Port Forwarding on OpenWrt


Port forwarding on OpenWrt allows remote computers (for example, computers on the Internet) to connect to a specific computer or service within a private local-area network (LAN). Typical applications include the following:
  • Running a public HTTP server within a private LAN
  • Permitting Secure Shell access to a host on the private LAN from the Internet
  • Permitting FTP access to a host on a private LAN from the Internet
Some ISP Blocking the common ports or all secure port, In OpenWrt you can easily modify the port which blocked and not blocked I recommend using LuCI Web Interface to forward the port

How to Open Port

  1. Select Tabs Network > Firewall > Port Forwards
  2. Configuration of the Port forwarding
  • Name = Name of the Port forwarding (e.g : Web Server, IP Camera, or Minecraft Server)
  • Protocol = TCP, UDP, or TCP and UDP
  • External Zone = The interface which share your public IP (WAN)
  • External Port = Port you want open on Internet (e.g : 8080)
  • Internal Zone = The interface for your Local Area Network (LAN)
  • Internal Port = Port that used on your local applications you wanna open (e.g : 80)
3. Select Save & Apply

How to Check Open Port

Many ways to check open port, but I recommend checking port from Port forwarding Testing online
  1. Go to Open Port Check Tool - You Get Signal In your browser
  2. Change the port number to your External Port number
  3. The result will be look like this.
    Open Port 8080 is open on 101.175.139.80.

Troubleshooting port

Some ISP Will block certain port for security and other purpose, to check the port you can mapping all the port so this make easier to check which port blocked by ISP and other
  1. Go to GRC | ShieldsUP! in your browser
  2. Select All Service Port (It will Determine the status of your system's first at 1056 ports number)
  3. There are port Open, Closed, and Stealth
  4. If you open port on Stealth port and the result is closed , Try opening the port on Closed Port or Open Port
If your ISP blocking you from some ports, try contacting or calling the support for further information

More info

  • If the port determined as Stealth it usually ISP block the port
  • Some Cable or ADSL ISP usually have port Open and Closed (Port above 1024)
  • Some 3G or 4G ISP rarely have port Open or Closed on port 1 - 1056 (Try port 8000 - 9000)
  • My ISP have port closed (not stealth) on above 1024

References

  1. Port forwarding - Wikipedia
  2. GRC | ShieldsUP!
  3. Images by Guillaume Paumier / CC BY 3.0

Comments