Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[gunrunnerjohn]

Well, I just logged into that site anonymously and did a dir listing, so can you post the log from my connection?  That should answer the question of being outside the network, since I'm pretty sure this NAS isn't on my network!

[fordem]

lizzi what version of the firmware are you using? 1.08b05?

I can confirm that your DNS-323 does respond as described, which I find interesting, since - based on the config screens shown - it shouldn't

Oh - I'm the 190.80.x.x entries in your log.

[P01arBear]

For some reason, he is right it does work.

This is what I changed in my current settings since it works;

- Have unchecked report external IP address.
- Have disabled the SPI firewall on router.
- Have changed TCP to address restricted (UDP was already endpoint endependant).

And it works now...

Edit: I have now tried to enable the SPI firewall, and it still works so the problem is not from there.

[gunrunnerjohn]

And you guys thought I was imagining things.

[P01arBear]

Well, I've located the problem precisely after many tests;

TCP Endpoint Filtering must be set to ADDRESS RESTRICTED.

It's great to have located the problem, but...Since I was using endpoint independant and now changed to address restricted, should this affect any softwares I use? What is the differance?

[lizzi555]

Hihi

But fordem and gunrunnerjohn, 
don't know what you tried.

My DNS-323 is on port 40 and did not report anything in the log. (there are only 2 .mp3 files in the dir)
But my Synology on port 21 did :



I'm running 1.08b07 but it also worked with 1.07 and 1.08b05
DIR-655 FW 1.32b04

[gunrunnerjohn]

I just used Windows FTP to do an anonymous login to an FTP server at the address you provided.

[lizzi555]

With ftp://lizzi556.dyndns.org:40/ you should have seen something like this:

FTP root at lizzi556.dyndns.org
To view this FTP site in Windows Explorer, click Page, and then click Open FTP Site in Windows Explorer.
--------------------------------------------------------------------------------

05/28/2007 12:00      9,267,855 01 Every 1's A Winner (Sexy Remix).mp3
03/28/2001 12:00      3,397,632 Herbert Grönemeyer_Halt Mich (Unplugged).mp3

But forget the log of the DNS, it is nothing..
Up to now there are only few "get" items logged - no IP, no login
 

[gunrunnerjohn]

When I click that link, I go right to IE and see a page with two MP3 files on it.

[P01arBear]

Could any of you explain to me what Nat endpoint TCP filtering does? I have a small idea, but would like to understand better. Should this affect any softwares I'm using?

[lizzi555]

difficult to explain in short words...

Well, I've located the problem precisely after many tests;

TCP Endpoint Filtering must be set to ADDRESS RESTRICTED.

It's great to have located the problem, but...Since I was using endpoint independant and now changed to address restricted, should this affect any softwares I use? What is the differance?

address restricted means a connection only from one IP-address to another specific IP address like ftp between 1 server and 1 host per connection. Firewall will check data packets whether  destination ip address belongs to this connection

endpoint independed: doesn't matter to which address the dataflow points - firewall should pass through each packet regardless of destination IP (mostly udp connections)

Perhaps the difference between the two protocols helps a bit understanding:

http://en.wikipedia.org/wiki/Transmission_Control_Protocol
http://en.wikipedia.org/wiki/User_Datagram_Protocol

[P01arBear]

Well that's alot of litterature. When I'll have some free time maybe...

Until then, my main usage is for;

Cabos (P2P client)
uTorrent
Xfire (Voice chat)
T4C (A small game that uses only port 11677 but I don't know if it's UDP or TCP)
...MSN/FTP/Surfing web

Think it should affect in any way these programs?

I remember have changing NAT TCP endpoint to independant, I just don't remember for what reason. I think it was to optimise P2P.

[lizzi555]

Think it should affect in any way these programs?

No, don't think so. Never had problems with this setting.
As a TCP connection allways uses fixed addresses, the firewall will only block malformed data packages.

Have fun with your ftp 

[lizzi555]

Sorry but wrong.

http://bit.ly/3t7fI3

TCP does not require fixed addresses... FTP uses TCP as everyone knows and TCP is end to end.

Yep

sometimes I'm missing the right words when trying to explain it easier.
I still have to translate my thoughts to english.

Sorry