Airtel Broadband: Port Forwarding

Here is the Scenario.....

I want to host a website on my system , I had heard about port forwarding, by which I can create a virtual server on the router/ADSL-modem.
Configuration for virtual server is as shown in pic..


I have Apache Tomcat server running on my system on port 8000.But when i am connecting using the URL hxxp://xx.xx.xxx.xxx:8000/ using my IP address from another system outside my network, it gives unreachable.

I had also configured virtual server on port 80 (external port), and 8000 as internal port,
but when connecting using hxxp://xx.xx.xxx.xxx/ I get the Router Login promt, from my inner network as well as from external system.
Also configured the same IP on, DMZ but nothing expected happened. How can I test or make it sure that my virtual server is properly configured in router?

Have anyone done it before?What is causing problem....?

QUOTE(cools @ Nov 9 2006, 02:12 PM) [snapback]68277[/snapback]
but when connecting using hxxp://xx.xx.xxx.xxx/ I get the Router Login promt, from my inner network as well as from external system.
[/b]


Try opening up some port other then 80 (e.g. 8000). Does that (http://xx.xx.xx.xx:8000/) work?

If it does then the problem could be due to admin interface.

Disable admin interface of router. In case of D-Link 5-0T there is an option for disabling wen interface for WAN IP.

That should free up port 80 for your own site.

QUOTE(netfreak @ Nov 9 2006, 02:47 PM) [snapback]68279[/snapback]
Try opening up some port other then 80 (e.g. 8000). Does that (http://xx.xx.xx.xx:8000/) work?

If it does then the problem could be due to admin interface.

Disable admin interface of router. In case of D-Link 5-0T there is an option for disabling wen interface for WAN IP.

That should free up port 80 for your own site.
[/b]

I had written, I had tried on port 8000 and got "Page cannot be displayed' error.
Anyways I am using beetel 220BX router...

In that case, proble seems to be somewhere else.Do you have any kind of firewall on the PC?

QUOTE(netfreak @ Nov 10 2006, 12:05 AM) [snapback]68333[/snapback]
In that case, proble seems to be somewhere else.

Do you have any kind of firewall on the PC?
[/b]

No firewall, I am too not able to diagnose the problem ,have a look at the figure, is the configration seems to be correct??
Any way to debug the virtual server..

I am also trying to get a webserver setup, the only difference being that I am using IIS. I seem to be getting a "Cannot find server or DNS" Error. Althought my port is open. I checked using https://www.grc.com/x/ne.dll?rh1dkyd2
But getting my ports open did not help anyone know why?

Cools is your router firewall turned on or off? It took me a while to find out that the beetel 220bx series had an in built firewall. Turn it off and let us know what happened.

QUOTE(Calamity @ Nov 11 2006, 02:47 PM) [snapback]68451[/snapback]
I am also trying to get a webserver setup, the only difference being that I am using IIS. I seem to be getting a \"Cannot find server or DNS\" Error. Althought my port is open. I checked using https://www.grc.com/x/ne.dll?rh1dkyd2
But getting my ports open did not help anyone know why?

Cools is your router firewall turned on or off? It took me a while to find out that the beetel 220bx series had an in built firewall. Turn it off and let us know what happened.
[/b]

Firewall is off, however there is no explicit option to turn on or off, only options available are
IP filtering &
MAC filtering
which have no defined policies.

IP filteringMake sure the server you got your website on has a static IP address

QUOTE(cools @ Nov 11 2006, 09:42 PM) [snapback]68476[/snapback]
Firewall is off, however there is no explicit option to turn on or off, only options available are
IP filtering &
MAC filtering
which have no defined policies.
[/b]

Forget telnet for now it is easier configuring the router using the web interface. Go through the configuring your router options or what ever it is called (I do not remember where it is exactly I will have a look at it tomorrow and give you a detailed explanation if you are not able to figure it out ). There after the screen where you enter your Airtel username and password. You will have an option "Enable Firewall" Uncheck it if it is checked. The firewall is enabled by default if you are using PPPOE.

Let me know if you are able to find it. Otherwise I will give you a better explanation tomorrow.

QUOTE(Calamity @ Nov 12 2006, 10:53 AM) [snapback]68501[/snapback]
Forget telnet for now it is easier configuring the router using the web interface. Go through the configuring your router options or what ever it is called (I do not remember where it is exactly I will have a look at it tomorrow and give you a detailed explanation if you are not able to figure it out ). There after the screen where you enter your Airtel username and password. You will have an option "Enable Firewall" Uncheck it if it is checked. The firewall is enabled by default if you are using PPPOE.

Let me know if you are able to find it. Otherwise I will give you a better explanation tomorrow.
[/b]

yes I am getting firewall enabled , but no option to disable it. Only options I am getting wth the Web interface are

Device info
DSL status
WAN
LAN
Password
DSL settings
Reboot.

In WAN I am not getting any option to disable the Firewall. But in telnetting router , in firewall no policies or ports are restricted...

