But what I don’t understand now that this dstnat is disabled, www browser still are redirected to yyyyy port !!!
I have done the following to try to get ride of the problem
tried on several computer
restarted the router and computers
I tried in the browser https://192.168.x.y:xxx (so the correct final destination port) and I’m anyway redirected to YYYYY the income port ! WTF.. did yo think it could be the WP ?
That redirection is still effectif and she defeitenly should not ! She is desactived and it should be only apply from WAN connection .. any ideas ??
Within the LAN side the router is not set to redirect anything (only if coming from WAN)
furthermore the dstnat rules is disabled →
and more the redirection point me the the outside port ! (dst-port and not the correct one ~“transfer to” ) so no I don’t think the router behave like it should,
The router is fine, is doesn’t contain any kind of creative module that would do anything not told it to do by config. Disabled rules are not active, period.
Your linked post at WP suggests that it’s something with WP config. Check http requests in browser’s developer console (for example in Firefox it’s Ctrl+Shift+E), try to open your website, examine headers and I’m sure you’ll find some redirection there.
Btw, I understand being a little paranoid, hiding public addresses and other possibly sensitive stuff (that’s probably good idea). But hiding private addresses and ports doesn’t make sense. And don’t be fooled by the name “private”, it just means “non-public”, i.e. that the same 192.168.xx.30 is duplicated in million LANs all over the world.
So how can you explain when I plug my self (RJ45) directly to the host computer it’s work (same IP)
but when passing by the router not !
So I don’t think it is WordPress or Browser issue but router,
is doesn’t contain any kind of creative module that would do anything not told it to do by config
, damn that why I bought it, I was thinking it had a sort of A.I inside , beside the joke, what it does it’s related to my input ! because the browser get redirected to the WLAN incoming port , so it’s not random. but what I don’t get it’s that rules is disabled and anyway the redirections still occur event after rebooted everything ! (my self included )
Http is more complex. If you enter https://192.168.1.77 in browser and then you try https://exemple.com:54321 (taken from your WP post), for web server it’s not the same, those are requests for two distinct virtual hosts. And what happens depends on server or web application. As I wrote, check in browser what exactly happens.
So first from outside (wan side) this redirection was working (almost as I had the bug with the image not showing) but still trying to figure where is the problem coming with that.
the redirection was outside :54321 to inside :443 so the port for the HTTPS, and for the server this is transparent.
From the inside it's was working also without changing the port, just like this https://192.168.0.X
but now when I disable the redirection, again within the Lan, when I enter https://192.168.0.X i'm redirected to https://192.168.0.X:54321 ! (not even 433 ! wtf)
So I don't think it's the Wordpress server how do that ( I didn't setup nothing for redirection there) nor the browser(s)..
and when I directly physically connect to the WP server (who keep is dhcp IP for while) I'm not redirected and it's working obviously.
After you’re redirected, do you actually see https://192.168.0.X:54321 in browser’s address bar, including the port? If you do, it’s definitely not done by router. And again, if you check server requests in browser developer console, you’d see the redirection sent by server on http level there.
Hi Sob, yes I do see https://192.168.0.X:54321 in browser’s address bar… damn so it’s the server ! damn why is doing this ? and why he is not doing it when connect directly to it.. so weird.
You need to check and possibly adjust server config. As I wrote, server can see difference between direct connection in LAN and connection from internet, and can behave diferently for them.
If the webserver is some pre-made appliance and you didn’t install and configure it yourself, it’s probably some option where you set the address for website (the one that should be publicly visible), and server redirects other requests there. Try to look for something like that.
I’ve spend few hours to test everything’s, I tried also with different routers (DD-wrt, OpenWRT, Stock D-Link and Stock Asus)
So I don’t experience this Unstoppable DSTNAT anymore, it might be the WP server itself, for what I read and experienced changing the domain or IP of a WordPress server can sometime a pain in the *ss
For example on one of my iteration of this WP server, after successfully changed the IP the wordpress pages content are mix (meaning some element point to the new ip and other keep the old one.. so it’s a mess..)
To good thing is while I was testing different router I clearly notice how good is my little RB750Gr3 compare to the other router.
example who shocked me : D-link : cannot enter a NTP server but instead need to choose between 2 NTP server owned by D-Link, or worst impossible to disable IPv6 WTF.
For future reference, the traffic between 2 IP addresses belonging to the same bridge and same subnet does NOT go through the firewall as it is a Layer-3 firewall (unless you have enabled the use-ip-firewall option under /interface bridge settings).
Oh yeah, RouterOS is great. Regular home routers support only few predefined scenarios, and when you need anything else, you’re out of luck. With RouterOS, you can configure almost anything. But it’s also easier to make mistakes. Great freedom, great responsibility. And IPv6 is cool, don’t disable that.