Bypassing my D-Link Router with a firewall:

squarenothing66 · #1 03-25-2003, 02:24 PM

Is there anyone who uses a D-Link router registered here? Everything works fine when I am connecting to someone else's server, but when I try to connect to my own, I get a 1017 error, which is obviously caused by the firewall.

I've also looked through the manuel, and I've tried everything from opening the ports needed, to making the whole router into a DMZ (where everything bypasses the firewall). It sets up a different IP for each computer, so that each computer can be recognized, and I am actually wondering if that may pose a problem also.

Would anyone happen to know if there would be a way to set up the IP's in the .bat file and .ini file, so that I could specify the main IP address, then the one for my computer within the network? Maybe something like how domains are set up with the "www.blah.com/subdirectory/blah.html"... is it possible to do that with IP addresses, making it something like "mainIP/subIP"?

As you can probably tell, I am really determined to get a server up and running... but this router is just a thorn in my side. I am going to try setting it up near this computer (this one is on a wireless connection to the router), and having my other computer on the wireless connection... If I can it set up like that somehow, then maybe I can get something going...

One more question... are there such things as ethernet cable splitters? That would make my problem so much easier to solve.

ritojo · #2 03-25-2003, 05:02 PM

i have a d-link router and was having the same problems. I put my 192.168.*.* ip into the DMZ not the router. Then i went to the firewall settings and made an action. I put a * in ALL of the options and checked enabled and always. worked fine for me since then. Hoped I helped

ritojo · #3 03-25-2003, 05:03 PM

by the way .... the * means any number..

squarenothing66 · #4 03-26-2003, 08:13 AM

Hmm, I kind of get what you are saying, but I kind of don't. When I go to put my computer's "sub-IP" into the router, and click save, it doesn't keep the number there. ***Edit: It seems that it will let me save any number but the actual one that is designated to this computer.***

About the second part of you instructions, could you explain a little better? I don't quite get what you are saying there.

squarenothing66 · #5 03-26-2003, 08:14 AM

Also, if you could put a step by step thing to do this, it would help greatly... :lol:

squarenothing66 · #6 03-27-2003, 08:24 AM

*bump*

Halonin · #7 03-27-2003, 11:56 AM

I got sick and tired of trying to remember how to set the IP and DNS of a client so i decided to finally put all the usefull shit needed into one big text file so it would be their for quick access and use. Also this could be used as a VERY good reference as to how to set up Clients on a Network.

I had a DSL connection at the time I wrote this so this text is based on that experience. My setup was something like this:

The telephone line with the DSL connection on it hooked up into the DSL modem. The modem then had an RJ45 connector going into the DSL Router (this was a Linksys BEFSR41 4-port router). The Client PC's then connected into the Router from their individual NIC's.

Using the default address of the router in Internet Explorer allowed me to adjust the settings.

http:// 192.168.1.1

admin/admin as the login/password

from here i entered in the information provided by my ISP.

IP ADDRESS: xxx.xx.xxx.xxx
SUBNET MASK: 255.255.255.0
GATEWAY: xxx.xxx.xxx.xxx
DNS1: xxx.xxx.xxx.xx
DNS2: xxx.xxx.xxx.x

I DISABLED DHCP and left the starting address at the default.

I went into the advanced settings. I knew that the Client i would be primarily using would have an FTP and would be using alot of online resources. So i first setup the Filter for the FTP:

Under Forwarding I knew that the FTP would have a Port of 21. so I set the:

Service Port Range: 20 ~ 21
Protocol: Both
IP Address: 192.168.1.2 ( The machine I was going to be using's IP )

Then under Port Triggering:

Application Name: FTP
Trigger Port Range: 20 ~ 21
Incoming Port Range: 20 ~ 21

As I stated earlier, I knew i was going to be using alot of online resources so I wanted my machine to use DMZ Hosting. This feature sets a local user to be exposed to the Internet. Any user on the Internet can access in/out data from the DMZ host.

