Port Forwarding

[albrechtar]

I have a question with regards to port forwarding. I followed your instructions and when I attempt to check my ports are forwarding I get a timeout error. I am using a NetGear X8 with DD-WRT flashed on it.

I forwarded both 80 and 443 to my static IP for the pi. I contacted my ISP to ensure they are not blocking any ports (they informed me they are not). I am not sure what I am doing wrong. I am running a modem/router in full bridged mode and my router behind it.

I am certain I have set up the port forwarding rules properly with the name (can be anything as I understand), the port to forward from i.e. 80 and the port to forward to i.e. 80, and then the static ip of my pi.

I used sudo reboot for my pi, and rebooted my router after clicking enable on the port forwarding rule and apply changes.

ny guidance or information you may have would be greatly appreciated. Also may I use a RAID drive as my drive and just plug it into the USB port on my pi (it has its own power source of course). Thank you, and this was by far the best tutorial I have seen for setting up NextCloud with my Pi.

AL

What version of NextCloudPi are you using? ( eg: v0.17.2 )

What is the base image that you installed on the SD card? ( eg: NextCloudPi_07-21-17 )

Expected behavior

Actual behaviour

Steps to reproduce, from a freshly installed image

Include logs

Nextcloud logs

``` Login as admin user into your Nextcloud and copy here the logs from https://example.com/index.php/settings/admin/logging If you don't have access to the web interface, open a terminal session and paste the last 100 lines of /var/www/nextcloud/data/nextcloud.log ```

Apache logs

``` Paste the output of `systemctl status apache2` Paste the output of `tail -n 100 /var/log/apache2/*.log` ```

