Port forwarding difficulties KLS-575

[mwphoto]

Hi,

I'm having difficulty port forwarding on a Kcorp KLS-575. Here's the full story.

KLS-575 firmware 2.0.0.0 (latest)
ISP: NTL STB

The PC I wish to port forward to has a static IP and is set up as a reserved IP in the router config. All other clients are DHCP.

Port forwarding set up for port 9000 to StaticIP:9000 (it's a web server) tried ALL and TCP (StaticIP is the local IP address of the machine with the web server)

on my LAN http://StaticIP:9000 works nicely

http://externalIP sends me to the router config page so requests from the outside world can be seen by my router.

Firewall has been tried in various configurations (enabled/ disabled/ forward rules set in various configurations)

And the killer is http://externalIP:9000 always gives connection refused

After trying all the above the only explanations I can come up with are:
1) faulty router (is there anything else I can do to check this)
2) some strange interference with NTL (ie NTL allows a request on port 80 but not others)

Does anyone else have any ideas/experience to solve this problem?

Malcolm

[handyman]

you need to make sure you turn off the ability to access your router config from any ip. This wil allow you to only access it from internal. If thats a major issue you could always vnc to your pc to access the router

[mwphoto]

I agree

But for the time being I'm trying to find any combination that works. I am happy to temporarily turn off security to find a working combination. If I do I'll build the security back up afterwards.

Thanks for the advice though.

Malcolm

[handyman]

it was not a security issue, I had problems forwarding through a belkin router with 'access from external ip' turned on.

Gotta love that feature though gives you instant access to router configs if your wireless browsing.

The amount of unsecure routers about is nuts....

[mwphoto]

Hmm.

I'm not sure I can restrict this - I can (and have) password protected it, but I can't see anywhere where I can turn off the external IP access. Do you know if this is a feature of the Kcorp KLS-575?

Malcolm

[handyman]

try taking it out of the reservation and manually asigning it a ip out of the dhcp range.

then redo your port forwarding.

It apears the routers definition of reserved means its a dmz (and as such completly unprotected from the router firewall)

---------- Post added at 18:08 ---------- Previous post was at 18:04 ----------

In the security settings theres a setting under where you specify the router access password that allows you to 'Lock access point'

As I understand it this locks access to those pcs pysicaly connected to it on the network not to any WAN pc's or even wireless one. hth

---------- Post added at 18:09 ---------- Previous post was at 18:08 ----------

can I also add what a pug ugly router it is

---------- Post added at 18:12 ---------- Previous post was at 18:09 ----------

Also I have had issues acessing http:// myipaddress:8080 etc from a internal pc some routers dont like it. i always grab a mate on msn to test it.

[mwphoto]

Hi,

Thanks for all your help - not there yet though - I'm just going to try the reserved address thing, but I thought I'd post that I can't find the security 'lock' option. Here are the options I have . . . .

Change Password

Set the password needed to access and configure your Access Point.
New Password: (3-16 characters) Confirm Password:
System Settings Save settings to Local Hard Drive

Load settings from Local Hard Drive

Enable Telnet Service
Enable Remote Telnet From WAN Port

[handyman]

3.2.5.3 in your manual here

[mwphoto]

Ok - taking the ip out of the reservation and changing the DHCP range didn't help

Malcolm

---------- Post added at 18:34 ---------- Previous post was at 18:23 ----------

Thanks for the reference - the manual doesn't match the screen I see According to their website I have the latest firmware however the configuration screen is not consistent with the manual ...

Firmware Version: KCORP_2.0.0.0 Web Version: 1.0.0.0
Screenshot: http://www.bpscgi.co.uk/kls575config.jpg

Also since they no longer have email or phone support things aren't looking good . .

Malcolm

[handyman]

So if your dhcp ip range is 192.168.1.10-100
have you assigned the ip 192.168.1.2 to your pc. rebooted (always a good one)
then port forwarded port 80 and port 8080 to 80 and 8080 on the static internal ip?

[Celtic67]

I've got the same router (2 of them) and have the same problem. It was driving me mad before Christmas, but haven't looked at it again until today. I'll familiarise myself with it again, see if we can work it out between us.

I've tried both of my routers and they behave the same way, so it seems less likely that it's a faulty router.

[Graham M]

Hey guys if i try and access a port forward from within my network it fails the same way but if I access it from an external source it works fine. I think its just one of the many intricacies of NAT.