This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Port forwarding within network- LAN to LAN (forward to docker app mapped port)

Hi. I am using docker apps, inside Unraid NAS. I set up a Nextcloud container (docker). To be able to use it from outside, I created a DNAT rule so that from outside, I can access Nextcloud app. It is working. Nextcloud uses port 80 and port 443. These ports are used by my Unraid NAS. I mapped incoming http to port 380 of docker app, and incoming https to port 643 of docker app. So far, so good.

DNAT rule

Source- WAN. Allowed client network- ANY

Destination- WAN port Services- HTTP and another rule HTTPS

Protected Servers- NAS IP Mapped port- 380 and another port 643 for HTTPS

Protected zone- LAN

From inside the network, I can't access Nextcloud app

This thread was automatically locked due to age.

Parents

0 RickardNordahl over 4 years ago

Sounds like the DNS is poiting towards the outside ip. But is thats they way you would like to use it, add the Lan zone aswell as source and it should work.

Source- WAN and LAN. Allowed client network- ANY

//Rickard
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 4 years ago in reply to RickardNordahl

any other suggestions?

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 4 years ago in reply to rfcat_vk

Hi! Currently, I left the advice of RickardNordahl in the firewall rules:

Source- WAN and LAN. Allowed client network- ANY

I created an FQDN host, didn't see any option not to advertise to WAN though.

Do I change the firewall rules previously created? How do I integrate this to the previous firewall rule? Or do I create a new one?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to jang430

Hi,

you create it in network -> DNS and you leave the rules as they are.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 4 years ago in reply to rfcat_vk

Hi. Can you be more specific? Not quite getting what to do next.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to jang430

Hi,

network -> DNS -> DNS host entry

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 4 years ago in reply to rfcat_vk

What should be the hostname? The name I got it to work from outside? The same name I want to call it from within the network? I call it xxx.duckdns.org from external, I also want to use this inside the network.

The IP address should be 192.168.1.1 or 192.168.1.whatever the unraid nas' ip is?

Regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to jang430

You can use the external name if you wish and the internal address of the device.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 4 years ago in reply to rfcat_vk

Hi. Host/domain name

xxx.duckdns.org

IP address

192.168.1.xxx (NAS that hosts Nextcloud docker container)

TTL "60" Weight "1" Publish on WAN "No"

Reverse DNS lookup "On"

Created FQDN host

Name* "duckdns.org"

FQDN* "*.duckdns.org"

FQDN host group BLANK

Anything I missed? Unfortunately, it's not working.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to jang430

Hi,

please try a traceroute from your PC to see where the traffic goes.

Your FQDN will point the outside because you are using the generic *, you will need to use the full name not the generic name.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 4 years ago in reply to rfcat_vk

Tracer xxx.duckdns.org gave me a single line result

11x.xxx.xx.94.xxxx.net [11x.xxx.xx.94]

I believe this is my public ip address?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to jang430

Hi,

did you change the FQDN to use the full name of your device not the generic *?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 4 years ago in reply to jang430

Hi,

did you change the FQDN to use the full name of your device not the generic *?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 jang430 over 4 years ago in reply to rfcat_vk

Changed it now to xxx.duckdns.org

All I got from tracert is * * * on all lines
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to jang430

Is .org your internal DNS domain? If you open a CA what does it show you for your machine CN?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 4 years ago in reply to rfcat_vk

rfcat_vk said:

Is .org your internal DNS domain? If you open a CA what does it show you for your machine CN?

Sorry, lost here. I have no idea how to make an internal DNS domain. How do I open a CA?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to jang430

Hi,

Have you restarted your PC at any stage during the testing?

What is the result from nslookup of your device?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 4 years ago in reply to rfcat_vk

Last login: Mon Apr 20 13:48:01 on ttys000

The default interactive shell is now zsh.

To update your account to use zsh, please run `chsh -s /bin/zsh`.

For more details, please visit support.apple.com/.../HT208050.

Jasons-MacBook-Pro-2:~ jason$ nslookup xxx.duckdns.org

Server: 1.1.1.1

Address: 1.1.1.1#53

Non-authoritative answer:

Name: xxx.duckdns.org

Address: 112.205.60.xx

Jasons-MacBook-Pro-2:~ jason$
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to jang430

Hi,

I see the issue, you are using the external DNS not the XG as your DNS so you will always resolve to the external advertised address.

Change you DHCP server on the XG to provide the XG as the DNS then try to access your device.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 4 years ago in reply to rfcat_vk

XG acts as my DHCP server. How do I do "Change you DHCP server on the XG to provide the XG as the DNS then try to access your device?"

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to jang430

I assumed that 1.1.1.1 is your external DNS.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 jang430 over 4 years ago in reply to rfcat_vk

Yes using cloudflare 1.1.1.1

What should I do with it?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to jang430

I suggest you change your DNS settings in your DHCP server to something like mine as below.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel