Port Forwarding with FVS336G Dual Firewall

Did you change the web server to use port 7777?

Because if you did http://192.168.0.253:80 should not work locally with 80

Thank you for your prompt reply.

As I've set the Firewall to translate to port 80 the web server should not need to be looking at port 7777.

The port number declared here 7777 is not the actual number I'm using anyway.

The Firewall should be translating http://externalfixedipaddress:7777 to http://192.168.0.253:80 and the web server wouldn't know the difference.

Thanks

Wrong setup

Port translation should be 7777 and not 80

Use http service

You got flipped

You both are wrong. You can't ping a port. Forward ICMP (Type 8) to the server LAN IP.

I have set the Translate to Port Number to all 3 possibilities:
Set to 7777
Set to 80
Turned off
None of these changes anything and they still do not work.

I do not want to use the HTTP service as that only covers one web site. I have several and they each need a specific port. Once this works.

To give a working example: if I was using a standard NetGear router I would select Port Forwarding, create a service name, set the start port and end port to be one value and set the server IP address as the local LAN IP address of the machine to forward to. Then from the Internet I would use http://externalip:XXXX where XXXX is the port number. This has always worked for our IP cameras and our various web sites without my having to change the internal port value on the internal web server or on the IP cameras...

PS: I am not trying to PING anything here. This is TCP access through web browsers.

I'm sure I'm missing something here as it should not be this complicated. That's why I provided concrete examples. This has worked for me on every Netgear router for years... up to this one.

Stuck and frustrated...

If you want to use http://public IP:777 points to internal IP: 80

then choose service type HTTP and port translation 7777

To give a working example: if I was using a standard NetGear router I would select Port Forwarding, create a service name, set the start port and end port to be one value and set the server IP address as the local LAN IP address of the machine to forward to. Then from the Internet I would use http://externalip:XXXX where XXXX is the port number. This has always worked for our IP cameras and our various web sites without my having to change the internal port value on the internal web server or on the IP cameras...

if you are ONLY using port 80 then you do NOT need to use port translation


if you are masking the actual server port 80 from WAN then specify the your desire port number under port translation ex 7777 --->80

PS: I am not trying to PING anything here. This is TCP access through web browsers.

You both are wrong. You can't ping a port. Forward ICMP (Type 8) to the server LAN IP.

You are correct CDEFRANCE, you aren not discussing ping at at ll

This has always worked for our IP cameras and our various web sites without my having to change the internal port value on the internal web server or on the IP cameras...

You are trying basically

Public IP:7000 --> Lan IP:80
Public IP:7001 --> Lan IP:80
Public IP:7002 --> Lan IP:80
Public IP:7003 --> Lan IP:80

None of this is working. So I'm going to use concrete examples.

Let's pretend our external IP address is 22.22.22.22

I want to do the following from the outside

http://22.22.22.22:7777 and that takes me to my web server on http://192.168.0.253 with the standard port 80. That can therefore be http://192.168.0.253 or http://192.168.0.253:80. But it should not be http://192.168.0.253:7777

http://22.22.22.22:7777 should be forwarded to http://192.168.0.253:80
http://22.22.22.22:7778 should be forwarded to http://192.168.0.252:80
http://22.22.22.22:7779 should be forwarded to http://192.168.0.251:80

On LAN IP .253 I've got one web site, on LAN IP .252 I've got a different web site on the same physical server and on LAN IP .251 I've got an IP camera with a built-in web browser polling port 80.

In Security - Services on the FVS336G I create a new service for each one of these:
HOMEWEB TCP Port 7777 7777
DEVWEB TCP Port 7778 7778
OFFCAM TCP Port 7779 7779

In Security Firewall I create a new rule for each of these services:
Service Name as above
ALLOW Always
Send to LAN Server : Single Address
Start (only) the Local IP address as above
Translate to Port Number ticked on and set to 80
WAN Destination : WAN2
...

Locking at the list of Inbound Services this looks exactly as it should:
HOMEWEB 192.168.0.253:80
DEVWEB 192.168.0.252:80
OFFCAM 192.168.0.251:80

As mentioned before I have tried playing around with that Translate To Port field by turning it off, setting it to the same value as the incoming port and setting it to 80. No effect.

It must be something else, somewhere else?

I don't understand why the concept behind port forwarding would be so very different on this Firewall in comparison to all of the other Netgear routers I've worked with like the RP614 or the WGR614...