Spark Modem (HG659b) intercepting internal HTTPS traffic

Forums › Spark New Zealand › Spark Modem (HG659b) intercepting internal HTTPS traffic

lyonrouge

1990 posts

Uber Geek
+1 received by user: 20

Trusted

Lifetime subscriber

Topic # 239927 11-Aug-2018 10:25

I'm sure this is easy to fix. I've just moved over from aDSL to fibre and set the port forwarding (443) to hit the front-side of my reverse proxy. From an outside connecting working fine, from inside the network the modem UI intercepts the requests, how to I either moved it onto the internal address (192.168.1.254) or disable HTTPS all together for the modems web UI?

lyonrouge

1990 posts

Uber Geek
+1 received by user: 20

Trusted

Lifetime subscriber

Reply # 2071697 11-Aug-2018 10:41

One person supports this post

Maybe I should buy one of these instead? https://www.pbtech.co.nz/product/NETUBI1209/Ubiquiti-EdgeRouter-ER-X-Advanced-Gigabit-Router-5

michaelmurfy

Mr Snotty
8304 posts

Uber Geek
+1 received by user: 4273

Moderator

Trusted

Lifetime subscriber

Reply # 2071700 11-Aug-2018 10:55

Yes - the Edgerouter will be a good fit for this as it supports hairpin NAT.

Another option (I think you've got a big network lab if I remember correctly) is to run DNS and DHCP internally and set your DNS entries to the reverse proxy.

Michael Murphy | https://murfy.nz
A quick guide to picking the right ISP | The Router Guide | Community UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial

sbiddle

27480 posts

Uber Geek
+1 received by user: 6947

Moderator

Trusted

Biddle Corp

Lifetime subscriber

Reply # 2071707 11-Aug-2018 11:35

The vast majority of "basic" modems and routers don't support hairpin NAT. Anything more advanced such as the Edgerouter does support this.

lyonrouge

1990 posts

Uber Geek
+1 received by user: 20

Trusted

Lifetime subscriber

Reply # 2071750 11-Aug-2018 14:12

Thanks for your input. I've bought a EdgeRouter X and running the firmware update now, will provide feedback as I go. I had offloaded DHCP and DNS in preparation for moving from aDSL to Fibre, so in that respect I'm relatively well prepared. The Spark connection settings could still trip me up of course.

lyonrouge

1990 posts

Uber Geek
+1 received by user: 20

Trusted

Lifetime subscriber

Reply # 2071783 11-Aug-2018 14:59

michaelmurfy:

Yes - the Edgerouter will be a good fit for this as it supports hairpin NAT.

Another option (I think you've got a big network lab if I remember correctly) is to run DNS and DHCP internally and set your DNS entries to the reverse proxy.

Thanks, your tutorial worked a treat, I'm up and running with my internet connection. Been requested to have beer so will work on the port forwarding later today (or maybe tomorrow, depending on how much beer is had)

lyonrouge

1990 posts

Uber Geek
+1 received by user: 20

Trusted

Lifetime subscriber

Reply # 2071851 11-Aug-2018 18:25

Finished the configuration for port forwarding. Thanks to @michaelmurfy for your guidance. Once I note in regards to PPPoE (https://www.geekzone.co.nz/forums.asp?forumid=66&topicid=205740&page_no=7), I had to select switch0 for the target, and not a specific ethernet address. If I selected a specific ethernet, it would forward to the inbuilt UI, but with switch0, it landed on the correct server.

Thanks again.