ADSL Dynamic DNS and Port Forwarding / NAT

[ettienne88]

I purchased a Telkom Wifi Router 5102G+ (Made by Billion)
Connected the ADSL and figured i can use the routers NAT capability to resolve all external requests from port 80 to a computer within the local network. (This in combination with the routers DYNDNS capabilities, which lets one resolve to your dynamic ADSL public IP address from a domain name ie. http://www.lookhere.selfip.com)

Problem is that the routers admin panel is accessed via a web interface that resides on port 80 requests [Standard http port],
I have tried almost everything and cannot seem to redirect requests to the routers address (Whether that be local lan or public ADSL ip) from a certain port to the routers address on port 80.

Has anyone had the same idea / attempted this?

Anyways if i can crack this one, it would mean i can host websites from my adsl line on a local lan machine

Any help is welcome.

 

[BradDC]

just a stupid question...

are u using http://www.lookhere.selfip.com
or u using http://lookhere.selfip.com

Usually most NAT routers map the public ip port traffic... and not the internal.

 

[scavern]

I use DYNDNS to access my router remotely as well as a way to connect to my server using openvpn.

I was always though you couldn't access port 80 of your router remotely, most routers only allow connections on 8080.

To host a web server on your lan, you would have to open an inbound port (80) on your router and specify the ip of the pc on the lan that you want to host the website - and of course signup at dyndns.org

Going to http://yoursite.dyndns.org should route to that pc...

I'm not an expert here, but this should work.

Although I think it will be pretty expensive hosting your on website.

 

[ettienne88]

Answer to the first question: the address is like http://www.lookhere.selfip.com
As for the second reply: The admin interface to the router is on port 80 and not 8080. I have tried using NAT / ip forwarding etc etc.
Cant believe no one has tried this before..

As for it being expensive to host my own sites...
I think not as I have an extra PC just gathering dust, server setups i can easily do myself for both IIS and Apache.
Another reason I prefer to do this is that i can compile whatever libraries i require on the webserver myself, rather than begging the hosting company to add a lib on their shared server.

Obviously i wont host mission critical apps as i dont have diesel generators etc etc.
More like a development server thats gona be there...

 

[nic777]

If its a good router, you should be able to change to port that the control panel is listening on. Or you can just switch it off. Look for something called "Remote Managment"

 

[ettienne88]

Nope nothing in there called Remote management.. No that for sure.
As for changing where the admin panel resides i hoped i could do that with ip forwarding... That is that one can specify a certain IP range and port number to be redirected to a ceratin desitination ip address on a specific port. (No luck as yet). The router i got is the telkom rebranded Model of Billion's
5102G+ (A all in one swith, adsl router and wifi access point)

I have contacted the Billion agents in SA and they have been very helpfull so far but unfortunatly not been able to hack it yet.. (Also not sure if this is possible)
I even did a firmware upgrade on the unit (Few anxious moments there after i restarted the router as something was funny... Until i reset the unit to factory default....was cool after that phewwww)

 

[BradDC]

Ettiene88

Triple Check.
www.yourname.selfip.com is different to yourname.selfip.com
It is a completely different DNS.

type in
ping www.yourname.selfip.com

it should be Just yourname.selfip.com

the www part is just DNS and not related to the port it connects on.

Nope nothing in there called Remote management.. No that for sure.
As for changing where the admin panel resides i hoped i could do that with ip forwarding... That is that one can specify a certain IP range and port number to be redirected to a ceratin desitination ip address on a specific port. (No luck as yet). The router i got is the telkom rebranded Model of Billion's
5102G+ (A all in one swith, adsl router and wifi access point)

I have contacted the Billion agents in SA and they have been very helpfull so far but unfortunatly not been able to hack it yet.. (Also not sure if this is possible)
I even did a firmware upgrade on the unit (Few anxious moments there after i restarted the router as something was funny... Until i reset the unit to factory default....was cool after that phewwww)

 

[plenty]

In a helping mood i am tonight....

normally i dont post, so feel the love...

Firstly i would advise others reading this forum not to purchase the standard telkom equipment (ettienne not you - we'll sort you out in a min...) because
these silly telkom "routers" come with there web-interfaces fully exposed to the world - normally resulting in stolen bandwidth and other atrocities like hacked bank acounts - making headlines at the moment.

