Port Forwarding issues, please help

[Eyely Kaynal]

Hello everybody.

I've just purchased the RT-N66U and flashed Merlin's 378.55 firmware.

I'm trying to forward ports but I'm having no luck. I'm no expert, but I've managed this successfully with no issues on my last 5 routers.

I'm using port 13338 as a test. When forwarded manually, it is closed. However, when the port is opened via a program using UPnP, it works fine.

I will attach a copy of an 'iptables --table nat --list -v -n' printout for both instances below. Instance 1 is with UPnP enabled. Instance 2 is without. Could anyone please help me with this?

1-------(port open)-------iptables --table nat --list -v -n
Chain PREROUTING (policy ACCEPT 707 packets, 56744 bytes)
pkts bytes target     prot opt in     out     source               destination
  151  9739 VSERVER    all  --  *      *       0.0.0.0/0            10.65.154.214
    0     0 VSERVER    all  --  *      *       0.0.0.0/0            169.254.58.197

Chain POSTROUTING (policy ACCEPT 24 packets, 6058 bytes)
pkts bytes target     prot opt in     out     source               destination
  525 43430 MASQUERADE  all  --  *      ppp0   !10.65.154.214        0.0.0.0/0
    0     0 MASQUERADE  all  --  *      vlan50 !169.254.58.197       0.0.0.0/0

Chain OUTPUT (policy ACCEPT 11 packets, 4147 bytes)
pkts bytes target     prot opt in     out     source               destination

Chain DNSFILTER (0 references)
pkts bytes target     prot opt in     out     source               destination

Chain LOCALSRV (0 references)
pkts bytes target     prot opt in     out     source               destination

Chain PCREDIRECT (0 references)
pkts bytes target     prot opt in     out     source               destination

Chain VSERVER (2 references)
pkts bytes target     prot opt in     out     source               destination
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8080 to:192.168.5.1:80
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:27030:27039 to:192.168.5.82
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:27000:27015 to:192.168.5.82
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1200 to:192.168.5.82
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:13338 to:192.168.5.82:13338
   13  1911 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:13338 to:192.168.5.82:13338
  138  7828 VUPNP      all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain VUPNP (1 references)
pkts bytes target     prot opt in     out     source               destination
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:13338 to:192.168.5.82:13338
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:13338 to:192.168.5.82:13338


2-------(port closed)-------iptables --table nat --list -v -n
Chain PREROUTING (policy ACCEPT 735 packets, 58851 bytes)
pkts bytes target     prot opt in     out     source               destination
  169 10924 VSERVER    all  --  *      *       0.0.0.0/0            10.65.154.214
    0     0 VSERVER    all  --  *      *       0.0.0.0/0            169.254.58.197

Chain POSTROUTING (policy ACCEPT 28 packets, 6888 bytes)
pkts bytes target     prot opt in     out     source               destination
  534 44145 MASQUERADE  all  --  *      ppp0   !10.65.154.214        0.0.0.0/0
    0     0 MASQUERADE  all  --  *      vlan50 !169.254.58.197       0.0.0.0/0

Chain OUTPUT (policy ACCEPT 12 packets, 4572 bytes)
pkts bytes target     prot opt in     out     source               destination

Chain DNSFILTER (0 references)
pkts bytes target     prot opt in     out     source               destination

Chain LOCALSRV (0 references)
pkts bytes target     prot opt in     out     source               destination

Chain PCREDIRECT (0 references)
pkts bytes target     prot opt in     out     source               destination

Chain VSERVER (2 references)
pkts bytes target     prot opt in     out     source               destination
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:8080 to:192.168.5.1:80
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpts:27030:27039 to:192.168.5.82
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpts:27000:27015 to:192.168.5.82
    0     0 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:1200 to:192.168.5.82
    0     0 DNAT       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp dpt:13338 to:192.168.5.82:13338
   16  2316 DNAT       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:13338 to:192.168.5.82:13338
  153  8608 VUPNP      all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain VUPNP (1 references)
pkts bytes target     prot opt in     out     source               destination

Also, I notice at the top of my iptables that there are two private IPs (10.x.y.z and 169.x.y.x). When I type these into my browser, my router's config page appears. I've never noticed this before, could anyone a little wiser than myself please advise me on what/why this is?

I appreciate any help anyone can provide and I apologise if I've overlooked something small and/or done something wrong.

Regards,

Colin