On Sun, 2004-06-20 at 21:00, steve wrote: > Nick Rout wrote: > > >On Sun, 2004-06-20 at 17:28, steve wrote: > > > > > >>Hi Folks, > >> > >>I've been playing around with my network access, mainly at getting in > >>from the outside. I've got an ihug account ( look, I'm new here, and the > >>gf liked the name(: ), and I'm accessing through a Speedtouch 510 ADSL > >>modem and a 256kB account. > >> > >> > > > >how are you trying to get in from the outside? you actually need to _do_ > >it from the outside. > > > > > > > >>I've set up a no-ip account which seems to work fine ( I can ping and > >>get a sensible name back ). However, I can't access anything behind the > >>router. I've set up routes to a web server, with no luck. I downloaded a > >>bit of software that probes the ports, and find that ftp, telnet, pop3, > >>smtp and 1723 (?) are open ( I also find that ihug seems to guard > >>against the monitoring of ports! ). > >> > >>OK, but when I try to route incoming on ftp to port 80 on one of my > >>servers, I get no response. I've even gone to the lengths of setting up > >>a default destination, and telnetting to the ports in question, but I > >>still get no response. > >> > >> > > > >this has nothing to do with routing! you need to learn something about > >NAT. By default nothing gets in through NAT, you need to set up what is > >usually called a pinhole, or a port-forward. This needs to be set up on > >the router, and the parameters are usually (with examples): > > > >external port (81) > >internal port (80) > >internal IP (192.168.1.100) > >protocol (tcp) > > > >This setup would mean tcp packets arriving at the external interface on > >port 81 are forwarded to port 80 on internal machine 192.168.1.100 > > > >you need to explore how to do that on your router. > > > >NAT means that you cannot test this from the inside, you need to get a > >mate to do it from out on the net. (Actually thats not quite true, if > >you have, say, ssh access to another box outside your lan, or vnc or X > >access to such a machine, you can test it, but the incoming packet > >/does/ have to originate from outside) > > > >if you want me (and not the rest of the world) to try to access you, > >send me an email offlist. > > > >Nick > > > > > > > > > >>Is it me? Is it ihug? Is is my router? > >> > >>I had very little hair to start with, but it's getting less by the minute ): > >> > >>If anyone's got a 256KB ADSL account with an isp they would recommend > >>that allows me access from outside on a variety of ports, then could > >>they please let me know! > >> > >>Cheers, > >> > >>Steve > >> > >> > >> > > > > > > > > > > > Nick, > > I sometimes use incorrect words, like 'route', because I'm self taught. > Please make allowances for this. > > Steve
well ask a misleading question and people will give you irrelevant answers. as for swapping ports around, security through obscurity is not security at all. I offered help to test your ports from the outside, I am guessing you now completely understand what is going on and don't want to take up the offer. I have never heard of ports on adsl being blocked, but may I suggest you ask on the adsl mailing list, where there may be more collective wisdom with ihug's particular service. http://www.unixathome.org/adsl/