So ettienne - you seem rather knowledgeable about stuff... here goes...
I have researched this from the billion website for you, and after downloading the technical documentation for your router(modem) I recommend the following.

Ditch the router configuration and run the device as a modem (also known as a bridge / ethernet bridge / RFC 1483) Your device apparently supports this setup - even though it is listed under the routers only section of the site.

This benefits you in a number of ways - Primarily moving the control from a stupid 'device' (that is rather clumsy to configure, as you have discovered) further up the wire to your PC router. (could be windows - preferably linux - get yourself a copy of Fedora, Ubuntu or Some other Distro - So i dont get flamed).

Your router will stop responding to requests on ports completely, because of the bridge setup all traffic gets forwarded from the internet straight up your network cable, Where it is intercepted by our new router.
I reccommend running your web / dev server on the same machine that you will be using as your router (If you could tell me what OS you would choose to run i could help further with your setup at a later stage)

Some points of interest & other errata...

1) Everything is now forwarded directly down the line - control of all traffic now lies with your firewall - allowing full control of the NAT, PAT,traffic priorities & protocols superior monitoring and statistical analysis.

2) Your router machine can also run your web / dev servers - just accept connections to port 80 on that machine (internal IP) and create a firewall rule.

3) Regarding the dynamic IP stuff - there is software available for various OS's to help with this.

4) I'm not sure where BradDC has been going - little confused....

5) Alternatively if you have a really old piece of sh** machine - Lying around the the following come highly recommended!!

http://sourceforge.net/projects/smoothwall/
SmoothWall is a best-of-breed Internet firewall/router, designed to run on commodity hardware, and to give an easy-to-use administration interface to those using it. Built using open source and Free software, it's distributed under the GNU Public License
-----------------

http://ipcop.org/
IPCop Linux is a complete Linux Distribution whose sole purpose is to protect the networks it is installed on. By implementing existing technology, outstanding new technology and secure programming practices IPCop is the Linux Distribution for those wanting to keep their computers/networks safe.
-----------------

Both come with very nice intuitive interfaces - far superior to the billion interface i promise. They are pretty easy to install include powerful features and advanced monitoring capabilities. They both have a variety of configurations available (based on number of NIC's you have etc...) and include good hardware support.

Based on the requirements outlined in your posts - i cant see a solution other than this - this is a far better solution! - These routers running as routers do not give enough control.

Alternatively you can wait for another firmware upgrade...

I hope this helps - should you have further queries or require a more in-depth explanation of certain points holla-back.

- plenty

 

[The_Unbeliever]

I'm using Smoothwall on ADSL, and found the setup to be hassle-free.

Once you've got the router into bridged mode, remove all instances of usernames and passwords from the router.

Then, on Smoothwall, you specify that the RED interface must be PPPoE.

On the Smoothie itself, on the PPP section under Networking, you create a new PPPoE profile, and add your username and password there.

That's all, you should be able to connect.

The Smoothwall community is more active and helpful than the IPCop forum (from what I've heard), but it might be different for you.

I've set-up port forwarding and all that jazz successfully on such a Smoothie.

However, I've got one instance of a Marconi router (the one with the 4 ports) that hangs when you try to put that blasted thing into bridged mode, anybody have any ideas as to why? Rest of the stuff - Planet ADSL, Conexant Hasbani etc is no sweat.

I usually set the Smoothwall to reconnect after power failure so that you don't need to manually reconnect after a power failure every time.

Regards

TU

 

[skollie11]

Opening Port 80

Hi Ettienne

I also experienced big problems to acces my CCTV system from a remote pc, the Telkom Wi-Fi router takes control of port 80, so what happens in practise, once you type in your DDNS address, you get routed back to the routers admin section. I re-assigned the port on the CCTV system to another public port, port 8080, also added this port as an exception in my windows firewall.

In the admin section of your router's setup, go to virtual server and make port 8080 a public port, use your lan ip address.

When you log in to your DDNS address, use the address ie http://bob.dipmap.com:8080 and A for away, this should solve your problem

Just for the record, the after sales service of Telkom's ADSL technical service, as well as that of Marconi really sucks, if that was that my business i would have fired all the staff, they are really incompetent

Regards and good luck

 

[gee7022]

Hi Ettiene
Just one thing to remember you can't access the router with it's dyndns name if you are on the lan side of the router you'll just keep getting the web interface of the router. Setup the port forwarding and then try and access it from the Internet side it should work I've done it and it works