Firewall - NAT problem.

Hello!

I am writing, to ask you some help.

Well, once I wrote that I could not get through port 25 and 110. Now I can. After rebooting the router. But know I have a problem, that I can’t get througt port 5900 (to use VNC). What is the strangest - before I put the router in the real network, I made my own little one and I was able to open the port 5900 with out any problems.

So, I have supplied the NAT rule with the following “things”:

General-
Chain: dstnat;
Dst.addess: 80.50.24.13
Protocol: 6 (tcp);
Dst.Port: 5900;

Action-
Action: dst-nat;
ToAddress: 192.168.0.23
To Ports: 5900

And, as I already told, in my liitle network everything was working fine (with different Dst.address and different ToAddress).

I asked my ISP to check their router, maybe the ports are closed already there, but they told me that they do not close ports. So, I tried my re-boot theory, this time it didn’t help. :slight_smile:

But, the similar rules are working for my mail server already (again, just addreses and ports are changed), and was working in my own network, so any help?

Are you allowing tcp to 192.168.0.23:5900 in the forward chain?

Sam

HI,

In our network we had once a problem with a VNC connection, but that was because of fragmented packets and increased MTU, check these two things also, because if you have lot of overhead int this connection and MTU get larger the connection may drop. We have solved this issue with lowerin the MTU and clearin the DF bit.


Regards.

Hello!

Are you allowing tcp to 192.168.0.23:5900 in the forward chain?

I think so.. How can I open the supout.rif to see my configuretion?

to fatnok

I am not completly sure that I understand what you mean. You see, I even cannot open the port, so how can I talk about packets flow? Or maybe I don’t understand the thing?
Anyway, how can I check your mentioned things? And, sorry for my weak knowledge, but what is MTU?

MTU means Maximum Transmission Unit it is expresed in bytes, default MTU is 1500 byte, in fact it is a size of the packet.

And can MTU really make a situation, that a port doesn’t open?