Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[diego]

Hi all,
i've a problem with the configuration of external access for Firewall DFL-210. I need to activate the web administration interface on the firewall for exernal access(the default configuration enables to access only from LAN).
I added a configuration on the menu Remote Management with:
source:
wan interface/all networks
destination:
any interfaces/ all networks.

 I modified also the destination iface with any interface / ip_wan or core/ip_wan . With these configurations the firewall's web iface isn't reachable.

I tried to add some port forwarding rules for https service but nothing.
If i make a port scan to the external static IP of wan iface the only opened port is 21 FTP(Control).

Any suggestion?

Thank you.

D.

[the Network Guy]

I recon you reset all your rules to defaults. It's prolly the rules that's causing the problem.

Can you put up a snapshot of the rules?

What you did for remote mgmt is right.

It's S.I :- WAN1 S.N :- All Nets
     D.I :- Lan    D.N :- LanNet (You can also leave the D.I to any and all Nets)

Nash

[diego]

These are two screenshots(in pdf) of the mgm page focused on the filters and of the IPRules pages.
As you can see there are three rules to portforward the https service to 192.168.1.1 that is the internal  address from where i can reach the mgm login page.
I followed the howtos by dlink to make these rules for portforwarding, but i think that something is missing.
I also deleted these rules and added a rule like your suggestion but nothing(with ALLOW action).
I forgot to say that i made an hard reset of the DFL-210 for a password lost by the previous technician.

https://diegotech.wordpress.com/wp-admin/media.php?action=edit&attachment_id=100

https://diegotech.wordpress.com/wp-admin/media.php?action=edit&attachment_id=99

Thank you in advance,

D.

[Fatman]

I can't view your PDFs (it wants a login) however I can offer some advice.

You should NOT use a port forward for remote management purposes.  Your original description of changing the default remote management option to read any/all_nets is correct.  In fact your IP Rules were most likely the cause of the issue.

IP Rules are necessary for remote management only if you unchecked "HTTP Before IP Rules" under the advanced remote management options.