Hello,
first i would like to apologise, if such question is already here.
I have installed BLYNK server on raspberry pi at home.
Raspberry pi is conencted to my home wifi and has static IP address 192.168.250.35, Blynk server listens on ports 8441-8443, 9443.
I have dynamic WAN address given by my operator, I use script which check for that address and if it differs from previous, it updates that address in my noip account.
Name of that IP is “blabla.noip.me”.
Noip script also add WAN address to address list “wanIP”.
On my mobile phone i set up BLYNK app to connect to custom server, in this case blabla.noip.me and to port 9443.
I have set up mangle in a way:
Flags: X - disabled, I - invalid, D - dynamic
0 D ;;; special dummy rule to show fasttrack counters
chain=prerouting action=passthrough
1 D ;;; special dummy rule to show fasttrack counters
chain=forward action=passthrough
2 D ;;; special dummy rule to show fasttrack counters
chain=postrouting action=passthrough
3 ;;; BLYNK from internet
chain=prerouting action=mark-packet new-packet-mark=BLYNK passthrough=yes protocol=tcp
dst-address-list=wanIP in-interface-list=WAN dst-port=8441,8442,8443,9443 log=no
log-prefix="markRout"
4 ;;; BLYNK from local network
chain=prerouting action=mark-packet new-packet-mark=BLYNKlocal passthrough=yes protocol=tcp
dst-address-list=wanIP in-interface-list=!WAN dst-port=8441,8442,8443,9443 log=yes
log-prefix="MANGLE_MARK"
so i am marking packets
My NAT is set up in a way:
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; defconf: masquerade
chain=srcnat action=masquerade out-interface=t-Com out-interface-list=WAN packet-mark=!BLYNKlocal
log=no log-prefix=""
1 ;;; BLYNK
chain=dstnat action=dst-nat to-addresses=192.168.250.35 to-ports=8441 protocol=tcp packet-mark=BLYNK
dst-port=8441 log=no log-prefix=""
2 ;;; BLYNK
chain=dstnat action=dst-nat to-addresses=192.168.250.35 to-ports=8442 protocol=tcp packet-mark=BLYNK
dst-port=8442 log=no log-prefix=""
3 ;;; BLYNK
chain=dstnat action=dst-nat to-addresses=192.168.250.35 to-ports=8443 protocol=tcp packet-mark=BLYNK
dst-port=8443 log=no log-prefix=""
4 ;;; BLYNK
chain=dstnat action=dst-nat to-addresses=192.168.250.35 to-ports=9443 protocol=tcp packet-mark=BLYNK
dst-port=9443 log=no log-prefix=""
Thing is, that i am able to connect to my BLYNK server, if i am not on local wifi, so whenever i use mobile data on my mobile phone, i am able to connect to the BLYNK.
When i am on my local wifi, and BLYNK app on my mobile phone is set up to connect to “blabla,noip.me”, i am not able to connect.
I tried one approach - set up static entry in DNS
4 blabla.noip.me 192.168.250.35 1d
and that works, but is there any other way, how to redirect packets from my mobile phone connected to my local wifi back to IP address 192.168.250.35 if port is 9443 (those 8441 - 8443 are for hardware connected to my BLYNK server such as Arduinos and ESP8266..) and APP on mobile phone is connecting to blabla.noip.me?
I hope i am clear enough
Should i post firewall rules as well?
thank You
dusan