From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from alum-mailsec-scanner-7.mit.edu (alum-mailsec-scanner-7.mit.edu [18.7.68.19]) by huchra.bufferbloat.net (Postfix) with ESMTP id 7C6CE21F27D for ; Sat, 5 Jul 2014 08:51:19 -0700 (PDT) X-AuditID: 12074413-f79ed6d000002501-f8-53b81ef69c3b Received: from outgoing-alum.mit.edu (OUTGOING-ALUM.MIT.EDU [18.7.68.33]) by alum-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 6A.DE.09473.6FE18B35; Sat, 5 Jul 2014 11:51:18 -0400 (EDT) Received: from mail-la0-f50.google.com (mail-la0-f50.google.com [209.85.215.50]) (authenticated bits=0) (User authenticated as jjreisert@ALUM.MIT.EDU) by outgoing-alum.mit.edu (8.13.8/8.12.4) with ESMTP id s65FpG9v029658 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NOT) for ; Sat, 5 Jul 2014 11:51:18 -0400 Received: by mail-la0-f50.google.com with SMTP id pv20so1823564lab.9 for ; Sat, 05 Jul 2014 08:51:16 -0700 (PDT) MIME-Version: 1.0 X-Received: by 10.112.198.161 with SMTP id jd1mr2310373lbc.56.1404575476513; Sat, 05 Jul 2014 08:51:16 -0700 (PDT) Received: by 10.114.166.133 with HTTP; Sat, 5 Jul 2014 08:51:16 -0700 (PDT) In-Reply-To: References: Date: Sat, 5 Jul 2014 09:51:16 -0600 Message-ID: From: Jim Reisert AD1C To: Dane Medic Content-Type: text/plain; charset=ISO-8859-1 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprGKsWRmVeSWpSXmKPExsUixO6iqPtNbkewwZZuOYu+rztZHBg9tl88 wxTAGMVtk5RYUhacmZ6nb5fAnbFh5gqmglucFbtmL2FpYFzD3sXIySEhYCLx9/lRKFtM4sK9 9WxdjFwcQgKXGSVuXHoPlhAS+MAk8eRiEYQ9j1HizyozEJtXQFDi5MwnLBDNJRK/3q1i7mLk AKrxlljziQkkzCkQKHF94laomUuZJGYtuMQIkmARUJE42r+cDWJOgMSbybuYQWxhAWuJ3Vuv g9WwCehLbN1/AWyQiICixKtLx8HqmQUKJaa8OskOYetIvOt7wDyBUXAWkpNmIUktYGRaxSiX mFOaq5ubmJlTnJqsW5ycmJeXWqRrrpebWaKXmlK6iRESlsI7GHedlDvEKMDBqMTDW3FiW7AQ a2JZcWXuIUZJDiYlUd5vXDuChfiS8lMqMxKLM+KLSnNSiw8xSnAwK4nwzhMAyvGmJFZWpRbl w6SkOViUxHnVlqj7CQmkJ5akZqemFqQWwWRlODiUJHiVgfEnJFiUmp5akZaZU4KQZuLgBBnO JSVSnJqXklqUWFqSEQ+K1PhiYKyCpHiA9nqCtPMWFyTmAkUhWk8xWnLM+3+0jYnj16LTQPJD 75k2JiGWvPy8VClx3mCQBgGQhozSPLh1sOT0ilEc6HthXgmQKh5gYoOb+gpoIRPQQjamrSAL SxIRUlINjBsCN77SNNAVi6z5tnnug3kewVfWW/Um+TPPqsmZ8i+C88KG6GcpJ2Ve3v93LOFe atHNXp9DWr5zXvYlPjB7s8yiRIxjcnWvVluJwreL8k+Xdx0udqhf8nnpxPMzfaJ4vk38+797 oW/c/UNfOZNStm751tW7yuSr29bQA2v9j7zIynpovq0tJkWJpTgj0VCLuag4EQDkP82RKQMA AA== Cc: "cerowrt-devel@lists.bufferbloat.net" Subject: Re: [Cerowrt-devel] DirecTV Video-on-demand broken X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Jul 2014 15:51:19 -0000 On Wed, Jul 2, 2014 at 1:07 PM, Dane Medic wrote: > I have also experienced some difficulties with port forwarding via luci in > the past. What I did then was add these lines in the /etc/rc.local: > > iptables -A INPUT -p tcp --dport 17825 -j ACCEPT > iptables -A INPUT -p udp --dport 17825 -j ACCEPT > iptables -A FORWARD -i ge00 -p tcp --dport 17825 -j ACCEPT > iptables -A FORWARD -i ge00 -p udp --dport 17825 -j ACCEPT > iptables -t nat -A PREROUTING -i ge00 -p tcp -d $PUBLIC_IP --dport 17825 -j > DNAT --to 172.20.0.80:17825 > iptables -t nat -A PREROUTING -i ge00 -p udp -d $PUBLIC_IP --dport 17825 -j > DNAT --to 172.20.0.80:17825 I could not get this to work in CeroWRT - it didn't recognize --dport This is what I have at the end of /etc/config/firewall: config redirect option target 'ACCEPT' option src 'wan' option src_dport '1701' option dest_ip '172.30.43.20' option dest_port '1701' option name 'DirecTV' option proto 'tcp udp' option dest '*' Is this correct? It still doesn't seem that port forwarding is working. Unless this isn't the *only* problem. -- Jim Reisert AD1C, , http://www.ad1c.us