Thread: Can not port forward Teracom router

I would like to have a DMZ host with all ports forwarded so that all the ports on my 192.168.1.2 Linux server can be accessed from the internet.

Right now I can only see the Linux server apache page in the Lan but when I try to access it from the internet by accessing the 59.x.x.x external ip of the router, I can see only the router config page but not the apache .

I have followed the instructions as indicated by the router manual for port forwarding and for creating DMZ host.
Attaching screen shots of my router page.

I have opened this new thread because the earlier thread grew very big.

http://www.indiabroadband.net/bsnl-b...tml#post341341 (Port forwarding in BSNL Teracom)

Some more screen shots attached.

very similar to your problem:
How to access Apache server fro the internet.?

never setup a server before but what i understand is that port forwarding for port 80 is essential & just my opinion but DMZ & port forwarding should not be used simultaneously.my suggestion is disable DMZ,set port forwarding for port 80(separate rule for tcp & udp protocol)to your server static internal ip(192.x.x.x),delete all ip filter rules & then see what happens.

deepakdeshp

The setting you have done on your router is OK. But what I see the problem is the port you set on the port-forwarding section is 80, which is default port of your router GUI page and your SERVER page. You need to change the default port 80 of your server or your router GUI page. Maybe the port 80 of your router can be change from the router configuration page. If you change the server port number 80 to 8080 then put this 8080 port address to the port-forwarding section. Now you have to browse your server with this port address 8080, like http://59.95.X.X:8080, it should work.

If you see you cant browse your server from the 59 address or from your friend's house then there is a problem in the router port-forwarding section. I found some BSNL modem has this type of problem ( port-forwarding problem ).

If your modem has port-forwarding problem :-

Use the PPPOE from Desktop not from the modem. If you use PPPOE from desktop you get the IP of 59 direct on your desktop. Make sure the IP you get can be PING from your friend's home. If not PING then you have to set the firewall open for your SERVER. YOU HAVE TO MAKE SURE THE PING IS POSSIBLE FROM YOUR FRIEND'S HOUSE. If you can PING your 59.95.X.X address from the outside then you can browse your SERVER Web address from the outside. Do not need to change your SERVER default port address 80 to another address. I doubt your modem is faulty to forwarding the port address.

I got your PM to my email address

@deepakdeshp

From Post No 3 by @whitestar_999

....but DMZ & port forwarding should not be used simultaneously......

]........my suggestion is disable DMZ
delete all ip filter rules & then see what happens....

000: If you want to forward all ports to a particular Server,
you can configure DMZ (De-Militarized Zone).
This will supersede all other port forwarding rules.

see attachment. for similar modem C2110 .
Feedback please.

Originally Posted by whitestar_999

very similar to your problem:
How to access Apache server fro the internet.?

never setup a server before but what i understand is that port forwarding for port 80 is essential & just my opinion but DMZ & port forwarding should not be used simultaneously.my suggestion is disable DMZ,set port forwarding for port 80(separate rule for tcp & udp protocol)to your server static internal ip(192.x.x.x),delete all ip filter rules & then see what happens.

1. Disabled DMZ and tried. It did not work. I would rather have DMZ host rather than only port 80 forwarded as I want to forward ALL the posrts on my Linux server.
2. I want to try with a totally separate port , 22 . I Did separate TCP and UDP port forward entries for port 22, the ssh port.
3. Deleted all ip filter rules.

Yet the same problem , I can ssh using port 22 from the LAN but can not from internet. When I ssh from internet I get error "connection refused". It is same the same message as when I try to ssh to my router

^^^ Your Modem has port-forwarding problem. Don't think if you change your modem to another one with same Model and get the problem overcome. Either use PPPOE from desktop or use a Modem which can able to forward your port mentioning address.

@Indranil
The attachment in post No 5 also specifies FW version for C2110.
( Bsnl Kerala site)
2.
Also for user: access control WAN side HTTP/TELNET etc missing in this model.

Originally Posted by essbebe

The attachment in post No 5 also specifies FW version for C2110.( Bsnl Kerala site)

I found port-forwarding problem in C2110 before. So I am guessing the same problem has with this model too. The settings done in the port-forwarding section or DMZ section is OK. But not working because problem has in the software of this model. Either use PPPOE from desktop or use a modem which can able to forward the port correctly.

Originally Posted by Indranil

^^^ Your Modem has port-forwarding problem. Don't think if you change your modem to another one with same Model and get the problem overcome. Either use PPPOE from desktop or use a Modem which can able to forward your port mentioning address.

I had set up port forwarding successfully with a different model of the router. Already I already changed modem once when the port forwarding stopped working, but changing modem did not help. Next I will try pppoe from my xp desktop. I have 2 computers connected to the router so do I configure pppoe from both my desktops, Linux and XP?

