FQs19 Posted July 1, 2015 Share Posted July 1, 2015 I understand that if I have my R1 placed behind a router that I can connect to my R1 control panel through the primary router by enabling Access Control Panel from WAN (Modem > Asus router > R1) but if I enable that option does that leave the R1 open to the internet? Like is it possible for someone to pass the primary routers firewall and access the R1? I ask this because I am currently connecting to my R1 via it's own wifi and have the WAN access disabled. I would like to turn off the R1's wifi and enable the WAN access but don't want to if it exposes the R1 to the internet. http://wiki.netduma.com/doku.php?id=wan_access&s%5B%5D=wan Edit: forgot to mention that I have the R1 in my primary routers DMZ Link to comment Share on other sites More sharing options...
Netduma Staff Netduma Crossy Posted July 1, 2015 Netduma Staff Share Posted July 1, 2015 Well I have that enabled and if I type my external IP into the browser it does't take me to the router dashboard. That would be the easy way for you to test. But I'm not sure if there are other security risks with doing that. I would try testing that out first though Link to comment Share on other sites More sharing options...
Zennon Posted July 1, 2015 Share Posted July 1, 2015 Access the duma from http://192.168.88.1 in your browser if you are wired it is not a security risk i would not of thought. Link to comment Share on other sites More sharing options...
FQs19 Posted July 1, 2015 Author Share Posted July 1, 2015 So type in my primary routers IP or the R1's IP address to test? Link to comment Share on other sites More sharing options...
Zennon Posted July 1, 2015 Share Posted July 1, 2015 Dumas 192.168.88.1 Link to comment Share on other sites More sharing options...
Netduma Staff Netduma Crossy Posted July 1, 2015 Netduma Staff Share Posted July 1, 2015 So type in my primary routers IP or the R1's IP address to test? Enable access from WAN then type your external ip into browser (find this by searching 'my ip' into google). If it takes you to the Netduma page then anyone with your IP can access the Netduma. If it doesn't your probably safe Link to comment Share on other sites More sharing options...
FQs19 Posted July 1, 2015 Author Share Posted July 1, 2015 Okay. The only thing is that my primary router does not allow the R1 to have that IP address as a static one. So I setup a static port of 192.168.1.88 for it. Link to comment Share on other sites More sharing options...
FQs19 Posted July 1, 2015 Author Share Posted July 1, 2015 Thanks Crossy and Zennon. I will test after I get home from work. You guys are the reason why everyone is loving this router. (and also those who made it of course) The service is on point! Link to comment Share on other sites More sharing options...
Zennon Posted July 1, 2015 Share Posted July 1, 2015 Try that address that you have gave the duma and try what crossy's suggestion , i have a two router set up and just have the dumas ip bookmarked to reach the GUI Remember its not the wan ip that your using but the IP of the duma it's self Link to comment Share on other sites More sharing options...
FQs19 Posted July 1, 2015 Author Share Posted July 1, 2015 Yeah that is what I do too Zennon. I have to enter 192.168.88.1 to get the R1's control panel even though it's IP is different. Thanks Link to comment Share on other sites More sharing options...
FQs19 Posted July 1, 2015 Author Share Posted July 1, 2015 Well fellas I just tested my WAN access by putting my primary routers WAN IP into Chrome and I got my R1 control panel to come up. Is there any way that I can not have that happen besides turning off the WAN access in the R1? Link to comment Share on other sites More sharing options...
Netduma Staff Netduma Crossy Posted July 1, 2015 Netduma Staff Share Posted July 1, 2015 Well fellas I just tested my WAN access by putting my primary routers WAN IP into Chrome and I got my R1 control panel to come up. Is there any way that I can not have that happen besides turning off the WAN access in the R1? You could probably block it by setting up port forwarding for port 80 an just sending it to some random IP. That way it wouldn't get through on the DMZ and you should't be able to access it using the external IP. Link to comment Share on other sites More sharing options...
