Marconi wan access and Port Forwarding

[booswig]

Currently, I can connect to my Marconi ADSL router from any PC, inside my network and outside. All it ask is my username (that cannot be anything other than admin or user) and my password. Under Admin Privilige, Misc Configuration I have made many chnages, rebooted, yet, it still allow WAn side access.

It looks like this:

HTTP server access
All
Restricted
LAN
WAN Specify IP
Subnet Mask
HTTP server port
HTTP Password Protection Enabled Disabled

I have selected all, rebooted. Nothing, still allow WAN.
I have selected WAN and LAN, rebooted. Nothing, still allow WAN.
I have disabled and enabled HTTP PP, rebooted. Nothing, still allow WAN.
I have tried various other settings, about 20 reboots so far. Nothing.
I have changed the HTTP server port (6667), so at least I have to specify the port if I want to connect, but if I leave my the port out i just get page unknown. The internal web server works by the way, and have currently no firewall.

I want to host games on my PC, and also host a website. Registered a website and dyndnds, but when I enter the URL I just get to the router, where I again can log in.

Under configuration I have entered:
ID Public Port - Start Public Port - End Private Port Port Type Host IP Address
1 80 80 80 TCP 10.0.0.5

Still cannot get my 'Hello world screen', just the Telkom Marconi Router configuration screen.

I have disabled, and enabled my Firewall on the router. I have set an inbound policy with the firewall enabled (after the customary save and reboot off course):
Inbound Policy
IP Address Port # Prot. Act. Opt. Filtering
1 SrcIP: Any IP SrcPort: 80
DesIP: 10.0.0.5 DesPort: 80 TCP Allow
Still fluckall. Gettign really fedup with this piece of crap.
Anyone know of any other setting I have not yet tried ?
Yes, I have resetted and started from scratch about 7 times, I have even left the modem unplugged (Telkom helpfull suggestion) for more than an hour.

If anyone think he can help me, please PM me, I'll be willing to pay.
Else suggest another modem that will be able to do this out of the box.
Thanks.

 

[Morries]

booswig, lol, i feel your pain.....

I also have the same problem, but sort of solve the issue regarding WAN users accesing you ADSL Admin interface.

You have to remember that you can't test WAN access from the same IP. The Marconi Router pick up that the request comes from the same user. You will have to test it from a diffrent External IP.

Here is what you need to do to secure your internal network.

First of all, change both the Passwords under the User Password Configuration section and Admin Password Configuration section.
Then go to Misc Configuration and change the following.
HTTP server access: Tick LAN & enable HTTP Password Protection
Disbale FTP server (This is only to FTP to your router's files, not your internal network)
Disable Command Line Interface

Make sure the firewall is Enabled.

Save & Reboot.

This will block the ADSL Admin interface to WAN Users (External Internet Users).

The best way to manage your router settings from a remote Internet connection (if you really need to) is to setup a few Virtual Server settings.

What i did:
Setup a Virtual Server setting for RDP (Remote Desktop), this allow you to RDP to your internal PC and change your settings Internaly.
Don't be stupid by ussing default ports, there are a **** load of "script junkies" out there doing port scanning. Use someting like port 8889 for both Public Port - Start & End and then your internal Private Port will be 3389 for RDP. And then your internal PC ip. (10.0.0.x)

Do the same for anything else you need. ssh (22), www (80), ftp (21)

Save and reboot .... Now your safe from external users and you can still manage everything from any connection.

Just note, same problem with port 80 routing, when you try to browse port 80 from your internal network, you will see the ADSL Admin interface and not the Virtual Server you have specified for the External Users. I'm still trying to figure this out.

Maybe there's someone out there that can help us out with this small problem.

Good luck