port forwarding asus ac-68u

[filisdiez]

I try to open ports on the router of Asus ac68u with the last firmware of Merlin for updating of letsencrypt ddns on qnap, but ports live life - yesterday were open today again are closed though all settings in readdressing of ports remained.

Tried to add through iptables, too it is ineffectual - entered such commands:
iptables -t filter -A INPUT -p tcp -s 192.168.1.76 --dport 81 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --sport 81 -j ACCEPT
Help to open them, please.

 

[dave14305]

I try to open ports on the router of Asus ac68u with the last firmware of Merlin for updating of letsencrypt ddns on qnap, but ports live life - yesterday were open today again are closed though all settings in readdressing of ports remained.

Tried to add through iptables, too it is ineffectual - entered such commands:
iptables -t filter -A INPUT -p tcp -s 192.168.1.76 --dport 81 -j ACCEPT
iptables -t filter -A OUTPUT -p tcp --sport 81 -j ACCEPT
Help to open them, please.

Port forwarding appears in the nat table under VSERVER.

iptables -t nat -S VSERVER

 

[filisdiez]

Port forwarding appears in the nat table under VSERVER.

iptables -t nat -S VSERVER

-N VSERVER
-A VSERVER -p tcp -m tcp --dport 81 -j DNAT --to-destination 192.168.1.76
-A VSERVER -p tcp -m tcp --dport 8080 -j DNAT --to-destination 192.168.1.76
-A VSERVER -p udp -m udp --dport 8080 -j DNAT --to-destination 192.168.1.76
-A VSERVER -p tcp -m tcp --dport 8081 -j DNAT --to-destination 192.168.1.76
-A VSERVER -p udp -m udp --dport 8081 -j DNAT --to-destination 192.168.1.76
-A VSERVER -p tcp -m tcp --dport 7443 -j DNAT --to-destination 192.168.1.76
-A VSERVER -j VUPNP

 

[GSpock]

I do not know if this applies to QNAP, but on Synology when you want to create a letsencrypt certificate, you have also to open & redirect port 80 to the NAS (I see 81 in your case). Further updates do not require 80 to be opened, it is done via the usual port required to access the NAS from outside (7443 in your case I think).

 

[filisdiez]

I do not know if this applies to QNAP, but on Synology when you want to create a letsencrypt certificate, you have also to open & redirect port 80 to the NAS (I see 81 in your case). Further updates do not require 80 to be opened, it is done via the usual port required to access the NAS from outside (7443 in your case I think).

In attempt to update the certificate he writes that there is no access to the 80 port

 

[GSpock]

In attempt to update the certificate he writes that there is no access to the 80 port

Yes, I had the same on Synology but it is not true. It updates the certificate via the usual port. BTW, you opened/redirect port 81, not 80 .... it only required port 80 at certificate creation, not for upating existing one.

 

[filisdiez]

Yes, I had the same on Synology but it is not true. It updates the certificate via the usual port. BTW, you opened/redirect port 81, not 80 .... it only required port 80 at certificate creation, not for upating existing one.

I was mistaken I want not to update, and to set the certificate. Means there the rigid binding goes to the 80th port? And how you set the certificate just having opened port?

 

[GSpock]

I was mistaken I want not to update, and to set the certificate. Means there the rigid binding goes to the 80th port? And how you set the certificate just having opened port?

https://forum.qnap.com/viewtopic.php?t=144434

 

[filisdiez]

All understood, it is qnap blocked ports - on it it appears too there is a firewall