FQs19 Posted July 1, 2015 Author Share Posted July 1, 2015 Crossy are you available to Chat? Link to comment Share on other sites More sharing options...
Netduma Staff Netduma Crossy Posted July 1, 2015 Netduma Staff Share Posted July 1, 2015 Crossy are you available to Chat? Yeah, I'll jump in now Link to comment Share on other sites More sharing options...
FQs19 Posted July 1, 2015 Author Share Posted July 1, 2015 cool. thanks. Link to comment Share on other sites More sharing options...
Zennon Posted July 2, 2015 Share Posted July 2, 2015 You would reach the wan ip on your own network, it is outside you should be worried about, and i am sure if you typed the dumas wan ip from say a friends house it would not be reachable. Link to comment Share on other sites More sharing options...
Netduma Staff Netduma Crossy Posted July 2, 2015 Netduma Staff Share Posted July 2, 2015 You would reach the wan ip on your own network, it is outside you should be worried about, and i am sure if you typed the dumas wan ip from say a friends house it would not be reachable.It was In chat he gave me his external IP and I could access his duma dashboard :/ It could probably be stopped by stopping port 80 getting forwarded to the netduma. That could bo done by taking Netduma out of DMZ and port forwarding from 1024-25565 udp + tcp. Link to comment Share on other sites More sharing options...
Administrators Netduma Fraser Posted July 2, 2015 Administrators Share Posted July 2, 2015 Thanks for testing that, I was very curious to see what happened. When we implement the login screen this won't be an issue anymore Link to comment Share on other sites More sharing options...
FQs19 Posted July 2, 2015 Author Share Posted July 2, 2015 Yeah Fraser it was definitely accessible. Looking forward to that Login screen so there would at least be some protection. Just a question about removing the Duma from DMZ and port forwarding 1024-25565 both, would that mess anything else up? For instance I have IP cameras for my home security system. So I know they have ports forwarded by the UPNP. Would forwarding all the ports interfere with them? Link to comment Share on other sites More sharing options...
Zennon Posted July 2, 2015 Share Posted July 2, 2015 I do have a two router set up Modem > Router > duma I do not have my duma in a DMZ so i will test this out when i drop in to work soon. Link to comment Share on other sites More sharing options...
FQs19 Posted July 2, 2015 Author Share Posted July 2, 2015 When I get home, I'm going to take my Duma out of DMZ and just let my Asus primary router assign it an IP. Hopefully I won't have any NAT issues. Then I'm going to try enabling Access from WAN on the Duma then check my primary WAN IP to see if it allows me to see the DUMA again. All this just to stop using the Duma Wifi. Just don't want 3 separate wifi networks coming from my house. It's just not neighborly friendly. Link to comment Share on other sites More sharing options...
Administrators Netduma Fraser Posted July 2, 2015 Administrators Share Posted July 2, 2015 I shouldn't think there should be any issues however I've never opened that big a range of ports before, I'd be interested to see what you find Zennon Link to comment Share on other sites More sharing options...
Zennon Posted July 2, 2015 Share Posted July 2, 2015 My set up works without using dmz the billion router forwards ports well it seems, i will know in the next half hour or so. I will let you know soon Link to comment Share on other sites More sharing options...
Administrators Netduma Fraser Posted July 2, 2015 Administrators Share Posted July 2, 2015 When I get home, I'm going to take my Duma out of DMZ and just let my Asus primary router assign it an IP. Hopefully I won't have any NAT issues. Then I'm going to try enabling Access from WAN on the Duma then check my primary WAN IP to see if it allows me to see the DUMA again. All this just to stop using the Duma Wifi. Just don't want 3 separate wifi networks coming from my house. It's just not neighborly friendly. You're missing out on a prime opportunity to name them all funny things and be the neighbourhood joker With such classics as 'TellMyWiFiLoveHer' haha Link to comment Share on other sites More sharing options...
Zennon Posted July 2, 2015 Share Posted July 2, 2015 Hey guys i can not reach my Netduma from an external source. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.