13 Maja 2025 00:38:50
Nawigacja
· Strona Główna
· Forum

· Tomato by Shibby
· FreshTomato


Wątki na forum
Najnowsze dyskusje
· Promise VessRAID 184...
· r6400v2 bład przy u...
· drukarka drukuje tyl...
· [S] sprzęt sieciowy...
· Router do światłow...
· [sprzedam] Asus RT-A...
· Netia IPv6
· Multiroom N z wykorz...
· [S] Ubiquity Edgerou...
· [MOD] FreshTomato-AR...
· Nowe routery: UX, UC...
· asus rt-ax86u pro z ...
· Zmiana OpenVPN na wi...
· [S]UBIQUITI EdgeRout...
· Zaawansowana konfigu...
· ByPass VPN dla wybra...
· [MOD] FreshTomato-MI...
· Komputer Serwer
· Ciągle rozłączani...
· Wersje Freshtomato d...
Najpopularniejsze obecnie wątki
· r6400v2 bład prz... [16]
· Promise VessRAID ... [2]
Ankieta
Jaki procesor posiada twój router?

Broadcom MIPSEL
Broadcom MIPSEL
36% [152 głosów]

Broadcom ARM
Broadcom ARM
52% [219 głosów]

Atheros
Atheros
5% [22 głosów]

Marvell
Marvell
1% [4 głosów]

Ralink
Ralink
1% [3 głosów]

Intel/AMD/VIA
Intel/AMD/VIA
1% [5 głosów]

Żaden z powyższych
Żaden z powyższych
4% [15 głosów]

Ogółem głosów: 420
Musisz zalogować się, aby móc zagłosować.
Rozpoczęto: 02/02/2015 09:38
Twoje IP
3.149.255.189
Zobacz wątek
OpenLinksys » :: OPROGRAMOWANIE :: » Tomato - firmware
 Drukuj wątek
port forwarding issues
shredhead1080
sorry this is all in English....

I run Advanced Tomato 136 which is based on Shibby on a Netgear R7000.

For some reason my router will not port forward to anything running on the router itself, such as Transmission, the built in NGINX web server, etc. But port 9091 seems to be open, which is Transmission's port for the gui. I can access it locally but not remotely. I have DDNS set up so I use the name not my WAN IP, which changes from time to time.



root@my-router:/tmp/home/root# iptables --list -vn    [I've removed everything except for what pertains to this issue]
Chain INPUT (policy DROP 24 packets, 1265 bytes)
 pkts bytes target     prot opt in     out     source               destination
   [bcolor=#ffff00] 0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:9091[/bcolor]


I've run into this before using Tomato on a previous router and I cannot remember how I fixed it.

Any ideas?
 
Adooni
Try to install v132 tomato by Shibby. One user have got similar issue with v136 and back to v132 with nvram clear and it is working.
Orange 300/50 Mb/s + ONT Terminal
HPE MS gen8 Proxmox 7.0-11 VMs: Router OPNsense 23.X-amd64 and OMV
HPE MicroServer gen8: Xeon E3-1265Lv2, 16GB (2x KTH-PL316E/8G), HP 331T, 4x4TB WD RED
Asus RT-AC68U AccessPoint
 
shredhead1080
I just tried 132 without nvram clear and it didn't work.

I will try it with nvram clear but there is a lot more to it. I need to kick everyone off the network and recreate all my settings. I have a fair amount of that - different MAC, different IP than the default, guest network, DHCP reservations, firewall script, port forwarding, etc.

In my experience when you do nvram clear followed by applying a settings file, usually whatever issue you have returns. So you have to do clear and rebuild everything from scratch. Wish me luck.
 
