Accessing the WebGUI via WAN (Yes, I read the FAQ) [RESOLVED]

[alberts]

I read the wiki FAQ and followed it; however, I still can't access the WebGUI remotely.  I've enabled https and changed the port to 10001.  I'm able to access the gui from lan no problem with https://mybox.com:10001 with no problem.  I added a rule on the WAN with the following:

Action: PASS
Disabled: NO
Interface: WAN
Protocol: TCP
Source:
   Type: NETWORK
   Adress: 205.215.0.0/16
Source Port Range:
   From: Other - 10001
   To: Other - 10001
Source OS: ANY
Destination:
   Type: WAN ADDRESS
Destination Port Range:
   From: Other - 10001
   To: Other - 10001
Log: NO
Advanced Options: None
State Type: Keep State
No XMLRPC Sync: No
Gateway: Default

Is there something else I need to do?  I have no problem with any other rules I have created.
Thanks

[jeroen234]

drop the source ports  in the rule
a connection to www.msn.com on port 80 ca have 1 till 65000 as source port
its a random chosen port by the system

[Juve]

just to be exact…. source port are between 1025 an 65535 (boundaries included)

lowports : 1-1024
highports : 1025-65535

When writing rules you should always specify that connection can be established from X to Y from highports to serverport (eg. 80 for HTTP servers).

[sullrich]

As the GUI states, source ports are not needed in 99% of the cases and this is one of them.

[alberts]

Thank you.  Specifying the source port was the problem.  I did notice that the gui said a source port isn't needed most of the time.  I just thought that in this case, since it was for the admin panel, it would be a good idea to limit the rule as much as possible.  I guess not.

Thanks again.

BTW, thank you to all of the devs for this wonderful product.  I dropped my custom Gentoo install using Shorewall that had worked for me as a firewall/router over the past 3 years.  I didn't have any problems, but I thought I would try something different.  I'm glad I did.

[sullrich]

@alberts:

Thank you.  Specifying the source port was the problem.  I did notice that the gui said a source port isn't needed most of the time.  I just thought that in this case, since it was for the admin panel, it would be a good idea to limit the rule as much as possible.  I guess not.

Thanks again.

BTW, thank you to all of the devs for this wonderful product.  I dropped my custom Gentoo install using Shorewall that had worked for me as a firewall/router over the past 3 years.  I didn't have any problems, but I thought I would try something different.  I'm glad I did.

That is great to hear!

Welcome!!