cancel
Showing results for 
Search instead for 
Did you mean: 

Port Forwarding with SAR110

silverfox
Newbie
Posts: 4
Registered: 05-08-2007

Port Forwarding with SAR110

I'm having problems getting an internal web server to be accessed from the web.

I've set up an RDR rule as follows:

Rule ID = 10
Rule Flavor = RDR
IF Name = ppp-0
Protocol = TCP
Local Address From = 192.168.7.2
Local Address To = 192.168.7.2
Global Address From = a.b.c.d
Global Address To = a.b.c.d
Destination Port From = 80
Destination Port To = 80
Locl Port = 80

Where a.b.c.d = my public static IP address

Also tried Global Address From/To = 0.0.0.0

The rule is not working, I'm wondering if its because the router configuration tool listens on port 80 on both the internal and external IP address.

Any thoughts or tips would be great, as of course, would a solution.

Thanks

Mike




3 REPLIES
N/A

RE: Port Forwarding with SAR110

silverfox
Newbie
Posts: 4
Registered: 05-08-2007

RE: Port Forwarding with SAR110

OK - So I got the RDR rule to work by reading the threads that were mentioned.

However, the only way this works currently is to set the Global Security LEvel on the IP Filter page to "none"

This I'm obviosly not too happy about, however when I set the option to Low I lose all outbound browsing as well as inbound access to my web site.

I tried to set IP filter rules to counter this but to nop avail.

However I only used submit on the rule and commit on the Admin page. Should I also reboot the router with each rule configured?

Thanks

Mike


N/A

RE: Port Forwarding with SAR110

Without knowing your rule setup it is difficult to advise.

Remember that rules are processed in order and that processing stops when the router makes the first match. Therefore on my 110 I have the first (lowest rules) set to allow all outbound traffic with stateful inspection enabled. Following (higher) rules are used to enable (or restrict) specific inbound traffic. Note - depending on how the IP filters are configured it may be necessary to specifically allow traffic to your target server/port (presumably 80) for your HTTP traffic.