Loopback not working on LAN only

Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware
Author Message
jmbond04
DD-WRT Novice


Joined: 21 Sep 2013
Posts: 2

PostPosted: Mon Mar 21, 2016 15:26    Post subject: Loopback not working on LAN only Reply with quote
I have just noticed that I am not able to use my external IP address and ddns hostname to access my website while on my local lan. I can access using WiFi on my local network and from VPN and just an external network. I have recently set up a Guest network so my best guess it maybe so setting in that caused this. I'm looking at maybe my iptables aren't set up correctly. Also I can ping my network using my external IP.

    Router: Buffalo WZR-HP-AG300H
    Firmware: DD-WRT v24-sp2 (05/03/13) std - build 21453
    CPU:Atheros AR7161


These are my current Startup Commands:
Code:
openvpn --mktun --dev tap0
brctl addif br0 tap0
ifconfig tap0 192.168.11.1 255.255.255.0


These are my current Firewall Commands:
Code:
iptables -t nat -A POSTROUTING -j MASQUERADE

iptables -I INPUT 1 -p udp -dport 1194 -j ACCEPT
iptables -I FORWARD 1 -source 192.168.11.0/24 -j ACCEPT
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT


iptables -t nat -I POSTROUTING -o `get_wanface` -j SNAT --to `nvram get wan_ipaddr`
iptables -I FORWARD -i br1 -m state --state NEW -j ACCEPT
iptables -I FORWARD -i br1 -o br0 -m state --state NEW -j DROP
iptables -I FORWARD -i br0 -o br1 -m state --state NEW -j DROP
iptables -I INPUT -i br1 -p tcp --dport telnet -j REJECT --reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp --dport ssh -j REJECT --reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp --dport www -j REJECT --reject-with tcp-reset
iptables -I INPUT -i br1 -p tcp --dport https -j REJECT --reject-with tcp-reset


I'm not really sure what other information would be useful to provide.
If anyone has any idea how to fix this please let me know.
Sponsor
GreyDoc
DD-WRT User


Joined: 04 Jun 2015
Posts: 392

PostPosted: Mon Mar 21, 2016 15:51    Post subject: Reply with quote
update to today's build http://www.dd-wrt.com/phpBB2/viewtopic.php?t=300169
mrjcd
DD-WRT Guru


Joined: 31 Jan 2015
Posts: 6293
Location: Texas

PostPosted: Mon Mar 21, 2016 16:02    Post subject: Reply with quote
try
Code:
iptables -I FORWARD -i br1 -o br0 -d 192.168.x.x -m state --state NEW -j ACCEPT

using local IP of your webserver
jmbond04
DD-WRT Novice


Joined: 21 Sep 2013
Posts: 2

PostPosted: Tue Mar 22, 2016 14:33    Post subject: Reply with quote
Thanks for the reply's but it looks like my home internet has gone out so I can't do either one of these right now. I'll try these out once it gets back but.
Display posts from previous:    Page 1 of 1
Post new topic   Reply to topic    DD-WRT Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum