Free Help Setting up Your Router or Firewall Set up your router from home
Router List Port List Port Checker Other Guides Game Guides Store Support Forum
see list of routers and firewalls below

  Welcome, Guest. Please Login or Register
If you ask a question, please answer a question. Help someone out by sharing your knowledge.
  HomeHelpSearchLoginRegister  
 
Pages: 1
Send Topic Print
Thomson TG585 v7: forwarding port 80 impossible? (Read 6232 times)
mclduk
YaBB Newbies
*
Offline

I Love PF!

Posts: 5

Thomson TG585 v7: forwarding port 80 impossible?
08/18/9 at 13:37:45
 
Hi - Just got a Thomson TG585 v7. I set up some incoming SSH forwarding, incoming port 22 to port 22 on a local machine with static IP, fine.

I try to do exactly the same thing but for incoming port 80, but the router doesn't seem to allow that since it always replies to all port 80 requests with its own admin web-interface. Here's me trying to do SSH login from outside, which works fine on port 22, then fails on port 80:

d-s:$ ssh -p 22 myself@83.104.*.*
Password:
Last login: Tue Aug 18 22:19:56 2009
Welcome to Darwin!
imac:~ myself $ logout
Connection to 83.104.*.* closed.

d-s:$ ssh -p 80 myself@83.104.*.*
ssh_exchange_identification: Connection closed by remote host


and this next bit shows that it's the router config page appearing on port 80:

d-s:$ curl 83.104.*.*:80
<HTML><HEAD><TITLE>HTTP/1.0 401 Authorization Required</TITLE></HEAD><BODY>
<H1>HTTP/1.0 401 Authorization Required</H1>
</BODY></HTML>


Here's my rule in the router that tries to map the port:

Protocol      Port Range      Translate To ...      Trigger Protocol      Trigger Port      
TCP      80 - 80      22 - 22      -      -


On my old router I had this all set up nicely. So from inside the LAN, port 80 shows up as the router web admin, while from outside the LAN, port 80 gets forwarded to another machine. Is there something I'm doing wrong? Or is this not possible at all with the Thomson TG585 v7? Anyone managed to forward port 80?
Back to top
 
« Last Edit: 08/19/9 at 12:29:04 by tedtrp »  
  IP Logged
tedtrp
Global Moderator
*****
Offline

No place like
127.0.0.1 (home)

Posts: 16263

Re: Thomson TG585 v7: forwarding port 80 impossible?
Reply #1 - 08/19/9 at 12:28:01
 
It seems your router has remote control turned on.

a) please turn off that feature.

b) Or change the remote control port to something else.

This may be at Toolbox -> Remote Assistance
Back to top
 
 

Save your self a lot of time and frustration, read the stickies before posting. Most of them are in the Knowledge Base - Thank you.
  IP Logged
mclduk
YaBB Newbies
*
Offline

I Love PF!

Posts: 5

Re: Thomson TG585 v7: forwarding port 80 impossible?
Reply #2 - 08/19/9 at 12:45:10
 
Thanks - I think it doesn't have that turned on though:

"Remote assistance is currently disabled.
URL: https://83.104.*.*:51003"

Anything else I could try?
Back to top
 
 
  IP Logged
tedtrp
Global Moderator
*****
Offline

No place like
127.0.0.1 (home)

Posts: 16263

Re: Thomson TG585 v7: forwarding port 80 impossible?
Reply #3 - 08/20/9 at 09:14:48
 
Very odd..

#1 What firmware/software release is this router running?

For example at http://www.portforward.com/english/routers/port_forwarding/Thomson-Alcatel/Speed...

you see that the firmware/software release is 5.3

#2 Considering showing the first screen that you see after you log-in to this router.

Knowledge Base › How to take and post screenshots

#3 Can you get telnet access to the router?

For example, if you were on Windows XP...

a) Go to Start -> Run

b) Type in cmd and press enter.

c) In the new window, called the command prompt, type in telnet and press enter.

d) Type in the letter O with the LAN IP of the router, and press enter. For example if the LAN IP was 192.168.1.1, you would type in o 192.168.1.1.

e) Log-in as need be.

#4 Do you have still have that other old router?

b) If so, what is the brand and model of it?
Back to top
 
 

Save your self a lot of time and frustration, read the stickies before posting. Most of them are in the Knowledge Base - Thank you.
  IP Logged
mclduk
YaBB Newbies
*
Offline

I Love PF!

Posts: 5

Re: Thomson TG585 v7: forwarding port 80 impossible?
Reply #4 - 08/20/9 at 13:59:36
 
The firmware version is 7.4.4.7 - as far as I can tell, that's the latest version... can't find a download with a higher version, anyway.

Yes I do still have the old router, it's a D-Link G604T.

Here's a screenshot of the web login:



And here's a screenshot of the telnet login:



And here's the screen where I defined the forwarding rule:


Back to top
 
 
  IP Logged
tedtrp
Global Moderator
*****
Offline

No place like
127.0.0.1 (home)

Posts: 16263

Re: Thomson TG585 v7: forwarding port 80 impossible?
Reply #5 - 08/20/9 at 16:40:33
 
I am not saying it is impossible to forward the ports with that router.

But since the other router worked nicely, you might as well use it.

But your existing router has a very serious security problem right now. It is not honoring the remote control settings. When you say off, it should be off.

If you want to use the Thomson TG585 v7, I would suggest that you head over to DSLR (dslreports.com)Forums » Up and Running » Security » Security OR some other website with message board(s) that talks a lot more about security and see what they know about turning off remote access.

It is one thing that your router takes you the admin interface from the LAN, but users from the net should not be able to get access to the router unless you want them to.

^^^
Back to top
 
 

Save your self a lot of time and frustration, read the stickies before posting. Most of them are in the Knowledge Base - Thank you.
  IP Logged
mclduk
YaBB Newbies
*
Offline

I Love PF!

Posts: 5

Re: Thomson TG585 v7: forwarding port 80 impossible?
Reply #6 - 08/20/9 at 22:29:24
 
I did think it was odd you could get the admin interface from outside.

(The older router doesn't support ADSL2 so it doesn't work properly any more Undecided)

Back to top
 
 
  IP Logged
mclduk
YaBB Newbies
*
Offline

I Love PF!

Posts: 5

Re: Thomson TG585 v7: forwarding port 80 impossible?
Reply #7 - 08/20/9 at 23:27:09
 
FIXED IT!

Thanks for your tips. I went to that other forum and eventually somewhere else (this kitz page about the 585 v7), and then I logged in via telnet and typed config dump, which showed me a massive list of stuff including:

[ servmgr.ini ]
ifadd name=PPTP group=lan
ifadd name=HTTP group=lan
ifadd name=HTTP group=wan            <-------
ifadd name=HTTPs group=lan
ifadd name=FTP group=lan
ifadd name=FTP group=wan
ifadd name=TELNET group=lan
ifadd name=TELNET group=wan          <-------
ifadd name=DNS-S group=lan


See where I've put the arrows, that shows access from the outside is enabled. So then I ran these commands:

service system ifdelete name HTTP group wan
service system ifdelete name TELNET group wan
saveall
system reboot


Having done that, the admin access from outside is disabled (security fixed! thanks for spotting it tedtrp), meaning that port 80 can be used for other things, and port forwarding works fine.

Cheers!
Back to top
 
 
  IP Logged
tedtrp
Global Moderator
*****
Offline

No place like
127.0.0.1 (home)

Posts: 16263

Re: Thomson TG585 v7: forwarding port 80 impossible?
Reply #8 - 08/21/9 at 11:45:20
 
mclduk wrote on 08/20/9 at 22:29:24:
I did think it was odd you could get the admin interface from outside.


I thought it was too.

I only viewed HTTP headers... For example of viewing HTTP headers, I went to http://network-tools.com/ entered an IP address in the field, select HTTP Headers and pressed go

(And OR)

I was only able to get to the log-in screen. I would not certainly attempt to log-in without your permission.

--

I am glad, that you got it fixed. Smiley

HTTP headers with http://network-tools.com/ shows when targeting your IP...

Quote:
HTTP/1.0 404 File Not Found
Content-Type: text/html


^^
Back to top
 
 

Save your self a lot of time and frustration, read the stickies before posting. Most of them are in the Knowledge Base - Thank you.
  IP Logged
Pages: 1
Send Topic Print