Re: Problems with port forwarding to IIS behind a router

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



In addition to my other reply, see notes inline below.

Bigwill99 wrote on 30 Nov 2006 07:51:33 -0800:

Sorry, this is long, but I wanted to include all of the details.
Basically, I was able to use an http and ftp server with IIS, but now I
can't since I started using a router. Here are all of the fine details.

I have an http and ftp server set up on my personal computer and have
been using it successfully for a few years. I just got a router. (a
TRENDnet TEW-432BRP)

I've successfully set up the router (address 192.168.1.1) and connected
my PC (192.168.1.100).
I'm also able to connect my laptop (192.138.1.101) to the internet
using the wireless connection. So, all of that is working fine. I can
surf websites, IM, send email etc, no problem.

How is your laptop configured? Are you using a netmask of 255.0.0.0 ? Is
your router and other machines all using the same netmask?

However, I have an HTTP and FTP server on the 192.168.1.100 box, and I
can't get it to work when I enter my external IP. Here's what I've
tried so far:

- Enabled port forwarding on port 80 for http and port 21 for ftp to
192.168.1.100. I've checked IIS and these are the ports that I was
using successfully before.

This should work.


- Cloned the MAC address of my network card on my router so now the
router and network card appear to have the same MAC address.

Why did you do that?

- I've checked the firewall rules in my router settings and they were
automatically set up by my router when I enabled FTP and HTTP port
forwarding to allow traffic on those ports.

But, when I type in my external IP address, I'm getting Cannot find
server or DNS Error

As in my other reply, this is expected.

- IIS is still working fine, because if I type 192.168.1.100 in for the
web site address on the local machine, I'm able to access my website
internally.
- I've even tried changing the port forwarding settings to forward port
80 to 192.168.1.1 (my router) and when I type in my external IP address
in the address, it successfully displays my Router's administration
page. So, this tells me that my port forwarding is not at fault.

All this does is show that the forwarding works when pointed at the router
(and so there is no interface to same interface traffic attempts).

- I know my ISP doesn't block port 80 and 21 because I was using these
successfully before the router.
- The only other "clue" I have is that I'm not able to ping
192.168.1.100 from 192.168.1.101 or view the web site internally by
typing the local LAN IP in the address. (I'm not great on networking,
so I'm not sure if this is even expected) However, there is a ping test
in the router settings, and I'm able to successfully ping 192.168.1.100
from the router.

If you can't ping 192.168.1.100 from 192.168.1.101 then that's a problem.
Are you running any sort of firewall software on the PC at 192.168.1.101
that could be blocking packets from 192.168.1.100?

- Any ideas on what else I might be able to check? Any help would be
greatly appreciated.

Dan


.



Relevant Pages

  • Problems with port forwarding to IIS behind a router
    ... Basically, I was able to use an http and ftp server with IIS, but now I ... I just got a router. ... Enabled port forwarding on port 80 for http and port 21 for ftp to ...
    (microsoft.public.windowsxp.network_web)
  • Re: Why does passive FTP work behind router/firewall?
    ... > configuration of the FTP server). ... On top of this, the router has to ... respond with it's own IP and a port number that it is listening on for an ...
    (comp.security.firewalls)
  • Re: The Problem with Passive Mode ftp server
    ... Since I am using a router to ... | | of the ftp server and use the port forwarding in my router. ... Are you definitely connecting to SERV-U in passive mode? ...
    (comp.os.linux.networking)
  • Re: The Problem with Passive Mode ftp server
    ... Since I am using a router to ... | | of the ftp server and use the port forwarding in my router. ... Are you definitely connecting to SERV-U in passive mode? ...
    (comp.os.linux.setup)
  • Re: Publishing services in a dual FW environment
    ... I need port 80 mainly for OWA not for web site hosting. ... That said, my first thought would be remove the NAT router, configure the external nic to connect directly to your cablemodem/dslmodem etc. ... Then re-run the CEICW and allow the necessary services through under the firewall section, this will configure ISA for you. ... The only difference between those services is that SMTP and POP3 have the external interface as "listener" whereas, HTTP and HTTPS have the web proxy listener. ...
    (microsoft.public.windows.server.sbs)