^^^ I think it will better if you change your modem to another model or purchase a modem which can support or able to forwarding port correctly. You use two computers but the server is the Linux, you cant connect to server from outside of LAN if you use or setup the PPPOE From Desktop in XP with ICS support. Either first setup the PPPOE From Desktop in Linux, but I don't know Linux has the ICS like Microsoft or not to share the Internet.

But Terracom does have port forwarding. It has all the necessary screens to support port forwarding, but somehow it is not working.

My working port forwards on another type of modem Sterlite Huawei stopped working and hence I bought another Terracom modem on which the port forwarding isnt working too.

I think BSNL may have blocked it. So have we explored all the options and stop trying any more?

Do you have this menu page ?


similar to access control lan/wan side posted earlier?
All options except HTTP seen.
2.
Also disable any tr-069 client/acs/snmp controls menu items.
3.
Do you have the manual for your modem ?
4.
To forward ALL the ports, as suggested use a Dialer to connect to Internet.
5.
With present settings check Firewall application also
6
DMZ enabled is NOT recommended . for Windows OS.
7.
From old thread:

I tried to put the DMZ host address as 59.x.x.x in the router configuration but it gave error.........

let us say your Ip is 59.12.34.45 . You enter it in DMZ
then SAVE/REBOOT the modem.
Above IP will change. Probability of same dynamic IP being allotted remains doubtful. This could be the reason.
8.

My working port forwards on another type of modem Sterlite Huawei stopped working.....

Is it Sterlite 300AX (similar to Beetel110TCI which I have )

Feedback.
Please do not use full quote. Reply item wise .

USER manual
http://www.4shared.com/get/HcWwHvDt/...v14U10YBI.html

Originally Posted by essbebe

@Indranil

2.
Also for user: access control WAN side HTTP/TELNET etc missing in this model.

WAN access is available by telnet and HTTP . The router can be magaed remotely

Originally Posted by essbebe

Do you have this menu page ?


similar to access control lan/wan side posted earlier?
All options except HTTP seen.

My Apache is down so trying with ssh , at port 22 which works in LAN
2.
Also disable any tr-069 client/acs/snmp controls menu items.

There is no menu like that.

3.
Do you have the manual for your modem ?

I have manual for my modem

4.
To forward ALL the ports, as suggested use a Dialer to connect to Internet.

How do I do it? Means not always on but by dialling I need to connect to net?

5.
With present settings check Firewall application also

Which firewall application? DOnt know how to.

6
DMZ enabled is NOT recommended . for Windows OS.

I am using Linux server not WIndows

7.
From old thread:

let us say your Ip is 59.12.34.45 . You enter it in DMZ
then SAVE/REBOOT the modem.
Above IP will change. Probability of same dynamic IP being allotted remains doubtful. This could be the reason.

As soon as I SAVE the error is given, the error is before re booting.
8.

Is it Sterlite 300AX (similar to Beetel110TCI which I have )

This router was on rent and hence I do not have it. It is returned to BSNL.


Feedback.
Please do not use full quote. Reply item wise .

USER manual
Teracom T2 Gawv1.4U10Y.BI.pdf - 4shared.com - document sharing - download

My response is in Italics bold below each question

@indranil and @whitestar_999
my thanks to you both for responding to
member's request ( on my suggestion )

@deepakdeshp

Sorry. Unable to help you further.
Please do post the settings when you succeed to access your web server
.Hope solution will be posted soon.

2.
Also disable any tr-069 client/acs/snmp controls menu items.

There is no menu like that.
3.
Do you have the manual for your modem ?

I have manual for my modem


Obvious , you downloaded the user manual, but
not reading/referring it properly.

6
DMZ enabled is NOT recommended . for Windows OS.

I am using Linux server not WIndows

I am lost!

is it Sterlite 300AX (similar to Beetel110TCI which I have )

This router was on rent and hence I do not have it. It is returned to BSNL

no point in giving suggestion to download the manual ( similar model ).

Originally Posted by essbebe

Sorry. Unable to help you further. Please do post the settings when you succeed to access your web server

I cant understand your comments that I am not reading manual properly. The experts have confirmed that I have configured correctly nothing wrong in that. I approached the forum because after I configured, which I felt correct wasnt working.

And note that many of your suggestions didnt have any logic, did you think it will work if I port forward TCP and UDP both when we know Apache and ssh is TCP? You have to suggest something logical not for the sake of suggesting.The other experts like Indranil suggested something logical.

But anyway, thank you for all the trouble and trying to help me. I will surely post the solution if I get, which I doubt.

I feel BSNL may have blocked it. Any way of confirming it from BSNL?