Plz update me with the settings , if I am missing any.... or I have to update the software to have those settings.
However , Can I update the Software????

Ok this is what you have to do.

Goto http://192.168.1.1/main.html it will ask you for a username and password enter your router username and password.
You will have a screen with the following options


Expand the Advanced Setup as follows


Click on "WAN"
On the right you will have details about your connection the type of protocol it is using, state and a other setting details. At the end of that line you will see a button called edit. Click on it.

You will come to a screen that has you setting details with options to change them. Leave them as they are.
At the bottom you will see two buttons - "Back" "Next".
Click on the next button three times. You will come to a page that looks like this
http://i15.tinypic.com/3y4b4sx.png

You can enable/disable the firewall here. then click next again and then when you get the save option save it. Now goto http://www.grc.com/x/ne.dll?rh1dkyd2 and check and see if you port is open.

BTW set your Webserver port to something other than port 80 since the router has a server listening on this port. So there seems to be a clash.

If shields up says that your port is closed try rebooting your router. This method worked for me. Hope you can get it to run too.

Are you using Macafee?

Let me know if you were able to get it up and running or not

QUOTE(Calamity @ Nov 13 2006, 10:44 AM) [snapback]68585[/snapback]
Ok this is what you have to do.

Goto http://192.168.1.1/main.html it will ask you for a username and password enter your router username and password.
You will have a screen with the following options


Expand the Advanced Setup as follows

Click on \"WAN\"
On the right you will have details about your connection the type of protocol it is using, state and a other setting details. At the end of that line you will see a button called edit. Click on it.

You will come to a screen that has you setting details with options to change them. Leave them as they are.
At the bottom you will see two buttons - \"Back\" \"Next\".
Click on the next button three times. You will come to a page that looks like this

You can enable/disable the firewall here. then click next again and then when you get the save option save it. Now goto http://www.grc.com/x/ne.dll?rh1dkyd2 and check and see if you port is open.

BTW set your Webserver port to something other than port 80 since the router has a server listening on this port. So there seems to be a clash.

If shields up says that your port is closed try rebooting your router. This method worked for me. Hope you can get it to run too.

Are you using Macafee?

Let me know if you were able to get it up and running or not
[/b]


Thanks Calamity, I have got my port opened, and firewall turned off.
But still I am not able to connect to my server
Configuration is shown in picture



Installed a virtual server , but still getting Page not Found!!!

You do not need UDP to run a web server. So get rid of the second entry.

A few quick questions

What anti virus are you running on your machine.

Try turning off the XP/Server firewall even if you have added the port to the exception list.

Did you verify that the required port is visible from outside?
If not go to http://www.grc.com/x/ne.dll?rh1dkyd2 and type in the 8000 and click on User Specified port.
It should return something like this

and not this

If it returns the status as stealth then there is something still blocking that port.

I feel you are almost there it is just a small error some where we should be able to get you up and running soon.

One more question. You are able to browse your site from your machine right?

It would be helpful if you posted the exact error that you get when you try accessing the website using www.anonymouse.com You cannot directly connect using your public ip.

http://www.canyouseeme.org/ is the site through which I checked my port and got the message

Success: I could see a service on xx.xx.xx.xx on port (8000)
Reason: Your ISP is not blocking the port.

That means port is reached , and when I am running a server on my system (with ip 192.168.1.2 as internal ip for server) at 8000 , than only I am getting , success when checking the port.

Else, if my server is down than an error is shown , i.e. "No service is running on the port".

This means my Server is forwarded.. to my system, but when trying to coonect through my WAN ip and port 8000, for eg:
59.144.142.137:8000 from my LAN , I am getting "page not displayed". Is there something like, we cannot connect to our forwarded server from our internal LAN, which I had read it somewhere.

Anyways using my LAN ip 192.168.1.2:8000 I am getting my website, its running.
No antivirus, no windows firewall , nothing bloacking my port.

however there is no option at http://www.grc.com/x/ne.dll?rh1dkyd2 to check the port.

What do you mean by "You cannot directly connect using your public ip." ? plz clarify...

Sorry about the link

The link is
https://www.grc.com/x/ne.dll?bh0bkyd2
Go there and click proceed and then specify your port and then press User Specified Custom port scan.

That should tell you if the port is open or not.

I checked http://www.canyouseeme.org/ That also seems to be working so i guess like you said the problem is not in port forwarding but somewhere on your system.

What I mean by "You cannot directly connect using your public ip." is that you cannot do what you are trying to do i.e typing your public ip into your browser window yo check if the site is up will not work. You will always get a page not found or cannot connet to the address message depending on what browser you are using.

To check if your webserver is up goto
www.anonymouse.org
and type your address from there. Since it is a proxy you will be able to see what happens when you try to view your web site from outside your network. So if your website is visible externally you will be able to see the website displayed.

Hope that cleared your doubts. Let me know how it goes