Jump to content

Don't worry about internal ports. Unless you've set up an internal firewall they will all be open.

 

Make sure to open the ports in Windows Firewall (or alternative)!

Link to post
Share on other sites

The port number can be changed when traversing networks. For this reason you have to specify the starting and ending range of ports on both interfaces.

Link to post
Share on other sites

2 minutes ago, Retrodex Gaming said:

Don't worry about internal ports. Unless you've set up an internal firewall they will all be open.

 

Make sure to open the ports in Windows Firewall (or alternative)!

i have to write something there tho? what do i write?

Link to post
Share on other sites

3 hours ago, The Torrent said:

it doesn't say about internal/external though.

Looks like you have a HomeHub 6, which this guide covers, looks like it's 32400!

 

https://portforward.com/bt/home-hub-6/

Link to post
Share on other sites

That's odd, as you absolutely need the same port range in both.  Although worst case, you put them in one at a time and hope it lets you add that many entries.

ASUS B650E-F GAMING WIFI + R7 7800X3D + 2x Corsair Vengeance 32GB DDR5-6000 CL30-36-36-76  + ASUS RTX 4090 TUF Gaming OC

Router:  Intel N100 (pfSense) Backup: GL.iNet GL-X3000/ Spitz AX Switches: Netgear MS510TXUP, MS510TXPP, GS110EMX
WiFi6: Zyxel NWA210AX (1.7Gbit peak at 160Mhz) WiFi5: Ubiquiti NanoHD OpenWRT (~500Mbit at 80Mhz)
ISPs: Zen Full Fibre 900 (~930Mbit down, 115Mbit up) + Three 5G (~1200Mbit down, 115Mbit up, variable)
Upgrading Laptop/Desktop CNVIo WiFi 5 cards to PCIe WiFi6e/7

Link to post
Share on other sites

This advice is horrible. 

 

 

OP, with this kind of router config, typically to forward ranges you only need to enter in the start port number for the Internal. 

So it would be "External Start 27015  External End 27030   Internal Start 27015. Because you've already specified a range, it auto calculates the Internal End to stop you trying to input an invalid number. 

 

Keep in mind your External can be different to your Internal. So if you were to do External 8000-8015, you could still do Internal 27015 which would still make the Internal end 27030. If you reverse that idea with External 27015-27030, and did Internal Start 8000, then the Internal End would be 8015.

 

In most cases you will match your internal to external ranges for simplicity but there may be security reasons (e.g SSH or RDP) or compatibility reasons (e.g multiple server instances) that you want to make these different. 

Spoiler

Desktop: Ryzen9 5950X | ASUS ROG Crosshair VIII Hero (Wifi) | EVGA RTX 3080Ti FTW3 | 32GB (2x16GB) Corsair Dominator Platinum RGB Pro 3600Mhz | EKWB EK-AIO 360D-RGB | EKWB EK-Vardar RGB Fans | 1TB Samsung 980 Pro, 4TB Samsung 980 Pro | Corsair 5000D Airflow | Corsair HX850 Platinum PSU | Asus ROG 42" OLED PG42UQ + LG 32" 32GK850G Monitor | Roccat Vulcan TKL Pro Keyboard | Logitech G Pro X Superlight  | MicroLab Solo 7C Speakers | Audio-Technica ATH-M50xBT2 LE Headphones | TC-Helicon GoXLR | Audio-Technica AT2035 | LTT Desk Mat | XBOX-X Controller | Windows 11 Pro

 

Spoiler

Server: Fractal Design Define R6 | Ryzen 3950x | ASRock X570 Taichi | Asus RTX 4060 Dual OC | 64GB (4x16GB) Corsair Vengeance LPX 3000Mhz | Corsair RM850v2 PSU | Fractal S36 Triple AIO + 4 Additional Venturi 120mm Fans | 8 x 20TB Seagate Exos X22 | 4 x 16TB Seagate Exos X18 | 3 x 2TB Samsung 970 Evo Plus NVMe | LSI 9211-8i HBA

 

Spoiler

NAS: Innovision 4U 24-bay chassis (12GB MiniHD SGIO Backplane) | Intel Core i9-10980xe | EVGA X299 FTW-K | EVGA RTX 2080Ti Super FTW3 | 128GB (8x16GB) Corsair Vengeance LPX 3200Mhz | DEEPCOOL PN1000M PSU| Noctua NH-D12L Chromax Black | 16 x 16TB Seagate Exos X18 | 2 x 2TB Samsung 990 Pro | 2 x 2TB Intel U.2 P4510 | LSI 9305-24i HBA

 

Link to post
Share on other sites

13 hours ago, Jarsky said:

This advice is horrible. 

