D-Link Forums

D-Link VPN Router => DSR-500N => Topic started by: NoCoZ on July 13, 2017, 07:19:56 AM

Title: Can't redirect port on a specific machine
Post by: NoCoZ on July 13, 2017, 07:19:56 AM

Hi all,

I'm hoping you could help me for this situation.
We have a DSR-500n on a company site, the DSR is connected to internet using two DSL-320B with load balancing.

WAN1 : private IP 192.168.10.1 / public IP : 10.10.10.10 (FIXED IP)
WAN2 : private IP 192.168.11.1 / public IP : 11.11.11.11 (UNFIXED IP)

We have two servers on site :

Server A : 192.168.1.249 with http on port 80 and ftp on port 21 - Windows 2008 server
Server B : 192.168.1.248 with Oracle listening on port 1521 and a "portable apache server" listening on port 8080 for testing purpose - Windows 2012 server

We create some rules in the DSR-500n firewall as follows

FROM ZONE : WAN - TO ZONE : LAN - PORT 21 -Allow always - any source host - local server 192.168.1.249 - Internet destination WAN1
FROM ZONE : WAN - TO ZONE : LAN - PORT 80 -Allow always - any source host - local server 192.168.1.249 - Internet destination WAN1
FROM ZONE : WAN - TO ZONE : LAN - PORT 1521 -Allow always - any source host - local server 192.168.1.248 - Internet destination WAN1
FROM ZONE : WAN - TO ZONE : LAN - PORT 8080 -Allow always - any source host - local server 192.168.1.248 - Internet destination WAN1

The two first rules are working well, but not the ones for server B (192.168.1.248), when I use telnet from Wan with PUTTY, I have "Network Error : Connection refused". Here is what I use to test from WAN :

Quote

telnet 10.10.10.10 21 -> OK
telnet 10.10.10.10 80 -> OK
telnet 10.10.10.10 1521 -> CONNECTION REFUSED
telnet 10.10.10.10 8080 -> CONNECTION REFUSED

So I tried to disable all firewalls on server B, but it still does not work from WAN (whereas it works when I use Telnet from inside the LAN itself on the specified ports 1521 and 8080). Note that server B seems to use the load balancing because when we use website such as "mon-ip.org" the IP changes beetween the two modems.

We need this 1521 port from server B to be accesible from the WAN. Could someone help me please ? I would really appreciate

Title: Re: Can't redirect port on a specific machine
Post by: FurryNutz on August 03, 2017, 10:02:42 AM

Any progress on this?