but try to change the port number 8080 in HTTP Forward option and save it, then restart it.
I think it will work.
Regards
Don't forget to rate helpful posts

Problem port mapping for amsn on mac.. please help

I have snow leopard running, and last night I needed to use amsn opposed to the regular messanger for mac as I needed the video capabilities to connect with a user using windows and msn.
I've never had a problem before but that was before snow leopard. Apparantly the problem is with the windows side not amsn.
They suggest doing opening ports 6890-6900. I can't figure out what information to put in all the fields and if there is a way to enter the range or if you have to enter all them individually.
Also I found a document on how to do this and check the port is open via transmission which it said 1 port was as I only tried one. When I ran amsn it wasnt saying it wasnt open.
Can someone walk me through how to set up the ports. There are many fields that I dont know what to enter etc.
I should point out the problem was with the video. We couldn't intialize a connection and it was really really laggy. I tried rebooting and same thing.
thanks
Message was edited by: elvtnedge

You can use a keyboard command to prevent your iPod auto-syncing with iTunes. While connecting the iPod to the computer on a Mac hold down the Option and Command (⌥ and ⌘ Apple) keys. This will stop the iPod from auto-syncing with iTunes and it will appear in the source list. Wait until you are sure the iPod has mounted, and that it will not auto sync and then you can let the keys go. This may take between 20 to 30 seconds depending on your computer. You should then be able to change your settings and enable your iPod for disk use: iTunes Keyboard Shortcuts for OSX
If you have any iTMS purchases on your there the transfer of purchased content from the iPod to authorised computers has been introduced with iTunes 7. A paragraph on it has been added to this article: Transfer iTunes Store purchases using iPod
The transfer of non iTMS content is designed by default to be one way from iTunes to iPod. However there's a manual method of copying songs from your iPod to your Mac at this link: Two-way Street: Moving Music Off the iPod
If you prefer something more automated there are a number of third party utilities that you can use to retrieve music files and playlists from your iPod, this is just a selection. I use Senuti but have a look at the web pages and documentation for the others as well, they are generally quite straightforward. PodView has a facility for transferring full resolution photos as well as songs back from the iPod to your Mac. You can read reviews of some of them here: Wired News - Rescue Your Stranded Tunes
Senuti Mac Only
iPodRip Mac Only
PodWorks Mac Only
PodView Mac Only
iPodAccess Mac & Windows
YamiPod Mac & Windows
PodUtil Mac & Windows
iPodCopy Mac & Windows

What tcp/udp ports are required to access the app store via a firewall?

we have ports 80/443 open but users are still unable to connect.

You should be ok - but read this. Try opening 2195 and 2196. If you still have issues
port watch and see what an iPad does when trying to get to the store.
http://support.apple.com/kb/TS1629

TCP's port mapping for safe access

Similar Messages

Maybe you are looking for