NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

AaronM-Florida's avatar
AaronM-Florida
Follower
Sep 08, 2020

Port Forwarding not Disabling on R6250 Router

We are using a Netgear R6250 router at the office. I had enabled the port-forwarding feature to try to let the boss access the DVR from home. The port forwarding pointed to the DVR's local address of 192.168.1.200. The DVR is so old it only works with Internet Explorer, and requires a download in IE to access it. The download is "dvr_ocx.cab".

 

I have deleted the port forwarding line for the DVR, but it is still in effect. It was the only port forwarding rule we had, and now the list area is blank. If I use IE, and input our external IP address, it prompts to download/install the "dvr_ocx.cab" file.

 

The reason this is a problem is that our credit card machine is on our LAN, and we are failing the security scan for it, because the company verifying our network can see that DVR and file download request.

 

Why is the port forwarding still pointing to the DVR when it was deleted?

 

 

2 Replies

  • antinode's avatar
    antinode
    Guru
    Sep 08, 2020

    > We are using a Netgear R6250 router [...]

     

       R6250[v1] or R6250v2?  Look for "Model" on the product label.
    Firmware version?  Connected to what?

     

    > [...] the DVR [...]

     

       Not a very detailed description of that device.

     

    > [...] The port forwarding pointed to the DVR's local address of
    > 192.168.1.200.

     

       What was the actual port-forwarding rule?  (I might guess external
    port 80 to internal port 80, but that'd be only a guess.)

     

    > [...] If I use IE, and input our external IP address, it prompts to
    > download/install the "dvr_ocx.cab" file.

     

       Are you running that test from a system on your LAN, or from a system
    in the outside world?

     

    > [...] the company verifying our network can see that DVR and file
    > download request.

     

       That suggests that it's (at least) a from-outside-world problem.

     

       Is there a DMZ server specified on the R6250? (ADVANCED > Setup >
    WAN Setup : Default DMZ Server)  Any port-triggering rules defined?

    UPnP?  (ADVANCED > Advanced Setup > UPnP)

     

    > Why is the port forwarding still pointing to the DVR when it was
    > deleted?

     

       Defective firmware would be one possible explanation.  If the
    port-forwarding rule list is empty, but the router is still doing port
    forwarding (and there is no DMZ server specified, and there are no
    port-triggering rules, and UPnP is disabled), then a settings reset (and
    manual reconfiguration) might be the only reliable remedy.


       A potentially interesting experiment would be to recreate the original
    port-forwarding rule, but specify a target server address which is not
    in use.  (Reserve one for a fictional MAC address if necessary?)  I'd
    expect that to provide a work-around, but it shouldn't be needed.

  • olympos1625's avatar
    olympos1625
    NETGEAR Employee Retired
    Nov 11, 2020

    Hi AaronM-Florida,


    Good day!

     

    Welcome to NETGEAR Community!

     

    First of all, we do apologize for the inconvenience of not getting back to you immediately due to the backlog in the system. Do you still have this issue? If yes we would like to verify a couple of things in the network where the R6250 is plugged in. The R6250 is located in the office and the DVR is at your boss' home, is that correct? If yes, you don't need to do port forwarding on the R6250 in the office because the DVR is not directly connected to the R6250 network not unless your boss has R6250  at home. If that's the case, the port forwarding should be configured where the DVR is plugged in.

     

    Please do not hesitate to let me know if you need further assistance. 

     

    Regards,


    Oliver
    Community Team