Re: Port forwarding behind two routers

2008-11-19 Thread Luke Dean



On Wed, 19 Nov 2008, Jakub T wrote:


2008/11/15 Luke Dean [EMAIL PROTECTED]



Port-forwarding through two NATs is something I've never had any success
with.  I have a few suggestions that have worked for me and my friends with
this setup.

A) Disable NAT on the ADSL router.  I think the term is bridged mode.
Turn it into a dumb box and shift all the NAT/firewall/routing
responsibilities over to your wireless router.  Depending on your ISP, the
hardware, and the protocols involved, this may not be an option for you.

B) Disable NAT on the wireless router.  This allows it to be a simple
switch and wireless access point.  The price is that you're probably relying
on the DHCP server in the wireless router for your wireless devices and
you'll have to disable the DHCP when you disable NAT.  This creates new
problems to be solved.

C) Plug the FreeBSD box into the ADSL router, skipping the wireless router.
 Your wireless devices will still be double-NATted, but if you're not
running servers on them, you might be able to live with that.



Luke,

Thank you very much, your advices were very helpful and I now have a working
port forwarding through two routers. Sorry for the delay in the answering,
it took me some time to test various options...

Actually your (A) advice is what did the job. I turned off DHCP server on
ADSL router and enabled NAT - DMZ Host option on it (for which I realized
that it was the closest to your description of bridged mode).

Then I configured the wireless router to use static IP config instead of
expecting DHCP server. The situation is now this:

   INTERNET
   |
telephone/adsl-wire
   |
   |
   ADSL router
wan : xx.xx.xx.xx  FreeBSD box (wired)
lan : 192.168.1.1  ip: 192.168.0.102
   | laptopgateway: 192.168.0.1
   | (wireless)|
  [internet plug]ip: 192.168.0.101 |
 Wireless router gateway: 192.168.0.1  |
 wan : 192.168.1.2:|
 lan : 192.168.0.1  . . . . . :|
  [ethernet plug]  |
   |   |
   +---+

DMZ host for ADSL router is 192.168.1.2 -- and it works!

I have one question more (forgive my ignorance): now the wireless router is
configured to use static IP config and I must provide one or more Static
DNS servers to it. Is it ok to type just 192.168.1.1 as DNS (which works
for now) or to copy DNS servers which are automatically provided to the ADSL
router by the ISP?


Your solution is a little different from what I was suggesting, but it
might be a better solution in some ways.

If 192.168.1.1 really works as a source of DNS, I would take that to
mean that your ADSL router is passing your name requests along to the
nameservers that the ISP provided it.  That's good.
If your ISP ever moves its nameservers, it will tell your ADSL box
about it, and the changes should propogate.
If you hardcoded your DNS addresses into your wireless router, you would
have to change them by hand if a change was ever required.

I believe your wireless router is now responsible for being the
firewall for your network, so make sure you've set that up.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Port forwarding behind two routers

2008-11-18 Thread Jakub T
2008/11/15 Luke Dean [EMAIL PROTECTED]


 Port-forwarding through two NATs is something I've never had any success
 with.  I have a few suggestions that have worked for me and my friends with
 this setup.

 A) Disable NAT on the ADSL router.  I think the term is bridged mode.
 Turn it into a dumb box and shift all the NAT/firewall/routing
 responsibilities over to your wireless router.  Depending on your ISP, the
 hardware, and the protocols involved, this may not be an option for you.

 B) Disable NAT on the wireless router.  This allows it to be a simple
 switch and wireless access point.  The price is that you're probably relying
 on the DHCP server in the wireless router for your wireless devices and
 you'll have to disable the DHCP when you disable NAT.  This creates new
 problems to be solved.

 C) Plug the FreeBSD box into the ADSL router, skipping the wireless router.
  Your wireless devices will still be double-NATted, but if you're not
 running servers on them, you might be able to live with that.


Luke,

Thank you very much, your advices were very helpful and I now have a working
port forwarding through two routers. Sorry for the delay in the answering,
it took me some time to test various options...

Actually your (A) advice is what did the job. I turned off DHCP server on
ADSL router and enabled NAT - DMZ Host option on it (for which I realized
that it was the closest to your description of bridged mode).

Then I configured the wireless router to use static IP config instead of
expecting DHCP server. The situation is now this:

INTERNET
|
telephone/adsl-wire
|
|
ADSL router
 wan : xx.xx.xx.xx  FreeBSD box (wired)
 lan : 192.168.1.1  ip: 192.168.0.102
| laptopgateway: 192.168.0.1
| (wireless)|
   [internet plug]ip: 192.168.0.101 |
  Wireless router gateway: 192.168.0.1  |
  wan : 192.168.1.2:|
  lan : 192.168.0.1  . . . . . :|
   [ethernet plug]  |
|   |
+---+

DMZ host for ADSL router is 192.168.1.2 -- and it works!

I have one question more (forgive my ignorance): now the wireless router is
configured to use static IP config and I must provide one or more Static
DNS servers to it. Is it ok to type just 192.168.1.1 as DNS (which works
for now) or to copy DNS servers which are automatically provided to the ADSL
router by the ISP?

