OpenWrt Forum Archive

Topic: Server can't go public through Openwrt

The content of this topic has been archived on 15 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hello,
Just so you know, I am a complete newbie at running my own server.
An SSL-encrypted instance of Owncloud is supposed to go live from my home mini-pc, but I can't seem to make it deliver to the outside world as long as it's behind the Openwrt router. I installed Barrier Breaker 14.07-rc3 / LuCI Trunk (svn-r10467) on a TP-Link TL-WR841N/ND and put it between my ISP's gateway/modem and the server.
The reason for this is that the ISP-modem comes with its own customized firmware and very limited configuration options. Thus, it won't let me do this: http://forum.owncloud.org/viewtopic.php … mp;t=23767 (in short: resolve the DNS to the server's local IP in order for mobile devices to sync over the local network and not the internet while they're at home).
That's why I want  the server to be behind Openwrt, but obviously I'm doing it wrong:
I get all kinds of error messages in the browser, from "cannot make connection" to "corrupted content" to "untrusted connection" (which is because of my self-signed certificate, but the option to ignore the warning and add an exection is greyed out/not working) when visiting the URL. Here's what the setup looks like (I may have gotten the icons wrong, just take them for what I labelled them):

http://i.imgur.com/LIlDeTB.png


However, If I put the server directly behind the Gateway, everything works fine:


http://i.imgur.com/rtavc9J.png


These are the port forwards I have active in Openwrt, where 192.168.1.145 is the server's IP:


http://i.imgur.com/GSZ2kks.png


Can anyone give me a hint how I can make this work, and possibly then how I might achieve the spoof-IP@home-thingy?
Thanks a bunch, Ben

(Last edited by bennypr0fane on 6 Oct 2014, 23:24)

You need to configure port forwarding on your ISP's modem/router the same way you did for the server, or place the Opnewrt router into the DMZ on your ISP's modem/router and use it as the firewall.

gfem wrote:

You need to configure port forwarding on your ISP's modem/router the same way you did for the server, or place the Opnewrt router into the DMZ on your ISP's modem/router and use it as the firewall.

gfem, sorry, I should have included the port forwards, just eidted the first post to show it.

Maybe you misunderstood the last post.  Have you placed the openwrt router in the dmz, on your ISP's router?

The discussion might have continued from here.