[OpenWrt-Devel] External (public) IP forwarded to internal LAN
corsaroangelo at gmail.com
Thu May 14 09:49:52 EDT 2015
I'll try to explain better my concern.
I would like to show the "source" ip when I read the log of my web
browser; this is the scenario:
user A (IP) -------//----- (extern iface)MODEM/ROUTER(internal iface)
-------------- (WWW iface) WWW
the IP is 22.214.171.124
the extern iface is 126.96.36.199
the internal iface is 192.168.100.100
the WWW iface is 192.168.100.200
when I look the ip packets on extern iface I can see the packet from
188.8.131.52 and directed to 184.108.40.206, BUT on internal iface every packet
comes from 192.168.100.100, not from 220.127.116.11.
in the log of the web server the address recorded is 192.168.100.100.
the dump on the modem's extern iface
15:07:09.216062 IP 1-2-3-4.foo.com.15716 > adsl-5-6-7-8.foo.it.10080
the dump on the modem's internal iface
15:07:03.135591 IP 192.168.100.100.15716 > 192.168.100.200.www
on the www side
192.168.100.100 - - [14/May/2015:15:07:03 +0200] "GET / HTTP/1.1" 200
2735 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:38.0)
you can find the output of the two commands on pastebin in the next 2 weeks.
iptables -L -vn at http://pastebin.com/2b0ewSyu
iptables -t nat -L -vn at http://pastebin.com/i7qPXEMJ
Hope this helps.
> Hi all,
> first of all, I'm sorry for my poor english and if I placed my
> question in a wrong place.
> I'm facing an issue with,I think, iptables. This is the scenario: I'm
> using a ddns service to point my external ip to access my server; and
> it works fine, but the original address is always the internal iface
> of my modem.
> This is my actual port-forwarding conf in /etc/config/firewall
> option src 'wan'
> option dest 'lan'
> option proto 'tcp udp'
> option dest_ip '192.168.x.x'
> option dest_port 'x'
> option name 'Photo'
> option src_dport 'x'
> option reflection '1'
> surfing on web and in the wiki of openwrt I cannot find any solution.
> If I'm not wrong, in the previous release of openwrt the origin's IP
> was forwarded to the internal lan.
> Tcpdumping the wan iface I can see both public ip (original and my own
> Is there any solution (conf, recompile the packet,patch etc) to
> reflect the previous behaviour ?
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
More information about the openwrt-devel