Port forwarding on HG659 help needed.

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Port forwarding on HG659 help needed.

peejayw

1351 posts

Uber Geek

#261916 21-Dec-2019 17:54

I am trying to forward 2 ports to a raspberrypi on the Huawei HG659. I set up the first one OK...

Mapping name raspberrypi

Application Webserver

Internal host raspberrypi_Ethernet

but when I try to forward the SSH port

Mapping name raspberrypi

Application SecureShellServer

Internal host raspberrypi_Ethernet

and go to save it I get the error message "The name of the port mapping is invalid"

I am a real noobie on this subject, appreciate any help.

michaelmurfy

/dev/null
9087 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

#2379674 21-Dec-2019 18:17

Unless if you know what you're doing and how to secure Linux then do not port forward SSH or any other services to it. This will be bombarded with brute-force attempts as soon as it is made live and if an exploit exists anywhere then you'll get pwned as a result.

If you're wanting to expose something that only you'll be using then perhaps set up http://www.pivpn.io/ on your Pi and port-forward OpenVPN. It'll be a lot more secure and still allow for remote access for the times you need it.

freitasm

BDFL - Memuneh
65641 posts

Uber Geek

Administrator

Trusted

Geekzone

Lifetime subscriber

#2379695 21-Dec-2019 19:58

As above. Also the "Mapping name" you used is the same in both so there is your "The name of the port mapping is invalid". Usually these things must be unique.

But again, as above. Unless you know exactly how to harden an operating system you will be opening a can of worms.

peejayw

1351 posts

Uber Geek

#2379696 21-Dec-2019 20:01

Thanks for the reply. The Pi is just running a simple timer to turn on and off heating, lighting and ventilation in a grow-box. The Pi has a good password in place and I am the only one that accesses it.

I will read up some more on the problems/dangers associated with it but in the meantime are you able to throw any light on why I cannot forward the second port?

Thanks.

freitasm

BDFL - Memuneh
65641 posts

Uber Geek

Administrator

Trusted

Geekzone

Lifetime subscriber

#2379697 21-Dec-2019 20:02

I already reply why so I am afraid you didn't read the whole reply.

Think again - even with a secure long password, your little PI will be bombarded by BOTS repeatedly trying to login. Next time you post will be "Why is my connection so slow?"

peejayw

1351 posts

Uber Geek

#2379698 21-Dec-2019 20:05

Sorry, missed your reply.

mdf

2432 posts

Uber Geek

Trusted

Subscriber

#2379714 21-Dec-2019 21:23

michaelmurfy:

Unless if you know what you're doing and how to secure Linux then do not port forward SSH or any other services to it. This will be bombarded with brute-force attempts as soon as it is made live and if an exploit exists anywhere then you'll get pwned as a result.

If you're wanting to expose something that only you'll be using then perhaps set up http://www.pivpn.io/ on your Pi and port-forward OpenVPN. It'll be a lot more secure and still allow for remote access for the times you need it.

www.pivpn.dev now.

My write up for PiVPN/OpenVPN/how-to-feel-like-a-computer-genius (when it works) is available here: https://www.geekzone.co.nz/forums.asp?forumid=46&topicid=245015