miniupnp.tuxfamily.org Forum Index miniupnp.tuxfamily.org
The forum about miniupnp and libnatpmp
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

client portmapping towards vigor 2130n running miniupnpd

 
Post new topic   Reply to topic    miniupnp.tuxfamily.org Forum Index -> miniupnpc Bugs
View previous topic :: View next topic  
Author Message
phew



Joined: 06 Sep 2010
Posts: 2

PostPosted: Mon Sep 06, 2010 8:52 pm    Post subject: client portmapping towards vigor 2130n running miniupnpd Reply with quote

Hello,
A fairly simple setup completely puzzles me:
router: Draytek Vigor 2130n. Runs Linux kernel 2.6.23.9, uses miniupnpd for port forwarding (so it seems: miniupnpd -i eth1 -a 192.168.1.1 -p 5000 -U).

Client software & test software (upnpc-static) both are capable of adding a port mapping to the configuration but no traffic whatsoever will be forwarded.

upnpc-static -l gives:
upnpc : miniupnpc library test client. (c) 2006-2010 Thomas Bernard
for more information.
List of UPNP devices found on the network :
desc: hxxp:// 192.168.1.1 : 5000 / rootDesc.xml
st: urn:schemas-upnp-org:device:InternetGatewayDevice:1

Found valid IGD : http:// 192.168.1.1 : 5000 /ctl/IPConn
Local LAN ip address : 192.168.1.110
Connection Type : IP_Routed
Status : Connected, uptime=21833s, LastConnectionError : ERROR_NONE
Time started : Mon Sep 6 15:56:15 2010
MaxBitRateDown : 4200000 bps MaxBitRateUp 4200000 bps
ExternalIPAddress = 83.81.153.227
0 TCP 63359->192.168.1.110:63359 'libminiupnpc' ''
1 TCP 8080->192.168.1.110:80 'libminiupnpc' ''
2 UDP 53742->192.168.1.104:53742 'Teredo' ''
GetGenericPortMappingEntry() returned 713 (SpecifiedArrayIndexInvalid)

Even with the network 'facilities' of Vista, I can see the portmappings above have been setup in the router.

However, no traffic travels from outside to inside through the mapped ports....

iptables on the Vigor router gives:

root@vuurmuur:~# iptables_display.sh
Chain PREROUTING (policy ACCEPT 19025 packets, 3300K bytes)
pkts bytes target prot opt in out source destination
417 113K zone_wan_prerouting all -- eth1 * 0.0.0.0/0 0.0.0.0/0
15793 2893K zone_lan_prerouting all -- br-lan * 0.0.0.0/0 0.0.0.0/0
16248 3012K prerouting_rule all -- * * 0.0.0.0/0 0.0.0.0/0
77 4322 MINIUPNPD all -- eth1 * 0.0.0.0/0 83.81.153.227
Chain MINIUPNPD (1 references)
pkts bytes target prot opt in out source destination
9 480 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:63359 to:192.168.1.110:63359
27 1440 DNAT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 to:192.168.1.110:80
0 0 DNAT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp dpt:53742 to:192.168.1.104:53742
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 224.0.0.0/4
35 1508 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
46726 32M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
6970 633K forward all -- * * 0.0.0.0/0 0.0.0.0/0
16 838 forwarding_rule all -- * * 0.0.0.0/0 0.0.0.0/0
16 838 reject all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 MINIUPNPD all -- eth1 !eth1 0.0.0.0/0 0.0.0.0/0
Chain MINIUPNPD (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.110 tcp dpt:63359
0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.110 tcp dpt:80
0 0 ACCEPT udp -- * * 0.0.0.0/0 192.168.1.104 udp dpt:53742


As you can see, the incoming packets (first chain MINIUPNPD) get accepted, but never delivered to the internal host.

What is wrong here?

Thanks,

Piet
_________________
--

Piet
Back to top
View user's profile Send private message
miniupnp
Site Admin


Joined: 14 Apr 2007
Posts: 1589

PostPosted: Mon Jan 03, 2011 4:39 pm    Post subject: Reply with quote

indeed everything looks OK, so I dont know why the packets dont get delivered. I'm no iptables master anyway.
_________________
Main miniUPnP author.
https://miniupnp.tuxfamily.org/
Back to top
View user's profile Send private message Visit poster's website
phew



Joined: 06 Sep 2010
Posts: 2

PostPosted: Mon Jan 03, 2011 5:46 pm    Post subject: Reply with quote

Thanks & best wishes for 2011

In the meantime, I got an update from Draytek. That one has been stable for approx 3 months now...

so case closed.

Regards,

Piet
_________________
--

Piet
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    miniupnp.tuxfamily.org Forum Index -> miniupnpc Bugs All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group
Protected by Anti-Spam ACP
© 2007 Thomas Bernard, author of MiniUPNP.