mariaDB logs

``` Paste the output of `systemctl status mysqld` Paste the output of `tail -n 100 /var/log/mysql/*.log` ```

[Pant]

On my Router, under the Port Forwarding tab, there is an option to select the WAN Connection. I have to use PTM_DSL (not ATM_DSL). Also there are two fields to specify the WAN Host IP Range. I have to set this to 0.0.0.0 - 0.0.0.0 , so that it forwards everything to my Raspberry Pi.

Share if you can what are your other options on your Router web interface.

[nachoparker]

you can try this to see if your ports are really open or not

http://www.yougetsignal.com/tools/open-ports/

[nachoparker]

I don't know if you will need a 'source address'.

Did you check this? http://www.yougetsignal.com/tools/open-ports/

In any case, you can also activate uPnP and try have NextCloudPi open the ports for you, using nc-forward-ports in the web interface or nextcloudpi-config

[albrechtar]

Yes I used the link it does not show anything and I attempted to let NextCloudPi open the ports it places them into the uPnP ports list and then I get the same results when I use the site to check.

[nachoparker]

uPnP active in the router config?

[albrechtar]

yes

[albrechtar]

You mention to close it after your finished (in your instructions) I assume you mean after it attempts to open the ports. Or should that be left open indefinitely?

[nachoparker]

it is just a helper. some routers will close the ports again after disabling upnp. Others will leave them configured.

It is not considered secure, so it is better to have it disabled

The best approach is to do it manually, like you are trying to do.

I am not very familiar with that particular router, but your config seems correct to me. I think that the problem must be somewhere else.

[albrechtar]

Yeah, I have been reading all day and I believe it was correct also. But I am new to this, so was not sure if perhaps I made a mistake. But I think your detailed instructions are rather easy to follow along with. Do you think I should reflash my SD card and start over?

[Pant]

Try to configure port forwarding in the Port Range Forwarding tab following these steps from the dd-wrt wiki.

[albrechtar]

Ill try that also Pant, I attempted that earlier as I read that some people had success. I did not but I will try it once more to make sure. Thank you both for trying to help me out, I really appreciate it.

[nachoparker]

Do you think I should reflash my SD card and start over?

No, this has nothing to do with NextCloudPi, but with your network configuration

[albrechtar]

Okay, this may seem like a stupid question but if the pi is running with NextCloudPi installed then it is running provided I followed your steps. I was reading that if there is nothing running on teh port it could show as not open. I have the NextCloudPi just booted up attached via Ethernet cable to my router and running. I did not go past the step in your instructions once it instructed me to open the ports.

[albrechtar]

Pant I attempted using the range forwarding with no better results.

[nachoparker]

was reading that if there is nothing running on teh port it could show as not open.

show where?

At this point you can access NextCloudPi and try it, opening the ports is for accessing from internet (from outside)

[albrechtar]

When you check if the port was open or closed, with the link you provided.

[nachoparker]

ah, ok. Not our case

[nachoparker]

I'll close because it's not directly related to NCP. But we can continue talking

[albrechtar]

OK, Nacho any ideas on what to do next to resolve the forwarding issue? Other than that this seems to work fine a bit slow, but I think that may also be in part to my drive I am currently using. Would it be possible to plug in a RAID drive directly into the pi or would that cause issues? Thank you again for your help..

[nachoparker]

The first time it is slow becauses it initializes and catches things.

RAID performance is very bad on the Pi, because it shares network and USB in one PCIe lane. This means now you have three things trying to write simultaneously in one bus (2 USB plus network)

Read this https://github.com/nextcloud/nextcloudpi/issues/107

[nachoparker]

OK, Nacho any ideas on what to do next to resolve the forwarding issue?

Contact your provider. Maybe try to open another port first, like 8085 and use the web I gave you to see if that is blocked as well or not

[Pant]

...any ideas on what to do next to resolve the forwarding issue?

Maybe you have to set up something at the modem which is closer to the public. There may be a firewall which blocks, for example, ports 1 - 1024.

[albrechtar]

Ok I will try that, my provider said they block no ports. I did just notice that when I look at status on my router for ip it shows 100.120.132.241 and when I go to google and look at my IP it shows 110.169.139.67 should those not match?

[albrechtar]

And my ISP provides equipment so in order to use my own router I had to request they bring a CISCO router/Modem that supports full bridged mode. It is placed in bridged mode and I cant access it (or at least not with an ip, I was reading that is normal as it no longer has an ip). Sorry I do not think I mentioned that earlier. But if it is in bridged mode that should not have any effect correct? Thanks again for all your help.

[Pant]

Ok so, please check the firewall settings at the Router (not the Modem/Router).

[albrechtar]

Just spoke to my ISP and they said no ports are blocks, and they confirmed that if the CISCO modem/router is placed into bridged mode its only working as a modem.

[albrechtar]

Ok Pant Ill send you some screen shots, am i looking for anything specific?

[Pant]

As I see in DD-WRT wiki the firewall doesn't have a gui. Is there a way to disable it temporarily to see if that what blocks incoming connections?

[albrechtar]

I think so but IM not 100% sure what SPI firewall is?

[Pant]

I think you may have to disable "Filter WAN NAT Redirection". Try disabling that.

[albrechtar]

I tried to click disable and applied changes and then tested the ports again with the site Nacho provided but still am unable to get through.

[albrechtar]

Dont know if this helps at all as far as providing you with any useful information. Here is the build information for my router firmware.

[Pant]

Try disabling the "SPI Firewall"

[albrechtar]

Tried that with no luck :(

[Pant]

Try turn off UPnP.

[albrechtar]

Got it off. Pant does this difference in ip's mean anything? My router status page shows one ip but when I use the page to check the port forwarding it shows another? 100.120.132.241 (router) and 110.169.139.67 (from the port forwarding check site).

[albrechtar]

[Pant]

Recheck with this: whatismyipaddress.com.

[Pant]

Also check the official DD-WRT Troubleshooting with Port Forwarding

[albrechtar]

Your IPv4 Address Is: 110.169.139.67

[albrechtar]

I think the next thing to try is a hard reset and reconfigure the router reading the official wiki?

[Pant]

Yes I would suggest that.

[albrechtar]

Pant thank you again for all your help, tomorrow I will do a hard reset and see if that corrects it since according to the wiki that may correct it. I also spoke again to my ISP and they reset my connection and verified no ports are being blocked. I just made copies of all the pages so I can enter everything in. The wiki said do it from scratch im guessing if I made a backup and reinstalled it if there was an underlying issue it would just be there again. Again thank you both I appreciate all you and Nacho have done to help me out.

I will let you both know how I make out tomorrow. Is there a specific drive speed that you recommend for best performance. Since my RAID drive I currently use would not be good performance I will go get another one. IS it ok to plug in say 2 drives as long as they are powered?

Take care guys and have nice afternoon. Thanks again.

[nachoparker]

good luck guys

thanks @Pant

[albrechtar]

Thanks Nacho Ill keep you updated, maybe my troubles can help someone else out :)

[albrechtar]

I just noticed something, when I was taking screen shots to have as reference resetting my router. I have a VPN (I live and work overseas) and I had static IPs set up so that only my streaming devics go through the VPN. I noticed on the router they no longer show in the list, yet those devices are still maintaining static ips. Just thought that was odd and maybe there is something a bit buggy. Anyway just thought I would share that with you guys.

[Pant]

You will have to disable VPN in order for this to work. Imagine VPN as a third router that needs to have Port Forwarding on your Router and the Router Port Forward to your Raspberry Pi.

Update: This is also why you get 2 different IPs!

[albrechtar]

I did not think of that but makes sense, thank you again Pant.

[albrechtar]

@Pant is it possible to change the ports to a higher number so the VPN provider is able to open them? Would that then allow the VPN to still run? And reading more that makes sense now why I was getting the two ips.

[Pant]

Technically? It is possible. The VPN provider will have to port forward to your ip his public ports 80 and 443. That said I don't think he is going to do that.

Update: If the VPN Port Forward other ports than these, It will be a challenge to set up Let's Encrypt.