Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[rjesse]

I have a server running inside my DSR-250 that needs to see the real IP of connecting clients ( the app handles security differently depending on the IP).

I have configured a firewall rule to forward the external port to the private port on the server, this all works fine, except that router is translating all inbound IPs to the Firewall Private IP address.

My EBR-2310 does not do this, it passes the external IP Address through.

Is there a way to fix this?   

The docs indicate that there is a DMZ option but this does not show up in any of the gui configs.

Rick

[FurryNutz]

I presume that this router is working as designed as most other D-Link routers. This is call NAT and it handles the public IP address that the WAN side gets and translates that to the private LAN side. The only why to get thru this and the firewall is to use the DMZ. The EBR may have not have had any NAT capabilities which is why you might not have seen this. Most all newer routers use NAT.

Is the FW up to date? I would update the FW to see if the DMZ option appears in the UI. If it does not, I would phone contact D-Link support and get advanced level help on this.

Let us know how it goes.

[rjesse]

Finally got through to Dlink, there is a flaw with this box.  When PPTP is turned on it NAT's/Proxies inbound traffic.

An no this is not how a firewall is supposed to work, NATing should only translate internal to your public on the way out, public addresses should be shown internally otherwise how would you log/control who is connecting to your systems.

The claim is they are working on a fix, not sure when, the solution they presented was to turn of PPTP, not really an option for me as that is why I bought the box.

-----
Dear Customer:

After check the config, we find the root cause is from PPTP server, this is identified a bug, RD is fixing it now.
-----

I guess a a trip back to the store to see if I can get a refund.

Rick

[FurryNutz]

Glad they were able to give you feedback. Hope you will find one that works well for you. Sorry it didn't work out for you. Thanks for sharing the info.