Port forwarding on HG659 help needed.

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Port forwarding on HG659 help needed.

peejayw

1712 posts

Uber Geek

#261916 21-Dec-2019 17:54

I am trying to forward 2 ports to a raspberrypi on the Huawei HG659. I set up the first one OK...

Mapping name raspberrypi

Application Webserver

Internal host raspberrypi_Ethernet

but when I try to forward the SSH port

Mapping name raspberrypi

Application SecureShellServer

Internal host raspberrypi_Ethernet

and go to save it I get the error message "The name of the port mapping is invalid"

I am a real noobie on this subject, appreciate any help.

I'm supposed to respect my elders, but it's getting harder and harder for me to find one now.

michaelmurfy

cat
12220 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2379674 21-Dec-2019 18:17

Unless if you know what you're doing and how to secure Linux then do not port forward SSH or any other services to it. This will be bombarded with brute-force attempts as soon as it is made live and if an exploit exists anywhere then you'll get pwned as a result.

If you're wanting to expose something that only you'll be using then perhaps set up http://www.pivpn.io/ on your Pi and port-forward OpenVPN. It'll be a lot more secure and still allow for remote access for the times you need it.

Michael Murphy | https://murfy.nz
Referral Links: Tessie | Tesla | Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

MyHeritage

Shop MyHeritage and uncover your origins and find new relatives with a simple DNA test. (affiliate link).

freitasm

BDFL - Memuneh
76328 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2379695 21-Dec-2019 19:58

As above. Also the "Mapping name" you used is the same in both so there is your "The name of the port mapping is invalid". Usually these things must be unique.

But again, as above. Unless you know exactly how to harden an operating system you will be opening a can of worms.

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

peejayw

1712 posts

Uber Geek

#2379696 21-Dec-2019 20:01

Thanks for the reply. The Pi is just running a simple timer to turn on and off heating, lighting and ventilation in a grow-box. The Pi has a good password in place and I am the only one that accesses it.

I will read up some more on the problems/dangers associated with it but in the meantime are you able to throw any light on why I cannot forward the second port?

Thanks.

I'm supposed to respect my elders, but it's getting harder and harder for me to find one now.

freitasm

BDFL - Memuneh
76328 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2379697 21-Dec-2019 20:02

I already reply why so I am afraid you didn't read the whole reply.

Think again - even with a secure long password, your little PI will be bombarded by BOTS repeatedly trying to login. Next time you post will be "Why is my connection so slow?"

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

peejayw

1712 posts

Uber Geek

#2379698 21-Dec-2019 20:05

Sorry, missed your reply.

I'm supposed to respect my elders, but it's getting harder and harder for me to find one now.

mdf

3320 posts

Uber Geek

Trusted

#2379714 21-Dec-2019 21:23

michaelmurfy:

Unless if you know what you're doing and how to secure Linux then do not port forward SSH or any other services to it. This will be bombarded with brute-force attempts as soon as it is made live and if an exploit exists anywhere then you'll get pwned as a result.

If you're wanting to expose something that only you'll be using then perhaps set up http://www.pivpn.io/ on your Pi and port-forward OpenVPN. It'll be a lot more secure and still allow for remote access for the times you need it.

www.pivpn.dev now.

My write up for PiVPN/OpenVPN/how-to-feel-like-a-computer-genius (when it works) is available here: https://www.geekzone.co.nz/forums.asp?forumid=46&topicid=245015