Access LAN side services using WAN IP and port forwarding

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Atheros WiSOC based Hardware
Author Message
solarein
DD-WRT Novice


Joined: 11 Dec 2010
Posts: 10

PostPosted: Sun Dec 12, 2010 5:55    Post subject: Access LAN side services using WAN IP and port forwarding Reply with quote
I just got a Netgear WNDR3700 running DD-WRT v24-sp2 (r15778)to replace my Actiontec FiOS router, and I'm running into a behavior that's different from the Actiontec. I've configured the router to forward a few ports for services like SSH, HTTP, HTTPS to some servers on my LAN, and set up dynamic DNS to point to my WAN IP. I'm used to accessing these services by using those DDNS domain names, even when I'm on my LAN, that way I don't have to remember which internal IPs to use to access those services. However, with the WNDR3700 running DD-WRT, I can no longer access these services using the WAN IP while on my LAN. I can access them just fine from outside of my LAN, though, so the port forwards and DDNS are working just fine. I figure this is probably just a difference in default settings, but I have no idea what setting controls this behavior. Could someone point me in the right direction? Thank you very much.
Sponsor
Sash
DD-WRT Guru


Joined: 20 Sep 2006
Posts: 17638
Location: Hesse/Germany

PostPosted: Sun Dec 12, 2010 10:32    Post subject: Reply with quote
this is no error.. try again from the wan
_________________
Forum Guidelines...How to get help
&
Forum Rules
&
RTFM/STFW
&
Throw some buzzwords into the WIKI search Exclamation
_________________
I'm NOT rude, just offer pure facts!
_________________
Atheros (TP-Link & Clones, etc ) debrick service in EU
_________________
Guide on HowTo be Safe, Secure and Protect Your Online Anonymity!
solarein
DD-WRT Novice


Joined: 11 Dec 2010
Posts: 10

PostPosted: Sun Dec 12, 2010 19:48    Post subject: Reply with quote
Sash wrote:
this is no error.. try again from the wan


From the WAN side, there is no problem. It's only on the LAN side that I can't access these services. The connection simply times out.
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Mon Dec 13, 2010 4:32    Post subject: Re: Access LAN side services using WAN IP and port forwardin Reply with quote
solarein wrote:
However, with the WNDR3700 running DD-WRT, I can no longer access these services using the WAN IP while on my LAN.

Google "dns loopback" or "nat loopback".
solarein
DD-WRT Novice


Joined: 11 Dec 2010
Posts: 10

PostPosted: Mon Dec 13, 2010 4:56    Post subject: Re: Access LAN side services using WAN IP and port forwardin Reply with quote
fyi2000 wrote:
solarein wrote:
However, with the WNDR3700 running DD-WRT, I can no longer access these services using the WAN IP while on my LAN.

Google "dns loopback" or "nat loopback".


Thanks for getting me onto the right track.

However, according to this wiki page:
http://www.dd-wrt.com/wiki/index.php/Port_Forwarding_Troubleshooting#Test_Loopback
Loopback should be enabled with the "Filter WAN NAT Redirection" option unchecked. Mine is unchecked, and my server isn't running a firewall and there is no additional routers/firewall between the WNDR3700 and the server, and I still can't get loopback to work. What could be the problem?
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Mon Dec 13, 2010 5:05    Post subject: Reply with quote
Quote:
WARNING: Loopback is currently broken in build 15760 and higher but is easily fixed with iptables. [Ticket 1868].

DD-WRT Forum :: View topic - Atheros Recommended Build
solarein
DD-WRT Novice


Joined: 11 Dec 2010
Posts: 10

PostPosted: Mon Dec 13, 2010 5:17    Post subject: Reply with quote
fyi2000 wrote:
Quote:
WARNING: Loopback is currently broken in build 15760 and higher but is easily fixed with iptables. [Ticket 1868].

DD-WRT Forum :: View topic - Atheros Recommended Build


Thanks! Ran the iptables command and now NAT loopback is working.
solarein
DD-WRT Novice


Joined: 11 Dec 2010
Posts: 10

PostPosted: Mon Dec 13, 2010 5:25    Post subject: Reply with quote
Also, sort of related to this, with regards to DNS loopback, it seems the DHCP server running on the router is not giving the address of the router itself as one of the DNS servers to DHCP clients, so lookups for internal DNS names on the LAN aren't working. How can I configure DD-WRT's default DHCP server so that it assigns itself as one of the DNS servers to DHCP clients?
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Mon Dec 13, 2010 10:03    Post subject: Reply with quote
DNSMasq as DHCP server - DD-WRT Wiki
solarein
DD-WRT Novice


Joined: 11 Dec 2010
Posts: 10

PostPosted: Tue Dec 14, 2010 0:57    Post subject: Reply with quote
fyi2000 wrote:
DNSMasq as DHCP server - DD-WRT Wiki


Cool, that worked, thanks.
Mitsch1012
DD-WRT Novice


Joined: 13 Aug 2007
Posts: 20

PostPosted: Thu Dec 30, 2010 19:48    Post subject: Reply with quote
What worked for you? Trying to controll my Dreambox with my smartphone... Via the 5G from my WNDR3700 it works, but with another acess-point in LAN it doesn't.

Even with a computer connectet via LAN it won't work! Sad

Please give me some backup, that would be very nice! Rolling Eyes
fyi2000
DD-WRT Guru


Joined: 04 Apr 2010
Posts: 642

PostPosted: Thu Jan 13, 2011 20:31    Post subject: Reply with quote
Make sure that you didn't enable "Filter WAN NAT Redirection" under Firewall tab of Security.

DD-WRT Forum :: View topic - NAT Loopback fix for 15760 and higher, (Port forward issue)
DD-WRT Forum :: View topic - Enabling loopback on wndr3700
DD-WRT Forum :: View topic - Full NAT Loopback in dd wrt is it possible?
[Tomato] tomato firmware - NAT loopback settings - Linksys | DSLReports Forums
Accessing LAN destinations via public adress
GPSJane
DD-WRT Novice


Joined: 01 Feb 2011
Posts: 39

PostPosted: Thu Oct 04, 2012 7:48    Post subject: Reply with quote
That link for IP Tables is missing. Does anyone know where I can find this?
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum