Should your router be accessible from the WAN IP address?

Virdi

Virdi

Virdi

Soldato
Joined
11 Jun 2004
Posts
4,219
Location
Middlesex, London
Hi all,

I have been messing about with Port Forwarding (trying to get an IP CCTV camera configured)

...but my question is ...Should I be able to access my router from the WAP IP address ...even though I have removed all the port forwarding rules etc..?

When I do a ping test to check (from http://ping.eu/) it's telling me that port 80 and 8000 are open?

is this normal?

Thanks
 
I have a setting on my router which handles wether or not the admin page is accessible from outside the network, its off by default. But it says my port 80 is open because I run an owncloud instance so cant help with that.
 
If you are on about remotely managing the router:

If you enable remote management from the WAN yes, most routers will have an easy to go through remote management set-up, but becareful when doing this. IE, if you really must do it, either pick a random port (never use port 80! something like 8080, 6040, or some other hardly used random one).

If it has over HTTPS, use that combined with a port, so it could be

https://xxx.xxx.xxx.xxx:6040 or something

Always always always use a strong password, as long as you like with mixture of lowercase, uppercase, symbols.

Most routers will let you lock it down to at least one WAN IP thats allowed to be able to access the router from outside, or it will say "allow all" better routers will let you enter a range of IP's, or multiple IP's, if you have this, try and use the lock down to WAN IP feature.


If you are on about your camera system?

Then either full feature NAT to translate your traffic hitting your public IP over a specific port, in to the private IP of your camera system, but lock your camera system down with a password!

If you dont have NAT then port forwarding will just forward the port to the camera system, again, password protection all the time
 
Last edited:
Virdi said:
My router is Billion 7800n.

Remote Access is disabled.

UPnP is enabled.
Click to expand...

ygMRjc4.jpg
 
ok - With 'UPnP' diabled port 80 is now showing as 'closed' on a port scan - Which is good I guess.

However - When I type in my WAN IP address into a browser ...it still brings up my router's login page.?

This is not good right?

Thanks
 
Facepalm.gif step away from the computer mate. Try a different profession like maybe house maid or something

OK let me explain it to you. Your firewall allows access to the WAN interface from your internal address but denies access from external address. Hope this makes it clear
 
Subliminal Aura said:
Facepalm.gif step away from the computer mate. Try a different profession like maybe house maid or something

OK let me explain it to you. Your firewall allows access to the WAN interface from your internal address but denies access from external address. Hope this makes it clear
Click to expand...

Thank you! :)

So I just tested it from my mobile (using 3G connection) and the WAN IP brings up nothing - Which is good! :)

So many thanks!

But I still have two further issues / questions please:

1) - What do I lose or gain by having UPnP diabled on my Router

2) - I still want to try and setup remote access to my IP CCTV camera ....I have a static IP address ...so that means I don't have to mess around with DYDNS etc.. right?
 
Virdi said:
1) - What do I lose or gain by having UPnP diabled on my Router

2) - I still want to try and setup remote access to my IP CCTV camera ....I have a static IP address ...so that means I don't have to mess around with DYDNS etc.. right?
Click to expand...

1) Applications/services/hardware on your internal network won't be able to open ports on your router. This might be problematic if you use consoles for online gaming.

2) A dynamic DNS address might be easier to remember.
 
You must log in or register to reply here.
Back
Top Bottom