Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Silvrav

442 posts

Ultimate Geek

ID Verified

#303201 24-Jan-2023 12:53
Send private message

Does anyone know if the spark Smart modem 2 support Nat loopback aka pinhole NAT?

 

 

 

I have a funny suspicion I need to configure it here though but not 100% sure:

 


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
cbrpilot
936 posts

Ultimate Geek

Trusted
Spark NZ

  #3026237 24-Jan-2023 13:01
Send private message

What type of Broadband are you using this with?
The reason I ask is that the SM2 is usually used for Wireless Broadband which uses CGAT (unless you've got a Static IP), and the ramification is that with WBB port forwarding will not work.

 

 





My views are my own, and may not necessarily represent those of my employer.


 
 
 

Shop now on AliExpress (affiliate link).
Silvrav

442 posts

Ultimate Geek

ID Verified

  #3026239 24-Jan-2023 13:06
Send private message

cbrpilot:

 

What type of Broadband are you using this with?
The reason I ask is that the SM2 is usually used for Wireless Broadband which uses CGAT (unless you've got a Static IP), and the ramification is that with WBB port forwarding will not work.

 

 

 

 

 

 

oh yes, to add I have a fixed IP for my wireless broadband as I port forward various ports for my servers running home assistant, adguard home etc.


cbrpilot
936 posts

Ultimate Geek

Trusted
Spark NZ

  #3026253 24-Jan-2023 13:39
Send private message

Ok, if you're got a Static IP, then port forwarding will work.  Can you describe a bit about what you're trying to do?





My views are my own, and may not necessarily represent those of my employer.




Silvrav

442 posts

Ultimate Geek

ID Verified

  #3026258 24-Jan-2023 13:54
Send private message

cbrpilot:

 

Ok, if you're got a Static IP, then port forwarding will work.  Can you describe a bit about what you're trying to do?

 

 

 

 

yip, port forwarding works, but what I am wondering if the modem supporrts NAT loopback/pinhole NAT or if I must configure it in the above settings page.

 

 

 

NAT loopback is needed for instance for my DNS domain to be accessible within my network, instead of using the IP address for my server.

 

 

 

So for instance, from outside my network my DNS domain (using duckdns.org) I can access my server, but from within my network I cant use duckdns and I must use the server IP address.

 

NAT loopback will avoid this issue.


Spyware
3719 posts

Uber Geek

Lifetime subscriber

  #3026259 24-Jan-2023 13:56
Send private message

Hairpin NAT.





Spark Max Fibre using Mikrotik CCR1009-8G-1S-1S+, CRS125-24G-1S, Unifi UAP, U6-Pro, UAP-AC-M-Pro, Apple TV 4K (2022), Apple TV 4K (2017), iPad Air 1st gen, iPad Air 4th gen, iPhone 13, SkyNZ3151 (the white box). If it doesn't move then it's data cabled.


Silvrav

442 posts

Ultimate Geek

ID Verified

  #3026260 24-Jan-2023 13:58
Send private message

Spyware:

 

Hairpin NAT.

 

 

 

 

more coffee! yes sorry Hairpin, not pinhole 🤣


cbrpilot
936 posts

Ultimate Geek

Trusted
Spark NZ

  #3026311 24-Jan-2023 14:15
Send private message

Thanks Silvrav, I assume you've tried it with SM2 and it's not working?

 

I will ask the question of our devices team, but if it's not working then I'd imagine it's not supported.

 

Out of interet what ports were you trying to use here?  80/443?  Or something different?





My views are my own, and may not necessarily represent those of my employer.




Silvrav

442 posts

Ultimate Geek

ID Verified

  #3026313 24-Jan-2023 14:18
Send private message

cbrpilot:

 

Thanks Silvrav, I assume you've tried it with SM2 and it's not working?

 

I will ask the question of our devices team, but if it's not working then I'd imagine it's not supported.

 

Out of interet what ports were you trying to use here?  80/443?  Or something different?

 

 

 

 

Thanks cbrpilot, that would be great to know.

 

the main ports I am using are 443 and 8123


cbrpilot
936 posts

Ultimate Geek

Trusted
Spark NZ

  #3026364 24-Jan-2023 14:50
Send private message

Thanks.  I have reached out internally to get a final answer but the person is on leave for another week or so.  Until then assume the answer is "it is not supported", and to be honest I would not get your hopes up!





My views are my own, and may not necessarily represent those of my employer.


Silvrav

442 posts

Ultimate Geek

ID Verified

  #3026367 24-Jan-2023 15:02
Send private message

cbrpilot:

 

Thanks.  I have reached out internally to get a final answer but the person is on leave for another week or so.  Until then assume the answer is "it is not supported", and to be honest I would not get your hopes up!

 

 

 

 

Nothing urgent so will check back in a week or so :) 


nztim
3680 posts

Uber Geek

ID Verified
Trusted
TEAMnetwork
Subscriber

  #3026425 24-Jan-2023 15:28
Send private message

Hi There

 

Are you trying to access your internal services on your External IP from inside your network?

