Spark Modem (HG659b) intercepting internal HTTPS traffic

Forums › Spark New Zealand (including Skinny and BigPipe) › Spark Modem (HG659b) intercepting internal HTTPS traffic

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#239927 11-Aug-2018 10:25

I'm sure this is easy to fix. I've just moved over from aDSL to fibre and set the port forwarding (443) to hit the front-side of my reverse proxy. From an outside connecting working fine, from inside the network the modem UI intercepts the requests, how to I either moved it onto the internal address (192.168.1.254) or disable HTTPS all together for the modems web UI?

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#2071697 11-Aug-2018 10:41

Maybe I should buy one of these instead? https://www.pbtech.co.nz/product/NETUBI1209/Ubiquiti-EdgeRouter-ER-X-Advanced-Gigabit-Router-5

michaelmurfy

meow
13243 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2071700 11-Aug-2018 10:55

Yes - the Edgerouter will be a good fit for this as it supports hairpin NAT.

Another option (I think you've got a big network lab if I remember correctly) is to run DNS and DHCP internally and set your DNS entries to the reverse proxy.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#2071707 11-Aug-2018 11:35

The vast majority of "basic" modems and routers don't support hairpin NAT. Anything more advanced such as the Edgerouter does support this.

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#2071750 11-Aug-2018 14:12

Thanks for your input. I've bought a EdgeRouter X and running the firmware update now, will provide feedback as I go. I had offloaded DHCP and DNS in preparation for moving from aDSL to Fibre, so in that respect I'm relatively well prepared. The Spark connection settings could still trip me up of course.

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#2071783 11-Aug-2018 14:59

michaelmurfy:

Yes - the Edgerouter will be a good fit for this as it supports hairpin NAT.

Another option (I think you've got a big network lab if I remember correctly) is to run DNS and DHCP internally and set your DNS entries to the reverse proxy.

Thanks, your tutorial worked a treat, I'm up and running with my internet connection. Been requested to have beer so will work on the port forwarding later today (or maybe tomorrow, depending on how much beer is had)

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#2071851 11-Aug-2018 18:25

Finished the configuration for port forwarding. Thanks to @michaelmurfy for your guidance. Once I note in regards to PPPoE (https://www.geekzone.co.nz/forums.asp?forumid=66&topicid=205740&page_no=7), I had to select switch0 for the target, and not a specific ethernet address. If I selected a specific ethernet, it would forward to the inbuilt UI, but with switch0, it landed on the correct server.

Thanks again.