Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




27 posts

Geek
+1 received by user: 1


# 208131 27-Jan-2017 19:49
Send private message

I have a standard Huawei HG659 modem from Vodafone with latest firmware on VDSL. It seems to be randomly blocking ports, which I suspect is causing trouble with alert reporting from an IP connected alarm system.

 

My current plan to deal with this is to put the HG659 in bridge mode, then purchase another router (looking at Unifi Security Gateway) to handle DHCP, firewall, port forwards, etc. If I place this router in bridge mode, my understanding is that it will act as just a VDSL modem and not try to interfere with anything else. Am I correct? I would like to confirm this with someone who has used an HG659 in bridge mode, before I buy a new router and find the problem still exists.

 

Two other points I've noticed while trying to troubleshoot:

 

1. The ports I am trying to forward are 1883 and 8080. I can create a rule for 1883 but not for 8080. Instead I get the error "The external port cannot be 7547, 514, 68, 53, 546, 500, 1701, 8443, 8080, 990, 5060, 28090, 50000-50020." Have disabled TR069, Remote Access, I'm using the admin login, but still no luck.

 

2. When I check for open ports with canyouseeme.org, all ports appear closed. This includes port 1883 (which I can create a rule for) and also ports 80, 25, 110, etc - my internet and email work fine, but the ports are closed? Same result when I turn all firewalls off. The only port that seems open is 32400 (Plex) which has it's own port forward rule on the HG659.


Create new topic
5421 posts

Uber Geek
+1 received by user: 1876


  # 1710815 27-Jan-2017 19:54
Send private message

Are you sure you need port forwarding for this to work?

 

EDIT: You haven't just hit the 32 device limit for the HG659 have you? http://www.geekzone.co.nz/forums.asp?forumid=40&topicid=188999&page_no=1#1502282


944 posts

Ultimate Geek
+1 received by user: 310

Trusted

  # 1710820 27-Jan-2017 20:05
Send private message

I have the same router on UFB. And every so often it does this weird as thing where data somehow gets blocked at random. I just reboot it and its fine for about 2-3 weeks then it happens all over again.

 

Seriously the Mikrotik's i have used as soo solid. 

 

Anyway if you pop it in bridge mode to use the adsl/vdsl modem only then no it should bypass any layer 3 routing.






 
 
 
 




27 posts

Geek
+1 received by user: 1


  # 1710822 27-Jan-2017 20:26
Send private message

RunningMan - Thanks, I don't believe I've hit the device limit. I can still offline and online devices in green/grey and nothing is getting kicked out. The problem is more that I can't create the port forward rule to begin with.

 

darylblake - Thanks for your advice. I guess I'll take the punt and go with bridge mode and a new router.

 

I'm still a bit concerned that canyouseeme.org can't see any of my ports in general - is that normal behaviour? Would Vodafone be blocking this test somehow?

 

 


1885 posts

Uber Geek
+1 received by user: 456

Trusted
Subscriber

  # 1710871 27-Jan-2017 21:52
Send private message

The default Voda config will not allow you to hit 192.168.100.1 - which is the default address for cable modems (their LAN to HG659 WAN). Interesting.





________

 

Antonios K

 

Click to see full size




27 posts

Geek
+1 received by user: 1


  # 1710890 27-Jan-2017 22:10
Send private message

I should be able to change that default configuration though, right?

1358 posts

Uber Geek
+1 received by user: 319


  # 1710906 27-Jan-2017 22:47
Send private message

Not necessarily, in many consumer routers/residential gateways, parts of the default configuration are preset and baked into the firmware and is not designed to be modified. Sometimes there are reasons for this e.g. rules for onboard VoIP to work but sometimes there aren't. For a fully "programmable" router where you can fully configure interfaces etc. you will have to as you have suggested buy a Unifi or equivalent.



27 posts

Geek
+1 received by user: 1


  # 1710914 27-Jan-2017 23:06
Send private message

Thanks for clearing that up. I think I'll start with the HG659 in bridge mode, connected to a new router. If that doesn't work I guess I will have to buy a dedicated VDSL modem as well.

27783 posts

Uber Geek
+1 received by user: 7270

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  # 1710931 28-Jan-2017 08:03
Send private message

There are a few points to raise and answer here -

 

Firstly a port scanner can (typically) only detect an open port if something answers - if somebody knocks on your door but you don't answer the door it doesn't mean you're not home. Applications won't always send a response so a port scanner can't always detect a port is open.

 

Secondly any form of port forward for any application or hardware carries significant security risks. Why an alarm system needs a port forward for monitoring puzzles me as there is no logical reason for this. It means your alarm is wide open to the whole world. I'd be asking the supplier WHY it needs a port forward, because this is simply poor design. Many security people are out there installing alarms and IP cameras with absolutely zero knowledge of networking or networking security. They're a real risk to both people using their solutions, and the industry as a whole.

 

If you need remote access to an alarm system for something such as an app this should only be done securely over a VPN.

 

 

 

 

 

 


Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

WLG-X festival to celebrate creativity and innovation
Posted 22-May-2019 17:53


HPE to acquire supercomputing leader Cray
Posted 20-May-2019 11:07


Techweek starting around NZ today
Posted 20-May-2019 09:52


Porirua City Council first to adopt new council software solution Datascape
Posted 15-May-2019 12:00


New survey provides insight into schools' technology challenges and plans
Posted 15-May-2019 09:30


Apple Music now available on Alexa devices in Australia and New Zealand
Posted 15-May-2019 09:11


Make a stand against cyberbullying this Pink Shirt Day
Posted 14-May-2019 20:23


Samsung first TV manufacturer to launch the Apple TV App and Airplay 2
Posted 14-May-2019 20:11


Vodafone New Zealand sold
Posted 14-May-2019 07:25


Kordia boosts cloud performance with locally-hosted Microsoft Azure ExpressRoute
Posted 8-May-2019 10:25


Microsoft Azure ExpressRoute in New Zealand opens up faster, more secure internet for Kiwi businesses
Posted 8-May-2019 09:39


Vocus Communications to deliver Microsoft Azure Cloud Solutions through Azure ExpressRoute
Posted 8-May-2019 09:25


Independent NZ feature film #statusPending to premiere during WLG-X
Posted 6-May-2019 22:13


The ultimate dog photoshoot with Nokia 9 PureView #ForgottenDogsofInstagram
Posted 6-May-2019 09:41


Nokia 9 PureView available in New Zealand
Posted 6-May-2019 09:06



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.