Adooni
w/o nvram clear will not work for sure. Question is when you upgraded from v132 to v136 did you clear nvram? - it is obligatory and will definitely not work if you will not do that. Because from v133 MultiWAN was added there was a lot of changes, different parameters etc and without nvram clear will not work. You cannot even load your confirg from v132 to new v136 after nvram clear and you cannot back to old version the same way.
Orange 300/50 Mb/s + ONT Terminal
HPE MS gen8 Proxmox 7.0-11 VMs: Router OPNsense 23.X-amd64 and OMV
HPE MicroServer gen8: Xeon E3-1265Lv2, 16GB (2x KTH-PL316E/8G), HP 331T, 4x4TB WD RED
Asus RT-AC68U AccessPoint
 
shibby

Cytat

port forward to anything running on the router itself


port forward you should use if you want forward connections to any of device INSIDE your local network. If server is launched directly on router, then you have to OPEN port(s), not forward them.

Build-in services will open required ports automatically. Make sure that:
1) you erase nvram after install newer version of tomato
2) you have DISABLED DMZ service
3) you don`t configure those port on port forwarding page

That`s it.
Router: Unifi Cloud Gateway Max
Switch: Unifi USW-Lite-16-PoE
Switch: Unifi USW-Flex-Mini - szt. 2
Wi-Fi: Unifi U6-Lite - szt. 2
Proxmox VE: i5-13400T, 64GB RAM, 2x 512GB NVMe, 3x 2TB SSD
VM #1: Synology SA6400
VM #2: Debian, WWW
VM #3: Home Assistant OS
 
shredhead1080
Thanks to Shibby and the others that have chimed in.

I did notice in my iptables that 9091 was opened when I use the gui (advanced tomato) to turn on Transmission. On another forum it was suggested I add a rule to open 9091. I did try that but in the end I was really applying the same rule the built in service did automatically. So there are now two duplicate rules for the same port.

I will put it back to 136 with erase nvram when I have a chance. I'm bummed I have to rebuild all the settings from scratch but it is what it is.

I'll post results afterwards.

Połączony z 14 czerwiec 2016 17:38:15:

Cytat

shredhead1080 napisał(a):

Thanks to Shibby and the others that have chimed in.

I did notice in my iptables that 9091 was opened when I use the gui (advanced tomato) to turn on Transmission. On another forum it was suggested I add a rule to open 9091. I did try that but in the end I was really applying the same rule the built in service did automatically. So there are now two duplicate rules for the same port.

I will put it back to 136 with erase nvram when I have a chance. I'm bummed I have to rebuild all the settings from scratch but it is what it is.

I'll post results afterwards.


136 with clear nvram did not work. I will try 132 next. I also read on another forum there actually is a way to save most of your settings and use them after re-flashing and clearing nvram. The only thing is I failed to use a quotation mark in the right place, so I rebuilt most of the settings manually before discovering this... nvram set "...." rather than nvram set ....

Połączony z 14 czerwiec 2016 17:39:16:

Cytat

shredhead1080 napisał(a):

Thanks to Shibby and the others that have chimed in.

I did notice in my iptables that 9091 was opened when I use the gui (advanced tomato) to turn on Transmission. On another forum it was suggested I add a rule to open 9091. I did try that but in the end I was really applying the same rule the built in service did automatically. So there are now two duplicate rules for the same port.

I will put it back to 136 with erase nvram when I have a chance. I'm bummed I have to rebuild all the settings from scratch but it is what it is.

I'll post results afterwards.

Połączony z 14 czerwiec 2016 17:41:05:
[quote]shredhead1080 napisał(a):

Thanks to Shibby and the others that have chimed in.

I did notice in my iptables that 9091 was opened when I use the gui (advanced tomato) to turn on Transmission. On another forum it was suggested I add a rule to open 9091. I did try that but in the end I was really applying the same rule the built in service did automatically. So there are now two duplicate rules for the same port.

I will put it back to 136 with erase nvram when I have a chance. I'm bummed I have to rebuild all the settings from scratch but it is what it is.

I'll post results afterwards.

Połączony z 14 czerwiec 2016 17:46:49:
[quote]shredhead1080 napisał(a):

Thanks to Shibby and the others that have chimed in.

I did notice in my iptables that 9091 was opened when I use the gui (advanced tomato) to turn on Transmission. On another forum it was suggested I add a rule to open 9091. I did try that but in the end I was really applying the same rule the built in service did automatically. So there are now two duplicate rules for the same port.