 

If the answer to that question is yes, this is not something most consumer grade routers support, you will need an enterprise grade router with a LAN to LAN Nat rule.

 

In these situations, the cheap and dirty is to setup internal DNS server point to the internal IP for your local devices to find your resources.

 

Even better IP lock your external IP to services like Cloudflare (to provide protection) and then your local devices will hit the cloud and the come back into your network.

 

Openly port forward to the big wide world is not very secure.

 

 





Any views expressed on these forums are my own and don't necessarily reflect those of my employer. 


Silvrav

442 posts

Ultimate Geek

ID Verified

  #3026428 24-Jan-2023 15:31
Send private message

nztim:

 

Hi There

 

Are you trying to access your internal services on your External IP from inside your network?

 

If the answer to that question is yes, this is not something most consumer grade routers support, you will need an enterprise grade router with a LAN to LAN Nat rule.

 

In these situations, the cheap and dirty is to setup internal DNS server point to the internal IP for your local devices to find your resources.

 

Even better IP lock your external IP to services like Cloudflare (to provide protection) and then your local devices will hit the cloud and the come back into your network.

 

Openly port forward to the big wide world is not very secure.

 

 

 

 

Yes to your first question - all modems I have had in the past supported NAT loopback as it's not a new feature anymore.

 

and yip I am using a service like cloudflare (called duckdns) but without loopback its not accessible from within my network.


Spyware
3719 posts

Uber Geek

Lifetime subscriber

  #3026430 24-Jan-2023 15:33
Send private message




Spark Max Fibre using Mikrotik CCR1009-8G-1S-1S+, CRS125-24G-1S, Unifi UAP, U6-Pro, UAP-AC-M-Pro, Apple TV 4K (2022), Apple TV 4K (2017), iPad Air 1st gen, iPad Air 4th gen, iPhone 13, SkyNZ3151 (the white box). If it doesn't move then it's data cabled.


nztim
3680 posts

Uber Geek

ID Verified
Trusted
TEAMnetwork
Subscriber

  #3026439 24-Jan-2023 15:51
Send private message

Silvrav:

 

Yes to your first question - all modems I have had in the past supported NAT loopback as it's not a new feature anymore.

 

and yip I am using a service like cloudflare (called duckdns) but without loopback its not accessible from within my network.

 

 

DuckDNS provides free DNS it is not a cloud-based web proxy which is the safest way to do what you are trying to achieve.

 

If this is not an option setup internal DNS so when you resolve the IP internally it resolves to the internal IP and when you resolve externally it resolves to your external IP.





Any views expressed on these forums are my own and don't necessarily reflect those of my employer. 


PANiCnz
982 posts

Ultimate Geek


  #3026535 24-Jan-2023 17:52
Send private message

Silvrav:

 

cbrpilot:

 

Thanks Silvrav, I assume you've tried it with SM2 and it's not working?

 

I will ask the question of our devices team, but if it's not working then I'd imagine it's not supported.

 

Out of interet what ports were you trying to use here?  80/443?  Or something different?

 

 

 

 

Thanks cbrpilot, that would be great to know.

 

the main ports I am using are 443 and 8123

 

 

Get HA behind a reverse proxy! I'd prioritise that over messing around with hairpin NAT.


 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic





News and reviews »

Synology DS925+ Review
Posted 23-Apr-2025 15:00


Synology Announces DiskStation DS925+ and DX525 Expansion Unit
Posted 23-Apr-2025 10:34


JBL Tour Pro 3 Review
Posted 22-Apr-2025 16:56


Samsung 9100 Pro NVMe SSD Review
Posted 11-Apr-2025 13:11


Motorola Announces New Mid-tier Phones moto g05 and g15
Posted 4-Apr-2025 00:00


SoftMaker Releases Free PDF editor FreePDF 2025
Posted 3-Apr-2025 15:26


Moto G85 5G Review
Posted 30-Mar-2025 11:53


Ring Launches New AI-Powered Smart Video Search
Posted 27-Mar-2025 16:30


OPPO RENO13 Series Launches in New Zealand
Posted 27-Mar-2025 05:00


Sony Electronics Announces the WF-C710N Truly Wireless Noise Cancelling Earbuds
Posted 26-Mar-2025 20:37


New Harman Kardon Portable Home Speakers Bring Performance and Looks Together
Posted 26-Mar-2025 20:30


Data Insight Launches The Data Academy
Posted 26-Mar-2025 20:21


Oclean AirPump A10 Portable Water Flosser Wins iF Design Award 2025
Posted 20-Mar-2025 12:05


OPPO Find X8 Pro Review
Posted 14-Mar-2025 14:59


Samsung Galaxy Ring Now Available in New Zealand
Posted 14-Mar-2025 13:52









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.







GoodSync is the easiest file sync and backup for Windows and Mac