Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NAT and HTTP/S

    Scheduled Pinned Locked Moved NAT
    8 Posts 4 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • _Adrian__
      _Adrian_
      last edited by

      Hey guys…
      Trying to poke a hole in the firewall to allow traffic to reach my HTTP server.

      Here's the current settings:

      IF WAN
      Protocol TCP
      Source Address *
      Source Port 8080
      Destination ANY
      Destination port 80
      NAT IP : Server1 (x.x.x.x)
      NAT port 80
      Description Server1

      This is a port 8080 redirect from no-ip.com
      Since its a redirect i went and checked the settings on the Dynamic DNS under Services...

      Interface Service Hostname                 Cached IP         Description
      WAN  No-IP adrculda.zapto.org 68.x.x.138 Zapto.org

      Yes, the WAN/Cached IP address is green

      So when i go to verify the changes through canyouseeme.org. i get this:
      Error: I could not see your service on 68.x.x.138 on port (8080)
      Reason: Connection timed out

      What am i doing wrong ?

      If it ain't broken, fix it till it is :P

      1 Reply Last reply Reply Quote 0
      • M
        Metu69salemi
        last edited by

        Have you created portforward rule or normal firewall rule?
        Portforward should work well

        1 Reply Last reply Reply Quote 0
        • _Adrian__
          _Adrian_
          last edited by

          Created a port forward rule.
          From my understanding when a port forward rule is created firewall rules are automatically generated to conform with the new rule

          PS…
          Im on v2.1

          If it ain't broken, fix it till it is :P

          1 Reply Last reply Reply Quote 0
          • M
            Metu69salemi
            last edited by

            I have no knowledge about 2.1, still using 2.0.2.
            Create that rule again and reset states

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              Where did you get that source is 8080?

              Create a nat!  Source is going to be any any, dest wold be your wan address, port 8080, then redirect would be your webserver private IP and 80.

              Yes this will create a wan rule for you.

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • _Adrian__
                _Adrian_
                last edited by

                @johnpoz:

                Where did you get that source is 8080?

                Create a nat!  Source is going to be any any, dest wold be your wan address, port 8080, then redirect would be your webserver private IP and 80.

                Yes this will create a wan rule for you.

                The No-IP redirect is an port 8080 redirect.
                As far as I understand it, it takes the "leased" address which is normally port 80 ( HTTP ) and forwards it to your WAN IP on port 8080 ( alternate port for HTTP - Port 8080 redirect). See below:

                Hostname:
                    adrculda.hopto.org
                Host Type:
                    Port 80 Redirect
                IP Address:
                    WAN
                Port:
                    8080

                Basicly what I have to do is route all inbound port 8080 traffic to my WS (Web Server) which is on port 80

                If it ain't broken, fix it till it is :P

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  your source port would not be 8080 though your dest port would be 8080, then you would redirect that to whatever port you wanted on your inside IP.

                  So outside people would be hitting your wan IP from source port ANY, dest port 8080 and then you would NAT that to say your 192.168.1.x address to port ? (80, 8080, etc.)

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • D
                    douglas
                    last edited by

                    Hello,

                    I have the same problem here. I created a no-ip domain too and I can't make my network works well. This image(below) is my entire particular(home) topology, and any internal IP can't access the WEB, only the Wi-Fi no firewalled. I've did some NAT rules, but no one of them worked well. Could somebody say me how I do these configurations? Thank you very much!  :)

                    http://postimg.org/image/l6lbnhdnb/

                    1 Reply Last reply Reply Quote 0
                    • First post
                      Last post
                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.