LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 07-05-2008, 11:09 AM   #1
tungvs
Member
 
Registered: May 2008
Distribution: Centos; Ubuntu; Fedora
Posts: 98

Rep: Reputation: 15
Cannot access server (behind a router) from LAN via external IP


I have a small LAN behind a modem: Zyxel Prestige 600 series. I've set up some servers on one of my LAN computers. Port forwarding is OK, my friends can connect to the servers properly. But on any hosts in the LAN, I cannot connect to the server using the external IP of the modem (using internal IP is fine.). I've googled for a while and found that it could be my modem doesn't have loopback function.

I dont' know what the "loopback function" is, and how I know if my modem supports it or not. And if my modem does, how can I enable it (hope it's just hidden somewhere )

Please someone makes a quick explanation about the loopback function of a router and let me know if my modem supports it.

Thank you .
 
Old 07-05-2008, 01:12 PM   #2
{BBI}Nexus{BBI}
Senior Member
 
Registered: Jan 2005
Location: Nottingham, UK
Distribution: Mageia 5, Linux Lite
Posts: 4,312

Rep: Reputation: 210Reputation: 210Reputation: 210
Here's an explaination of loopback and solution: http://www.dyndns.com/support/kb/loo...nnections.html
 
Old 07-06-2008, 12:16 AM   #3
tungvs
Member
 
Registered: May 2008
Distribution: Centos; Ubuntu; Fedora
Posts: 98

Original Poster
Rep: Reputation: 15
Thanks for your reply, Nexus. I've understood a little more about loopback, but the resolution is not very good. Using the hosts file instead of dns is not what I expect.
I've heard there' re some kinds of routers have the loopback function built-in. Please tell me how it works (basically), then we could find another solutions (better or worse, who knows ? ).
Thanks, guys.
 
Old 07-06-2008, 03:26 AM   #4
chort
Senior Member
 
Registered: Jul 2003
Location: Silicon Valley, USA
Distribution: OpenBSD 4.6, OS X 10.6.2, CentOS 4 & 5
Posts: 3,660

Rep: Reputation: 69
Allowing traffic to traverse the external interface of your firewall twice isn't very secure any way. It can allow for spoofing unless very tightly configured.

Either use hosts files, or run split-view DNS.
 
Old 07-06-2008, 04:31 AM   #5
Mr. C.
Senior Member
 
Registered: Jun 2008
Posts: 2,529

Rep: Reputation: 61
I don't believe the traffic traverses any external interface. In a typical Linux-based iptables implementation (which is used in many commodity routers),, this is done prerouting, so it never reaches the external interface.

Some Zyxel products provide NAT loopback, but I don't think the 600 does. They can be accessed through a telnet session command line. A KB articles describes:

http://www.zyxel.com/web/support_kno...20050117110248

I agree with chort; it is better not to rely on this feature, and instead setup a split DNS or use a hosts file (easiest). Some mail servers won't use the hosts file, so you'd need split DNS in any case if you decide to run such a server.
 
Old 07-07-2008, 04:59 AM   #6
tungvs
Member
 
Registered: May 2008
Distribution: Centos; Ubuntu; Fedora
Posts: 98

Original Poster
Rep: Reputation: 15
Thanks for your replies, lads . Zyxel 600 series modems have NAT loopback function and I've enabled it via command line. (I bought the modem without any manuals :|) Everything 's fine now.

But I wonder if there're some security issues as you said. Please leave some links refer to the issues. Thanks .

PS: Configuring DNS server is a good way, though. Why didn't I think about such a simple solution like this ?
 
Old 07-07-2008, 05:33 AM   #7
Mr. C.
Senior Member
 
Registered: Jun 2008
Posts: 2,529

Rep: Reputation: 61
Excellent! I'm now not surprised that you were able to enable the feature; so many commodity items have hidden feature sets, often artificially suppressed to create full range of products.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Can't access my apache2 webserver using external address from LAN eldoran Linux - Networking 6 10-26-2008 04:51 PM
Unable to access internal LAN from outside Belkin wireless router tedthened Linux - Wireless Networking 3 01-31-2008 03:54 PM
Can't access anything on LAN except router gw1500se Linux - Networking 2 04-02-2007 06:55 PM
Apache2 not working, port 80 open on router, no access from outside of LAN, help? brynjarh Linux - Networking 2 12-05-2006 11:07 AM
vsftpd, router and external access; Oh my! Imyrryr Linux - Networking 14 09-07-2003 10:22 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 04:38 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration