Need to setup portforward for port 443 even though the target is in the DMZ

Question

I'm unable to connect to port 443 on my DMZ host.
Port 22, port 80, port 2999, ... everything works EXCEPT port 443.

When I perform an external port check (with `nc -zvw3 280.266.258.260 443` for example) I get a timeout.

Only when I add a custom port forward rule to my DMZ host (even though it's in the DMZ), does it actually begin to work.

I'm guessing this is due to the HTTPS interface of the router admin page itself? That's happily still working on https://192.168.202.1/index.htm, and I can't find any way to disable that.

By the way: I *have* disabled the remote management feature, and before that it was even configured to port `8443`

FURRYe38 · Answer

If the target device is in the DMZ then you don't need to PF.&nbsp;

skerit · Answer

Euhm... That's exactly the problem I'm describing here. I *have* to configure a portforward rule or it doesn't work. It's even in the title :/&nbsp;

FURRYe38 · Answer

When in the DMZ all ports are made available to the target device while in the DMZ. Thus no PF is needed.&nbsp;http://www.dslreports.com/shownews/Networking-101-The-DMZ-137550&nbsp;

skerit · Answer

Yes, I know what a DMZ is. That's the problem here. When I don't set up the port forward rule, port 443 does not reach the target host. So I'm saying something's broken in the DMZ implementation of this device.

FURRYe38 · Answer

What happens if you remove the target device from the DMZ, disable uPnP then configure the PF rules you need? This works?&nbsp;&nbsp;

Forum Discussion

Need to setup portforward for port 443 even though the target is in the DMZ

5 Replies