DMZ Host IP Address: 192.168.1.2

Now that my Router was setup, it was time to Setup the Clients.

In order to use the FTP, I HAD to disable DHCP. Unfortunatley this meant that I would have to manually assign IP Addresses for the Client PC's.

In Network Neighborhood i had the following Installed:

Client for Microsoft Networks
Dial-Up Adapter
Network Adapter ( on the NIC card )
NetBEUI->( also on the NIC -- required for Filesharing on the network )
TCP/IP -> Dial-Up Adapter
TCP/IP -> ( on the NIC card )
File and Printer Sharing for Microsoft Networks

To save me some typing, I was having trouble with the Client Configurations, so i did some browsing and came accross a post on a messageboard about how to set up Clients with DCHP disabled. Here is the meat and potatoes of that post:

-----------------------------------------------------------------------

Say I'm setting up 3 computers, WS1, WS2, and WS3. I always disable DHCP server for the LAN on the router. I usually build my workstations with IP scope from 100-254. I leave the 20s range for print servers, the 2-9 for other servers, etc. DNS host name also equals your computers network ID name, which is what you see the computer called in network neighborhood. Also, all 3 workgroups should be the same so you can see all the computers in the first level of your network. And you will only see computers in network neighborhood if they have File and Print sharing loaded, or if they are running NT.
Below example is using DSL from SNET, with SNETs DNS servers at 204.60.0.2 and .3 Find out your ISP's DNS servers, either through the documentation they send you, their support website, or better yet, just log onto the routers status page and see what they hand your router through when it logs on and is connected.

************************************************** *********************
*WARNING: THESE CHANGES ARE FOR THE TCP/IP -> ( on the NIC card) ONLY**
************************************************** *********************

WS1 IP 192.168.1.100
Subnet 255.255.255.0
WINS Disabled
Gateway 192.168.1.1
DNS Host WS1
DNS Domain SNET.NET
DNS Servers 204.60.0.2 and 204.60.0.3

WS2 IP 192.168.1.101
Subnet 255.255.255.0
WINS Disabled
Gateway 192.168.1.1
DNS Host WS2
DNS Domain SNET.NET
DNS Servers 204.60.0.2 and 204.60.0.3

WS3 IP 192.168.1.102
Subnet 255.255.255.0
WINS Disabled
Gateway 192.168.1.1
DNS Host WS3
DNS Domain SNET.NET
DNS Servers 204.60.0.2 and 204.60.0.3
-----------------------------------------------------------------------

As you can see the ISP I was using did not require a DNS Domain. Also the DNS Server numbers were different and I chose to assign the IP's 192.168.1.2 and .3 to my two systems. However with those subtle changes this setup seemed to work perfectly.

squarenothing66 · #8 03-28-2003, 10:41 AM

Thanks Halo, but that wasn't really what I am looking for.

Ritojo, I sent you an email regarding how to set up my router.

ritojo · #9 03-30-2003, 04:49 PM

sorry i took so long , been pretty busy with work.
anyways , you wanna set up your router so that it doesnt block ANYTHING in or out. Doing this isnt really good for the security of your computer but if you want to run the server , you have to do this. first put your LAN ip into the DMZ zone. Do this by clicking the Advanced tab, then to the left you will see a button called DMZ... click it. enter the last 3 numbers of your computers LAN ip (you can find this by going to start\run and typing ipconfig) check enabled and click apply. Then click firewall (your still in advanced) your gonna make a new action. Name it , click enabled , click allow, keep source and destination a * (its default) , on both ip start and ip range put a * in it , for protocol make it a * as well , and port range put a * in both of those. check always and click apply. then click virtual server (still under advanced) , check enabled , type eqemu for name , type your LAN ip in private ip , for protocol type pick both , for private port and public port type 9000 , check always and click apply.
I hope this is easier to understand.