I will put it back to 136 with erase nvram when I have a chance. I'm bummed I have to rebuild all the settings from scratch but it is what it is.

I'll post results afterwards.


136 with clear nvram did not work. I will try 132 next. I also read on another forum there actually is a way to save most of your settings and use them after re-flashing and clearing nvram. The only thing is I failed to use a quotation mark in the right place, so I rebuilt most of the settings manually before discovering this... nvram set "...." rather than nvram set ....

Połączony z 14 czerwiec 2016 17:50:02:
[quote]shredhead1080 napisał(a):

Thanks to Shibby and the others that have chimed in.

I did notice in my iptables that 9091 was opened when I use the gui (advanced tomato) to turn on Transmission. On another forum it was suggested I add a rule to open 9091. I did try that but in the end I was really applying the same rule the built in service did automatically. So there are now two duplicate rules for the same port.

I will put it back to 136 with erase nvram when I have a chance. I'm bummed I have to rebuild all the settings from scratch but it is what it is.

I'll post results afterwards.

Połączony z 14 czerwiec 2016 18:06:28:
Thanks to Shibby and the others that have chimed in.

I did notice in my iptables that 9091 was opened when I use the gui (advanced tomato) to turn on Transmission. On another forum it was suggested I add a rule to open 9091. I did try that but in the end I was really applying the same rule the built in service did automatically. So there are now two duplicate rules for the same port.

I will put it back to 136 with erase nvram when I have a chance. I'm bummed I have to rebuild all the settings from scratch but it is what it is.

I'll post results afterwards.
Edytowany przez shredhead1080 dnia 14-06-2016 18:06
 
Przejdź do forum
Zaloguj
Wprowadź adres e-mail lub nazwę użytkownika

Hasło



Nie masz jeszcze konta? Zarejestruj się.

Zapomniałeś/aś hasła?
Aktualnie online
· Gości online: 58

· Użytkowników online: 0

· Łącznie użytkowników: 24,126
· Najnowszy użytkownik: goldi111
Czat
Musisz się zalogować, aby opublikować wiadomość.

servee
24-01-2025 18:18
Światłowód + mediakonwenter. Ekranowana skrętka nie jest wymagana, taką sytuację już zastałem. Zamierzam ją wymienić na zwykłą. Da to coś?

shibby
17-01-2025 07:45
a ta skrętka ekranowana o której piszesz to jakiś wkopany przewód do bramy/furtki/kamer
y zewn? Jak tak to jego też przez zabezpieczenie podepnij.

shibby
17-01-2025 07:43
no to pora zabezpieczyć kable LAN zabezpieczeniami przeciwprzepięciow
ymi - tanio nie będzie. Jak przychodzi ci internet? Skrętką czy światłem? Jak skrętką to zacząłbym od tego.

servee
12-01-2025 12:52
Ponownie padły mi wszystkie porty sieciowe w routerze - to już 3-ci w 6 m-cy. Podejrzany to ekranowana, nieuziemiona skrętka - 12mb. Czy jest to możliwe?

dawidt
21-12-2024 01:09
siema Grin

Maniek91PL
06-11-2024 22:37
dzięki !Grin

maxikaaz
29-10-2024 14:27
@Maniek91PL - Administration=> Admin Access, i tam masz "Allow Wireless Access" do zaznaczenia

Maniek91PL
26-10-2024 22:07
siemka! ktoś przypomni co się ustawiało jeśli nie mogę wejść od strony wifi do tomato? od lan działa

overflow2
04-10-2024 17:34
Kupowałem Asusy n10u albo n12d1 ale nie widzę ich, chyba już nie produkują, Chodzi o coś nowego i taniego. Transfery niewielkie.

maxikaaz
04-10-2024 09:38
@overflow2 patrząc po dostępności funkcji w nowych kompilacjach, to chyba nawet WRT54G/GL jeszcze ma OpenVPN, albo jakiś odpowiednik... zależy, na jakie transfery liczysz.

116,784,108 unikalnych wizyt