I
I
ilya2503802014-02-23 15:22:12
Remote access
ilya250380, 2014-02-23 15:22:12

How to set up remote access to the server through a router?

Good day to all.
Tell me how to set up remote access on my rt-n16 router, I haven’t tried it yet.
Connection to the provider via L2PT. Two ip addresses 77.50.11.93 and 10.9.104.6. From the home network at 77.50.11.93 and 10.9.104.6 it enters the server, when I disconnect from my grid and try to log in from my phone via gprs, the Internet does not come up. From another computer, only 77.50.11.93 is pinged and it is also displayed in myip.ru.
Here is what I have already set on the router:
++++++++++++++++++++++++++++++++++++++++++
# Generated by iptables-save v1.3.8 on Sun Feb 23 00:25:25 2014
*nat
:PREROUTING ACCEPT [2558:172691]
:POSTROUTING ACCEPT [501:31825]
:OUTPUT ACCEPT [501:31825]
:LOCALSRV - [0: 0]
:VSERVER - [0:0]
:VUPNP - [0:0]
-A PREROUTING -d 77.50.11.93 -j VSERVER
-A PREROUTING -d 10.9.104.6 -j VSERVER
-A PREROUTING -d 77.50.11.93 -p tcp - m tcp --dport 80 -j DNAT --to-destination 192.168.1.23
-A PREROUTING -d 10.9.104.6 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.1.23
-A POSTROUTING - s! 77.50.11.93 -o ppp0 -j MASQUERADE
-A POSTROUTING -s ! 10.9.104.6 -o eth0 -j MASQUERADE
-A POSTROUTING -s 192.168.1.0/255.255.255.0 -d 192.168.1.0/255.255.255.0 -o br0 -j MASQUERADE
-A VSERVER -j VUPNP
-A VSERVER -p tcp -m tcp --dport 90 -j DNAT --to-destination 192.168.1.23:80
COMMIT
# Completed on Sun Feb 23 00:25:25 2014
# Generated by iptables-save v1.3.8 on Sun Feb 23 00:25:25 2014
*mangle
:PREROUTING ACCEPT [109595:56110762]
:INPUT ACCEPT [71108:29905015]
:FORWARD ACCEPT [38099:26135276]
:OUTPUT ACCEPT [657 :15324332]
:POSTROUTING ACCEPT [103905:41467451]
COMMIT
# Completed on Sun Feb 23 00:25:25 2014
# Generated by iptables-save v1.3.8 on Sun Feb 23 00:25:25 2014
*filter
:INPUT ACCEPT [0 :0]
:FORWARD ACCEPT [28:1680]
:OUTPUT ACCEPT [49513:11249189]
:FUPNP - [0:0]
:PControls - [0:0]
:logaccept - [0:0]
:logdrop - [0:0 ]
-A INPUT -m state --state INVALID -j logdrop
-A INPUT -m state --state RELATED,ESTABLISHED -j logaccept
-A INPUT -i lo -m state --state NEW -j ACCEPT
-A INPUT -i br0 -m state --state NEW -j ACCEPT
-A INPUT -d 224.0.0.0/240.0.0.0 -p igmp -j logaccept
-A INPUT -d 224.0.0.0/240.0.0.0 -p udp -m udp ! --dport 1900 -j logaccept
-A INPUT -p udp -m udp --sport 67 --dport 68 -j logaccept
-A INPUT -p icmp -j logaccept
-A INPUT -j logdrop
-A INPUT -s 77.50.11.93 -p tcp -m tcp --dport 91 -j ACCEPT
-A INPUT -s 10.9.104.6 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 77.50.11.93 -p tcp -m tcp -- dport 80 -j ACCEPT
-A INPUT -s 10.9.104.6 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -s 77.50.11.93 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A FORWARD -d 224.0.0.0/240.0.0.0 -p udp -j ACCEPT
-A FORWARD -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN - j TCPMSS --clamp-mss-to-pmtu
-A FORWARD -m state --state RELATED,ESTABLISHED -j logaccept
-A FORWARD -i ! br0 -o ppp0 -j logdrop
-A FORWARD -i ! br0 -o eth0 -j logdrop
-A FORWARD -m state --state INVALID -j logdrop
-A FORWARD -i br0 -o br0 -j logaccept
-A FORWARD -m conntrack --ctstate DNAT -j logaccept
-A FORWARD -d 192.168.1.23 -p tcp -m tcp --dport 80 -j ACCEPT
-A FORWARD -s 192.168.1.0/255.255.255.0 -p tcp -m tcp --dport 80 -j ACCEPT
-A PControls -j logaccept
-A logaccept -m state --state NEW -j LOG --log-prefix "ACCEPT " --log-tcp-sequence --log-tcp-options --log-ip-options
-A logaccept -j ACCEPT
-A logdrop -m state --state NEW -j LOG --log-prefix "DROP" --log-tcp-sequence --log-tcp-options --log-ip-options
-A logdrop -j DROP
COMMIT
# Completed on Sun Feb 23 00:25:25 2014
+++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++
Thank you all in advance.

Answer the question

In order to leave comments, you need to log in

3 answer(s)
I
ilya250380, 2014-02-24
@ilya250380

I'll try to be more precise.
There is a Home network:
Router RT-N16 to which a laptop (Windows8) and PC (Debian) are connected.
starlink provider. Internet connection via L2TP. External IP 77.50.11.93 and 10.9.104.6 for some reason 2 of them (2 ip addresses are also displayed in the web interface of the router)
I wanted to set up remote access to the PC (Debian), as a result, after some manipulations with the settings, the result of which is displayed in the previous text, with transition, from a browser from a PC (Debian) or laptop (Windows8), at the address 77.50.11.93 or 10.9.104.6 I get to the PC (Debian). And if from a phone that is not connected to the home grid, try to go from the browser to the address 77.50.11.93 or 10.9.104.6 Nothing happens. Those. W.D. does not work.

I
ilya250380, 2014-02-25
@ilya250380

What are the options then, with my provider.

N
nfire, 2014-02-25
@nfire

forum.ixbt.com/topic.cgi?id=7:41859

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question