 

 

OP, with this kind of router config, typically to forward ranges you only need to enter in the start port number for the Internal. 

So it would be "External Start 27015  External End 27030   Internal Start 27015. Because you've already specified a range, it auto calculates the Internal End to stop you trying to input an invalid number. 

 

Keep in mind your External can be different to your Internal. So if you were to do External 8000-8015, you could still do Internal 27015 which would still make the Internal end 27030. If you reverse that idea with External 27015-27030, and did Internal Start 8000, then the Internal End would be 8015.

 

In most cases you will match your internal to external ranges for simplicity but there may be security reasons (e.g SSH or RDP) or compatibility reasons (e.g multiple server instances) that you want to make these different. 

Ok so I get the first bit - for the range, set the start value as the start for the internal and it auto calculates. I don’t understand the second half as I am unable to edit the external end range so I can’t use it as 2 rules in 1 rule if I’m understanding correctly, but that’s not important.

 

great, thanks?

 

Link to post
Share on other sites

7 hours ago, The Torrent said:

Ok so I get the first bit - for the range, set the start value as the start for the internal and it auto calculates. I don’t understand the second half as I am unable to edit the external end range so I can’t use it as 2 rules in 1 rule if I’m understanding correctly, but that’s not important.

 

great, thanks?

 

 

You dont need to do the port remapping in most cases. 

 

What I was trying to explain, is that you may want to use nonstandard ports. If we use a single port as an example, if you wanted to open RDP, because bots from China, Iran, Russia, etc...are constantly scanning networks for open Port 3389 (RDP Port), you might want to make it something non standard like 4000. Now if you were to map port 4000 from external to port 4000 internal...because your RDP is running on port 3389 it doesnt work without changing the port your RDP works on. This is where the port remapping comes in. In this example your external port would be 4000, but internal would still be 3389, so by remapping the port you dont have to change any configuration on the server to have it run on a different port. This same concept can extend to port ranges as well. 

Spoiler

Desktop: Ryzen9 5950X | ASUS ROG Crosshair VIII Hero (Wifi) | EVGA RTX 3080Ti FTW3 | 32GB (2x16GB) Corsair Dominator Platinum RGB Pro 3600Mhz | EKWB EK-AIO 360D-RGB | EKWB EK-Vardar RGB Fans | 1TB Samsung 980 Pro, 4TB Samsung 980 Pro | Corsair 5000D Airflow | Corsair HX850 Platinum PSU | Asus ROG 42" OLED PG42UQ + LG 32" 32GK850G Monitor | Roccat Vulcan TKL Pro Keyboard | Logitech G Pro X Superlight  | MicroLab Solo 7C Speakers | Audio-Technica ATH-M50xBT2 LE Headphones | TC-Helicon GoXLR | Audio-Technica AT2035 | LTT Desk Mat | XBOX-X Controller | Windows 11 Pro

 

Spoiler

Server: Fractal Design Define R6 | Ryzen 3950x | ASRock X570 Taichi | Asus RTX 4060 Dual OC | 64GB (4x16GB) Corsair Vengeance LPX 3000Mhz | Corsair RM850v2 PSU | Fractal S36 Triple AIO + 4 Additional Venturi 120mm Fans | 8 x 20TB Seagate Exos X22 | 4 x 16TB Seagate Exos X18 | 3 x 2TB Samsung 970 Evo Plus NVMe | LSI 9211-8i HBA

 

Spoiler

NAS: Innovision 4U 24-bay chassis (12GB MiniHD SGIO Backplane) | Intel Core i9-10980xe | EVGA X299 FTW-K | EVGA RTX 2080Ti Super FTW3 | 128GB (8x16GB) Corsair Vengeance LPX 3200Mhz | DEEPCOOL PN1000M PSU| Noctua NH-D12L Chromax Black | 16 x 16TB Seagate Exos X18 | 2 x 2TB Samsung 990 Pro | 2 x 2TB Intel U.2 P4510 | LSI 9305-24i HBA

 

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×