Looking for the best way to forward port 1433 tcp. Outside network is hosting a server and want to make sure anyone from my side can talk through that port to that server. Is there a simple way to just open that port to all traffic to a series of IP?
Got my static IP 173.219.x.x from ISP. Addresses are set to 173.219.x.x/25 and private network is 10.0.10.1/24? How do I set to make sure anyone from my private can talk through port 1433 to the outside company. I’ve tried port forwarding in every way I can think of but every time i use a port checker is says it’s still close. Does it being masqueraded make a difference when forwarding?
Tried like this:
Chain Dstnat - Dst. Address 173.219.x.x - protocol 6 tcp - action dst-nat - to Ports 1433.
Note: I’m not hosting the server. People will just be talking to it from here to outside server through port 1433.
I am relatively new in the forum but I deal with networking for a long time. Port forwarding should be very simple but your post has a lot of things that are not clear, at least to me. Try to be more specific and post part of your config, especially the lines from /ip firewall filter, /ip firewall nat and /ip address.
By default, connections from LAN to WAN are not restricted in any way. The only requirement us a working SRC-NAT configuration (which is there by default on SOHO models as well unless WAN connectivity type is a non-common one). You’re mentioning a /25 WAN subnet which indicates a non-common setup (for a SOHO world). The “corporate” line of routers don’t come with default setup and it’s up to administrator to do things right (or hire a consultant).
So follow advice by @ros44 and pist current config (output of command /export hide-sensitive).
So the server is somewhere else, completely different network on the other end of internet. And you want your local 10.0.10.x devices to be able to connect to :1433? If so, you don’t need any special config for that on your side, it’s just like any other outgoing connection to internet.
But since port 1433 is default port for MS SQL server and not something commonly used over internet (except by bots trying to break in), it’s possible that it can be blocked by either your or remote ISP. It would be good idea to think about setting up VPN between your and remote site.
Yes, exactly! Another company is hosting the MS SQL server. The other company recommends I forward my ports. Which I thought was weird, but I’m not great with networking, so I figured I’d humor it and just forward my side in case. I just couldn’t figure out how to open it will all traffic instead of acting like we’re the host and going to a static IP. I don’t have any specific blocks that I am aware of, and we’ve never had issues connecting to anything in the past.
I will check with my ISP to be sure. But thank you for the help!