Another Port Forward Issue

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Author Message
btaz
DD-WRT Novice


Joined: 04 Nov 2012
Posts: 4

PostPosted: Sun Nov 04, 2012 22:48    Post subject: Another Port Forward Issue Reply with quote
I'll start by saying I believe I've read all the port forward threads on this site and others and haven't seen anyone else post on it yet. I'm sure I'm wrong and it is out there somewhere, but at this point I could us some help.

Issue:
I cannot seem to connect to the computer that has the dns registered name from the same computer.

For, example I have an apache server hosting my website. These methods all work to bring up the webpage:
1) external WAN using DNS name.
2) Internal LAN (different computer) using DNS name.
3) Internal LAN (different computer) using local IP address
4) Internal LAN (same computer) using local IP address
5) Internal LAN (same computer) using localhost (I believe this just uses the hosts file on my computer an not the router)

The method that does not work is
X) Internal LAN (same computer hosting apache) using DNS name

The frustrating this is I've had this working in the past. I attempted to flash a newer version and was having isues with port forwards so I converted back to this version and reloaded my old config settings. Some other bits of information, is this isn't limited to my apache server as I see the same thing with my FTP and VNC applications too.

I'm on Firmware Version:
DD-WRT v24-sp2 (04/11/11) big - build 16773M NEWD-2 K2.6 Eko

I've attached a file with my iptables and hosts info. Additionally I have DNSMASQ enabled with the additional option text: address=/mydnsname./192.168.1.42

Thanks in advance for any help.



iptables.txt
 Description:
iptable settings and hosts file information

Download
 Filename:  iptables.txt
 Filesize:  7.17 KB
 Downloaded:  1467 Time(s)

Sponsor
btaz
DD-WRT Novice


Joined: 04 Nov 2012
Posts: 4

PostPosted: Thu Nov 08, 2012 9:05    Post subject: Resolved Reply with quote
well I got rid of the problem, but I'm not really sure what the issue was.

In the end I decided to go the a different version of the firmware:
DD-WRT v24-sp2 (04/07/12) mega - build 18946M NEWD-2 K2.6 Eko

I had tried this before but ran into similar issues, but based on many other forums it seemed like this was a pretty stable version. So after getting the firmware added (doing all the 30/30/30s), I added each setting in one at a time and checked to make sure things were working. (In the past I added several port forward line at once. I don't know if this really was a source of the error or not.)


Last edited by btaz on Thu Nov 08, 2012 15:24; edited 1 time in total
madman999
DD-WRT Guru


Joined: 11 Jun 2012
Posts: 1042

PostPosted: Thu Nov 08, 2012 14:35    Post subject: Reply with quote
what version of the firmware and build number are you using?

Also, what brand and model of router?

_________________
Please state what make and model router plus the build number and type of DD-WRT you are using. Screen prints and a network diagram can are also helpful. Before you create a new post, use the search function. Chances are your issue has happened to someone else.

Common F.A.Q.
Where can I get the latest test Firmware or older ones?
https://download1.dd-wrt.com/dd-wrtv2/downloads/betas/

Asus RT-AC66R on 3.x 28072 Giga
TP-Link Archer C9 on 3.x r54095


Last edited by madman999 on Thu Nov 08, 2012 15:26; edited 1 time in total
btaz
DD-WRT Novice


Joined: 04 Nov 2012
Posts: 4

PostPosted: Thu Nov 08, 2012 15:23    Post subject: Reply with quote
Taking a look at my iptables when I had the issue and when I didn't I do see a couple of differences

Working

root@ROUTERNAME:~# iptables -t nat -vnL POSTROUTING --line-numbers
Chain POSTROUTING (policy ACCEPT 1316 packets, 185K bytes)
num pkts bytes target prot opt in out source destination
1 9648 576K SNAT 0 -- * vlan2 192.168.1.0/24 0.0.0.0/0 to:76.89.208.222
2 0 0 RETURN 0 -- * br0 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast
3 1880 97760 MASQUERADE 0 -- * * 0.0.0.0/0 0.0.0.0/0 MARK match 0xd001

Not Working

root@ROUTERNAME:~# iptables -t nat -vnL POSTROUTING --line-numbers
Chain POSTROUTING (policy ACCEPT 230 packets, 25321 bytes)
num pkts bytes target prot opt in out source destination
1 1664 101K SNAT 0 -- * vlan2 0.0.0.0/0 0.0.0.0/0 to:76.89.208.222
2 0 0 RETURN 0 -- * br0 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast

So it appears that perhaps I didn't type in the right lines noted in www.dd-wrt.com/phpBB2/viewtopic.php?t=89353.

Quote:
insmod ipt_mark
insmod xt_mark
iptables -t mangle -A PREROUTING -i ! `get_wanface` -d `nvram get wan_ipaddr` -j MARK --set-mark 0xd001
iptables -t mangle -A PREROUTING -j CONNMARK --save-mark
iptables -t nat -A POSTROUTING -m mark --mark 0xd001 -j MASQUERADE


Or maybe simply doing more 30/30/30 with a re-flash worked
madman999
DD-WRT Guru


Joined: 11 Jun 2012
Posts: 1042

PostPosted: Thu Nov 08, 2012 15:51    Post subject: Reply with quote
so you did one of the port forward fixes and you are working now?
_________________
Please state what make and model router plus the build number and type of DD-WRT you are using. Screen prints and a network diagram can are also helpful. Before you create a new post, use the search function. Chances are your issue has happened to someone else.

Common F.A.Q.
Where can I get the latest test Firmware or older ones?
https://download1.dd-wrt.com/dd-wrtv2/downloads/betas/

Asus RT-AC66R on 3.x 28072 Giga
TP-Link Archer C9 on 3.x r54095
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum