Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


thekiwi

295 posts

Ultimate Geek


#196610 6-Jun-2016 17:05
Send private message

Hey all.

 

 

 

Have replaced an aging WRT54GL running Tomato with a newer AC1900 which Ive got Advanced Tomato running on.

 

Behind this I have a Win2k8 server and Im wanting to VPN into it.  Was working fine with the necessary port forwarding and mod to the iptables, but I just cant get it working on the new touter.

 

Has anyone got a similar system working well and can prod me in the right direction?

 

 

 

Cheers

 

 

 

Craig


Filter this topic showing only the reply marked as answer Create new topic
BarTender
3606 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #1566614 6-Jun-2016 17:10
Send private message

Google for OpenVPN and OpenWRT and plenty of examples come up.



thekiwi

295 posts

Ultimate Geek


  #1566617 6-Jun-2016 17:14
Send private message

BarTender: Google for OpenVPN and OpenWRT and plenty of examples come up.

 

 

 

Sorry  may not have been quite detailed enough.  I dont want to VPN onto the router, Im trying pass through it to the Win2k8 server in behind.

 

Ive got all the necessary ports forwarded, but Im guessing GRE isnt.  

 

 

 

Ive tried vatious combinations of:

 

 

 

iptables -t nat -I PREROUTING -p 47 -j DNAT --to 10.0.0.12
iptables -I wanin -p 47 -d 10.0.0.12 -j logaccept
iptables -I INPUT -s 111.221.29.161 -j DROP

 


iptables -A INPUT -p tcp —dport 1723 -j ACCEPT
iptables -A INPUT -p gre -j ACCEPT
iptables -A INPUT -i ppp+ -j ACCEPT
iptables -A FORWARD -i ppp+ -j ACCEPT
iptables -A FORWARD -o ppp+ -j ACCEPT

 

iptables -t nat -I PREROUTING -p tcp —dport 1723 -j ACCEPT
iptables -I INPUT -p tcp —dport 1723 -j ACCEPT
iptables -I INPUT -i ppp+ -j ACCEPT
iptables -I FORWARD -i ppp+ -j ACCEPT

 

and
iptables -I INPUT 1 -p tcp —dport 1723 -j ACCEPT

 

 

 

but nothing works.


froob
692 posts

Ultimate Geek

Lifetime subscriber

  #1567378 7-Jun-2016 19:12
Send private message

Probably not any help to you, but quite recently I had an L2TP/IPSec server sitting behind my tomato router (Shibby mod), which worked with just the appropriate port forwarding rules. 







macuser
2120 posts

Uber Geek


  #1567399 7-Jun-2016 19:26
Send private message

If you're client is windows, need to change registry key to allow VPN behind nat (nat-transversal).

Additionally you need to be forwarding 500, 4500 and the 17XX port if L2TP/PPTP pass through is not an option on router.

If its a NAT-T issue, and not a port forwarding issue, you'll be able to connect using Android but not Windows. If its a port forwarding issue (aka 500, 4500) you won't be able to connect at all.

thekiwi

295 posts

Ultimate Geek


  #1567453 7-Jun-2016 20:26
Send private message

 

 

Ended up being one of those "DOOOHHhhh" moments :)

 

 

 

Just so happens on the day that I installed the new router, the Win2k8 server also needed restarting ... and Routing and Remote Access service didnt auto start!!!

 

So Id been testing against a dead end! Found out when I put the old router back online and VPN's still wouldnt work.

 

SO I had the standard VPN port forwarding, and then added to the Firewall Scripts:

 

 

 

iptables -t nat -I PREROUTING -p 47 -j DNAT --to 10.0.0.12
iptables -I wanin -p 47 -d 10.0.0.12 -j logaccept
iptables -I INPUT -s 111.221.29.161 -j DROP

 

 

 

and all was good! :)


Filter this topic showing only the reply marked as answer Create new topic





News and reviews »

Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00


eero Pro 7 Review
Posted 23-Jul-2025 12:07


BeeStation Plus Review
Posted 21-Jul-2025 14:21


eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01


WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32


RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26


Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24


Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05


Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01


Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01


Epson Launches New AM-C550Z WorkForce Enterprise printer
Posted 9-Jul-2025 18:22


Samsung Releases Smart Monitor M9
Posted 9-Jul-2025 17:46


Nearly Half of Older Kiwis Still Write their Passwords on Paper
Posted 9-Jul-2025 08:42


D-Link 4G+ Cat6 Wi-Fi 6 DWR-933M Mobile Hotspot Review
Posted 1-Jul-2025 11:34


Oppo A5 Series Launches With New Levels of Durability
Posted 30-Jun-2025 10:15









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.