//Mod note : Would appreciate if you show a bit more respect to those who are trying to help you. Not all suggestions may yield result, but not suggesting them will be same as ignoring your problem. Hope that is not what you want. //

I cant understand your comments that I am not reading manual properly.

2.
Also disable any tr-069 client/acs/snmp controls menu items.

There is no menu like that.
3.
Do you have the manual for your modem ?

I have manual for my modem

Obvious , you downloaded the user manual, but
not reading/referring it properly.

from the manual:



Para two

My posts ( more than 25 or 30 for your problem ), without "LOGIC" if you have tolerated so far,
I am grateful to you , for your tolerance and patience.

"what to do?" I am like that only !!!
http://www.indiabroadband.net/bsnl-b...tml#post341343 (Port forwarding in BSNL Teracom)

.You know what you are doing is correct.
No suggestions.

I should not have changed my mind !!

Have a nice day.

did you think it will work if I port forward TCP and UDP both when we know Apache and ssh is TCP?

i gave that suggestion & reason was in certain nokia siemens modems with interface similar to yours the protocol "all"option doesn't work correctly.

i always try to follow the "KISS" principle when dealing with computer setup issues.since you have tried all options why not follow some basic steps here.first connect your modem to a windows/linux os & try downloading a torrent to check if port forwarding works.try different ports even 80/8080 etc.if it works then disable/delete all other settings like DMZ,IP filter etc & simply setup a port forward rule for tcp at port 80.if it still doesn't work then setup your modem in bridge mode & create a dialer in linux(search forum/net for bsnl ubuntu dialer)& then try to connect.if it still fails either you have something wrong with your pc setup or modem itself.

Hello Gurus'

The problem was not existing at all..Let me explain from the beginning. I had forwarded ports successfully with Huwei Modem and my Linux web server was available over the internet. I tested it from the LAN by using the external ip in the browser and it worked. All of a sudden it stopped working when I tested using http:://myext ip . I changed router, bought a Terracom.

I tried many things but the same result with Terracom too. ie. when I did http://my ext ip from the LAN i it would show me the Router page. I never tried testing from the internet.

Then once I tested from the internet and it worked!!

Solution:- If you test the internet access from the LAN you end up seeing the Modem page.If you do the same thing from the internet i.e. http://my ext ip , then I can see my Linux page.


Let me know if you want any other details.

Thanks to all who have tried to help me esp sebebe and whitestar. My pologies if I hurt anybody.

just to add some info here.port forward rule does not apply to packets originating from within the local network.that is why when you enter your external ip in a browser on a system within lan then with no port forward rule applied it as usual opens the modem/ruter configuration page.

PF: Traffic Redirection (Port Forwarding)

Often, redirection rules are used to forward incoming connections from the Internet to a local server with a private address in the internal network or LAN, as in:

server = 192.168.1.40
pass in on $ext_if proto tcp from any to $ext_if port 80 \
rdr-to $server port 80

But when the redirection rule is tested from a client on the LAN, it doesn't work. The reason is that redirection rules apply only to packets that pass through the specified interface ($ext_if, the external interface, in the example). Connecting to the external address of the firewall from a host on the LAN, however, does not mean the packets will actually pass through its external interface. The TCP/IP stack on the firewall compares the destination address of incoming packets with its own addresses and aliases and detects connections to itself as soon as they have passed the internal interface. Such packets do not physically pass through the external interface, and the stack does not simulate such a passage in any way. Thus, PF never sees these packets on the external interface, and the redirection rule, specifying the external interface, does not apply.

I am not able to access my web server over the internet again.

If I access http://117.195.44.13 I see the router page from intranet and dont see any page from internet from ext ip.
so I tried c> telnet 117.195.44.13 80 and I am not able to connect.

There are no changes in router configuration, yet what was working is not working now. So any clues?

The ip address of the Linux server has changed from x.x.1.2 to x.x.1.7 . May be this is causing the problem?

Originally Posted by deepakdeshp

I am not able to access my web server over the internet again.

If I access http://117.195.44.13 I see the router page from intranet and dont see any page from internet from ext ip.
so I tried c> telnet 117.195.44.13 80 and I am not able to connect.

There are no changes in router configuration, yet what was working is not working now. So any clues?

The ip address of the Linux server has changed from x.x.1.2 to x.x.1.7 . May be this is causing the problem?

The ip address of the Linux server has changed from x.x.1.2 to x.x.1.7 . All these days the server address was always x.x.1.2 and now a days it is getting x.x.1.7. The router is a DHCP and I do not know what caused it to change the address from x.x.1.2 to x.x.1.7....


And its working now.

Once bitten, twice shy
Thanks for the logical solution .