Once again, thank you.
Jakub
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Port forwarding behind two routers

2008-11-15 Thread Jakub T
Good day people,

I'm trying to get wireless Internet access for my laptop and to use this
wireless router as a switch  for my FreeBSD box at the same time. This
wireless router has one Internet plug and for Ethernet plugs for wired
boxes. Now I have this situation:

INTERNET
|
telephone/adsl-wire
|
|
ADSL router
 wan : xx.xx.xx.xx  FreeBSD box (wired)
 lan : 192.168.1.1  ip: 192.168.0.102
| laptopgateway: 192.168.0.1
| (wireless)|
   [internet plug]ip: 192.168.0.101 |
  Wireless router gateway: 192.168.0.1  |
  lan : 192.168.0.1  . . . . . :|
   [ethernet plug]  |
|   |
+---+


The wireless router software configured the router like this:

Destination LAN IP Subnet   Mask GatewayInterface
0.0.0.0 0.0.0.0 192.168.1.1 WAN (Internet)
192.168.0.0 255.255.255.0 192.168.0.1 LAN  Wireless
192.168.1.0 255.255.255.0 192.168.1.2 WAN (Internet)

... so it works as a switch for two boxes and as a router at the same time.

The FreeBSD box is configured like this:

ifconfig_XXX0=inet 192.168.0.102 netmask 255.255.255.0
defaultrouter=192.168.0.1

Now I have Internet connection on both computers. However, I can't get aMule
and other apps that need port forwarding working on FreeBSD box.

First, I tried to configure ADSL router (192.168.1.1) just to forward 4662
port to 192.168.0.102, doesn't work.

Then, I tried this:
192.168.1.1 router: forward 4662 to 192.168.0.1
192.168.0.1 router: forward 4662 to 192.168.0.102

not working again.

I have a feeling that I'm missing something very simple, but can't figure
out what.

(A note: before I acquired a wireless router, forwarding with one router was
just working, with FreeBSD box configured as 192.168.1.101, so that side of
things is ok. And, no, it's not possible to use just wireless router because
I can't plug telephone wire in it.)

Can anyone help me? Should I post more details? TIA,
Jakub
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Port forwarding behind two routers

2008-11-15 Thread Luke Dean



On Sat, 15 Nov 2008, Jakub T wrote:


Good day people,

I'm trying to get wireless Internet access for my laptop and to use this
wireless router as a switch  for my FreeBSD box at the same time. This
wireless router has one Internet plug and for Ethernet plugs for wired
boxes. Now I have this situation:

   INTERNET
   |
telephone/adsl-wire
   |
   |
   ADSL router
wan : xx.xx.xx.xx  FreeBSD box (wired)
lan : 192.168.1.1  ip: 192.168.0.102
   | laptopgateway: 192.168.0.1
   | (wireless)|
  [internet plug]ip: 192.168.0.101 |
 Wireless router gateway: 192.168.0.1  |
 lan : 192.168.0.1  . . . . . :|
  [ethernet plug]  |
   |   |
   +---+


The wireless router software configured the router like this:

Destination LAN IP Subnet   Mask GatewayInterface
0.0.0.0 0.0.0.0 192.168.1.1 WAN (Internet)
192.168.0.0 255.255.255.0 192.168.0.1 LAN  Wireless
192.168.1.0 255.255.255.0 192.168.1.2 WAN (Internet)

... so it works as a switch for two boxes and as a router at the same time.

The FreeBSD box is configured like this:

ifconfig_XXX0=inet 192.168.0.102 netmask 255.255.255.0
defaultrouter=192.168.0.1

Now I have Internet connection on both computers. However, I can't get aMule
and other apps that need port forwarding working on FreeBSD box.

First, I tried to configure ADSL router (192.168.1.1) just to forward 4662
port to 192.168.0.102, doesn't work.

Then, I tried this:
192.168.1.1 router: forward 4662 to 192.168.0.1
192.168.0.1 router: forward 4662 to 192.168.0.102

not working again.

I have a feeling that I'm missing something very simple, but can't figure
out what.

(A note: before I acquired a wireless router, forwarding with one router was
just working, with FreeBSD box configured as 192.168.1.101, so that side of
things is ok. And, no, it's not possible to use just wireless router because
I can't plug telephone wire in it.)

Can anyone help me? Should I post more details? TIA,
Jakub


Port-forwarding through two NATs is something I've never had any success 
with.  I have a few suggestions that have worked for me and my 
friends with this setup.


A) Disable NAT on the ADSL router.  I think the term is bridged mode. 
Turn it into a dumb box and shift all the NAT/firewall/routing 
responsibilities over to your wireless router.  Depending on your ISP, the 
hardware, and the protocols involved, this may not be an option for you.


B) Disable NAT on the wireless router.  This allows it to be a simple 
switch and wireless access point.  The price is that you're probably 
relying on the DHCP server in the wireless router for your wireless 
devices and you'll have to disable the DHCP when you disable NAT.  This 
creates new problems to be solved.


C) Plug the FreeBSD box into the ADSL router, skipping the wireless 
router.  Your wireless devices will still be double-NATted, but if you're 
not running servers on them, you might be able to live with that.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Port forwarding behind two routers

2008-11-15 Thread Wojciech Puchar
B) Disable NAT on the wireless router.  This allows it to be a simple switch 
and wireless access point.  The price is that you're probably relying on the 
DHCP server in the wireless router for your wireless devices and you'll have 
to disable the DHCP when you disable NAT.  This creates new problems to be 
solved.


no problem. ADSL router can do DHCP for everything.



C) Plug the FreeBSD box into the ADSL router, skipping the wireless router. 
Your wireless devices will still be double-NATted, but if you're not running 
servers on them, you might be able to live with that.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]