Port Forwarding help

[stevenhu]

I'm in exactly the same situation... I want to be able to have external ports that are different to the internal ports and have the router do the translation. In my situation I have two servers that I want to be able to remote desktop to.

I would *really love* to expose port 4000/tcp to 192.168.2.aaa:3389 and 5000/tcp to 192.168.2.bbb:3389.

I used to do this with my SMC router, but since using the new Sky router (DG934G) I can't see how to do it.

I even tried to phone sky "support" to get some answers, but they're a joke. They didn't have the first clue about what I was talking about - even when it was escalated to "senior technical people" they were completely stumped

Waz - I share your pain!

[waz101]

funnily enough i found a solution:
After a bit of playing around with iptables and heavy reading of its main pages I've found a way to add this dearly missed feature to this excellent router:
The following line:

iptables -t nat -A PREROUTING -p tcp --dport 25000 -s 0.0.0.0/0 -j DNAT --to 10.10.x.x:3389

opens the firewall for an incoming connection on port 25000, forwards it to the internal address 10.10.x.x and translates the port to its destination port 3389.

Why I need that? I'm running on my internal network a bunch of virtualized Windows machines.
To connect from the outside I can run "rdesktop my_server.com:25000" and can connect to the terminal server on its default port 3389.
I don't have to change the listening port from the terminal server individually on each box, all is kept in one place and makes monitoring and admin a lot easier.



Waz

[stevenhu]

OK - I give up - it's 2:44am

I admit I'm not the most technical when it comes to routers, but I did expect that I'd just telnet to the router and run your command and it would be all done ... sadly, I fell at the first hurdle

Firstly I should just check that this was the expected method - and I'm not being dumb. The command you supplied is just to be run through telnet right?

If not, please put me out of my misery and (for the simple minded) please tell me how to run the script.

If this is just a telnet/busy box command to run then I should explain that I have the DG934G Sky/Netgear router and it would appear that they've locked down the telnet and even the hacks I came accross (hence it being 2:50 now) don't appear to work.

I'm crossing my fingers that either:

a. I'm dumb and you're gonna tell me the easy way to run the script
b. you know where I can "hack" the telnet client on the DG934 router

Please, anyone, help...

Steve

PS: Waz - thanks for your last reply - it's good to know that the router at least supports the feature, just not exposed in the UI. And, BTW, the remote desktop thing is exactly what I want to do too.

[julie_152]

I have been advised by news server "usenet" to use various port numbers in the Xnews settings. Do I need to configure the Sky router for any of these port numbers?

Julie

[NewsreadeR]

You will need to use your preferred port number and then add it to the router

Follow this tutorial and use the port number instead of the one on the page

How to set up port forwarding to an internal server of any type

[Jerec]

Hi,

Just wanted to say if anyone has the same problem that I do?

I've got port 50001 open for UTorrent, but it randomy closes.

All the settings look fine on the router, but when I test the port, it says not open.

I've had this problem since I got Sky BB and the router, even though I've followed Portforwards instructions to the letter.

Anyone get this or know of a permanent fix?

[ctmnjr]

Hi,
Hope someone can help??
i have the new sky segam router and a dlink5300g ip webcam and it worked fine with my old isp(aol) then i joined sky and its been downhill ever since, the camera works fine from inside my own network but try as i may i cant see how i get to see it from outside my network .
What i do know is the cameras ip address 192.168.0.3 and i need to open ports 80,5001-5003 but the setup of the segam is a lot different to my old netgear heres what i can see....
Router Status
Firmware Version 1.5Sky

ADSL Port
MAC Address 00:19:4b:97:9e:b0
IP Address 90.202.194.132
Network Type PPPoA
IP Subnet Mask 255.255.255.255
Gateway IP Address 195.189.159.75
Domain Name Server 90.207.238.98 87.86.189.17

LAN Port
MAC Address 00:19:4b:97:9e:ae
IP Address 192.168.0.1
DHCP enable
IP Subnet Mask 255.255.255.255

THEN THIS.....
BROADBAND SETUPFirewall Rules
Outbound Services
# Enable Filter Name Action LAN Users WAN Servers
Default Yes Any ALLOW always Any Any

Inbound Services
# Enable Filter Name Action LAN Server IP address WAN Users
Default Yes Any BLOCK always Any Any

Then the sevices tab but i havent a clue what the settings are??
Regards ctmnjr

[tcrooks]

Originally Posted by tcrooks

Come Sky activation I had thought this will be easy - select an HTTP Port 80 service and forward to the Mac acting as a server (192.168.0.n). But no joy when trying to access the web site using the domain name as it displays a panel asking for the router user id and password. Must be something else to be done but for the life of me I just cannot see what it can be.

One unexpected plus from the 2008 Sky Netgear firmware upgrade is that this is no longer a problem. By chance I realised this limitation has been removed - hooray!