Pinging WRT54GL off Network

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Goto page 1, 2  Next
Author Message
ucop27
DD-WRT Novice


Joined: 03 Oct 2008
Posts: 12

PostPosted: Fri Oct 03, 2008 4:14    Post subject: Pinging WRT54GL off Network Reply with quote
I am using the wrt54gl router with the v24 generic firmware, I have a Netcam attached to the router, my problem is that I can't access the Netcam by using the IP addy, when I attempt to ping the router off my network it doesn't respond, bbut I can ping it on my network. I uncheck the block ping box, what might I be missing. This router just replaced a netgear router, I was able to access my Netcam off my network without a problem.

Thanks.
Sponsor
ucop27
DD-WRT Novice


Joined: 03 Oct 2008
Posts: 12

PostPosted: Fri Oct 03, 2008 22:15    Post subject: Reply with quote
Disabled firewall and still can't access my netcam from the wan, any ideas? I have port forwarded port 80 and still have issues.
soulstace
DD-WRT Guru


Joined: 04 Aug 2007
Posts: 6427

PostPosted: Fri Oct 03, 2008 22:26    Post subject: Reply with quote
What is your result of a ShieldsUP test? And does the IP address reported by that site actually match your router's WAN IP?
ucop27
DD-WRT Novice


Joined: 03 Oct 2008
Posts: 12

PostPosted: Fri Oct 03, 2008 23:03    Post subject: Reply with quote
soulstace wrote:
What is your result of a ShieldsUP test? And does the IP address reported by that site actually match your router's WAN IP?


The Ip does match, here are the reults-


GRC Port Authority Report created on UTC: 2008-10-03 at 23:01:46

Results from scan of ports: 0-1055

0 Ports Open
0 Ports Closed
1056 Ports Stealth
---------------------
1056 Ports Tested

ALL PORTS tested were found to be: STEALTH.

TruStealth: PASSED - ALL tested ports were STEALTH,
- NO unsolicited packets were received,
- NO Ping reply (ICMP Echo) was received.

I did port forward port 80, not sure why it shows as being stealth and not open.
ucop27
DD-WRT Novice


Joined: 03 Oct 2008
Posts: 12

PostPosted: Fri Oct 03, 2008 23:06    Post subject: Reply with quote
then this-

Your Internet port 139 does not appear to exist!
One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.

Unable to connect with NetBIOS to your computer.
All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.
soulstace
DD-WRT Guru


Joined: 04 Aug 2007
Posts: 6427

PostPosted: Fri Oct 03, 2008 23:12    Post subject: Reply with quote
If you disabled SPI firewall like you said before, result should NOT be "Stealth". The router should respond to pings and all unopen ports respond as "closed".

telnet in, erase nvram, reboot, and reconfigure.

Make sure you are applying settings once everything is set up the way you like.


Last edited by soulstace on Fri Oct 03, 2008 23:13; edited 1 time in total
ucop27
DD-WRT Novice


Joined: 03 Oct 2008
Posts: 12

PostPosted: Fri Oct 03, 2008 23:13    Post subject: Reply with quote
soulstace wrote:
What is your result of a ShieldsUP test? And does the IP address reported by that site actually match your router's WAN IP?



I just checked the router wan ip and its not the same, it shows my wan ip add as 192.168.254.2, how do I go about changeing that?
soulstace
DD-WRT Guru


Joined: 04 Aug 2007
Posts: 6427

PostPosted: Fri Oct 03, 2008 23:15    Post subject: Reply with quote
Oh, well that changes everything. First you say it matched, but now it doesn't.

Your router currently has private IP which is not accessible from the internet.

Switch your modem into bridge mode so that the router can get a public IP from your ISP. Then configure the router and run the ShieldsUp test again.
ucop27
DD-WRT Novice


Joined: 03 Oct 2008
Posts: 12

PostPosted: Fri Oct 03, 2008 23:19    Post subject: Reply with quote
soulstace wrote:
If you disabled SPI firewall like you said before, result should NOT be "Stealth". The router should respond to pings and all unopen ports respond as "closed".

telnet in, erase nvram, reboot, and reconfigure.

Make sure you are applying settings once everything is set up the way you like.


I did the test again with the firewall disabled, still showed all ports as being stealth, how to I telnet in to the router?
soulstace
DD-WRT Guru


Joined: 04 Aug 2007
Posts: 6427

PostPosted: Fri Oct 03, 2008 23:22    Post subject: Reply with quote
But that answer only applies if ShieldsUp reported same WAN IP as your router. See my last post.
ucop27
DD-WRT Novice


Joined: 03 Oct 2008
Posts: 12

PostPosted: Mon Oct 20, 2008 12:57    Post subject: Reply with quote
The modem I am using is a siemens 567, it shows in bridge/ip mode, when I am in my modem in shows my wan ip as 72.xx.xxx.xxx, why isn't my router picking up the wan ip? I rebooted eveything, starting with the modem and then the router, but my router still shows a private wan ip.
soulstace
DD-WRT Guru


Joined: 04 Aug 2007
Posts: 6427

PostPosted: Mon Oct 20, 2008 15:40    Post subject: Reply with quote
Make sure DHCP is disabled on the modem.
ucop27
DD-WRT Novice


Joined: 03 Oct 2008
Posts: 12

PostPosted: Mon Oct 20, 2008 16:19    Post subject: Reply with quote
When I disabled dchp is asks me ti fill in my ip adress and ip netmask, what needs to go in there? Also when my lease expires won't I have to change those?
soulstace
DD-WRT Guru


Joined: 04 Aug 2007
Posts: 6427

PostPosted: Mon Oct 20, 2008 16:28    Post subject: Reply with quote
Is it asking for static LAN config or static WAN config?

If LAN, use something like 192.168.100.1 subnet mask 255.255.255.0.

dd-wrt will be 192.168.1.1 on the LAN side. But it should pull a public IP from your ISP.
ucop27
DD-WRT Novice


Joined: 03 Oct 2008
Posts: 12

PostPosted: Mon Oct 20, 2008 16:58    Post subject: Reply with quote
this is what the screen looks like


Select the configuration parameters for your 2684 connection.doc
 Description:

Download
 Filename:  Select the configuration parameters for your 2684 connection.doc
 Filesize:  42.5 KB
 Downloaded:  488 Time(s)


Select the configuration parameters for your 2684 connection.doc
 Description:

Download
 Filename:  Select the configuration parameters for your 2684 connection.doc
 Filesize:  42.5 KB
 Downloaded:  532 Time(s)

Goto page 1, 2  Next Display posts from previous:    Page 1 of 2
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum