Smoothwall + DD-WRT issues

[Angry]

First off, heres the network setup:
http://img85.imageshack.us/img85/439/wirelessq.jpg
Smoothwall IP: 192.168.1.130 (DHCP enabled)
DD-WRT/WRT54g2 IP: 192.168.1.140 (DHCP disabled)

I recently re-setup my smoothwall rig after using a WRT54g2 router loaded with DD-WRT for networking duties. I decided to take the load off the WRT54g2 now with plans to put an even larger load on the network. Little router was already getting mighty toasty.

Now Im having wireless and port forwarding issues.
Ive forwarded ports in my smoothwall just like I used to, and none of them seem to be working. Ive forwarded all the ports to my main rig with no luck.

And while the wireless is working, it doesnt have any internet at all. At least not on mine and my girlfriends iphones.

Any ideas? really in need of major help here...

edit:
I tried putting the smoothwalls IP into the Gateway and Local DNS of DD-WRT with no luck...

[thideras]

Make sure that you have the DHCP server disabled on the DD-WRT router and the wireless is set to an "access point". This will direct all requests to the Smoothwall. You do not want to do any type of port forwarding on the DD-WRT router and you basically want to treat it like a [wireless capable] switch.

[Angry]

DHCP is definitely disabled in DD-WRT, I just reset it to factory defaults and disabled DHCP first thing.

Should DD-WRT be getting a WAN IP?

[thideras]

Here is my configuration.

http://thideras.com/images/linux/dd-wrt_switch/dd-wrt_switch1.png

http://thideras.com/images/linux/dd-wrt_switch/dd-wrt_switch2.png

http://thideras.com/images/linux/dd-wrt_switch/dd-wrt_switch3.png

[Angry]

Thanks for taking those pics man. I got it all working wirelessly now.
..except for Opera on my iPhone, it wont connect to anything but Safari will and I can download podcasts. ...Weird.

Now if I could just get my port forwarding working.

[thideras]

How do you have it setup? I haven't run Smoothwall for over a year now, but it will still be the same. You want to forward the ports to the actual computer, not the DD-WRT router. Since you didn't specify what you were using, I'm assuming that it is not setup correctly.

[Angry]

This is how I have it setup in port forwarding in smoothwall:
http://img651.imageshack.us/img651/5905/portsj.jpg

The required ports for alterIWnet (where my friends play) Are
1500 UDP
3005 UDP
3101 UDP
13000 TCP
28960 TCP and UDP

As far as I can tell I put them in right...I used the exact same ports in DD-wrt just before I setup the smoothwall. Now, modern warefare 2 wont even connect to IWnet.

Steam isnt working properly either.

[thideras]

Go here (http://www.google.com/url?sa=t&source=web&cd=1&ved=0CBIQFjAA&url=http%3A%2F%2Fwww.grc.com%2Fx%2Fne.dll%3Fbh0bky d2&ei=0pZdTOnwFMH48AaG0cTBDQ&usg=AFQjCNE2Lax115VZ4ZjP6NzTdi_fNymsUQ). Hit proceed.

Type in the ports separated by commas and click "User specified custom port probe".

[Angry]

It says I failed... :(

Steam wont even connect... :bang head

[thideras]

Do an "ipconfig" from your station, what does it say your gateway is (it should say 192.168.1.130)? Also, verify that x.x.x.136 is still your current address. It may have changed.

[Angry]

Yepo, sure does.
Default gateway: 192.168.1.130
IP: 192.168.1.136

[thideras]

I'm confused why Steam won't work. I do not use port forwarding on my network and it functions fine. It seems like it is keeping information that it shouldn't be (on your computer). Try this from your station command line:

ipconfig /release
ipconfig /flushdns
ipconfig /renew

See if that resolves it. It is also strange that your other devices are having issues connecting to the internet; they shouldn't be. I think there may be an option that you are missing in Smoothwall. I haven't run it for awhile, so I'm not as familiar with it as I used to be.

[Angry]

And after reading around a bit more, its best to leave the "Destination port" blank...its not required. Smooth is picky as in how you put the ports in, so Im assuming thats right as its letting me put them with Destination Port being blank.

[Angry]

The iPhones are connecting fine in everything but the Opera web browser on them.
Steam seems uberly pissed off.
Im getting all the ports from portforward.com

Hamachie is even having a few issues, everything is "relayed tunnel" except for whats on the actual LAN. It has to work, as its what I use to remote desktop into my rigs when Im not at home and to a few friends rigs when they need help.


Im about to just unhook the smoothwall and let the router do all the work.

[thideras]

Firewalls take some time to troubleshoot and configure. You can't expect to just drop one in and have it magically work. They provide complex security, and thusly, can be complex to configure.

It took me a long time to configure my firewall (Astaro) before I figured out exactly what I needed to do.

Take a step away from the computer. Take a few deep breaths, go for a walk, whatever works. If you want to play something right now, revert your DD-WRT settings and remove the Smoothwall. Come back to it later when you have a clear mind and actually want to sit down and fix it. Don't force yourself. ;)

[Angry]

No I want to, because I wanna game LOL...

Thanks for your help thus far man, much appreciated.

..Maybe a 2ghz Athlon XP is too much for a smoothwall heh...

[thideras]

No I want to, because I wanna game LOL...I hear you on that. There were times that I was getting extremely frustrated with my file server and firewall. I just have to step away for a bit then come back relaxed. I remember working on getting my array working in Solaris (which I hate...) and I couldn't add it to the system. It was driving me nuts. Came back 4 days later and did it in 10 minutes.

Thanks for your help thus far man, much appreciated.No problem, that is what I'm here for. :thup:

..Maybe a 2ghz Athlon XP is too much for a smoothwall heh...My Smoothwall was actually a Pentium 2 based system. That was more than enough for our connection. Granted, that wasn't with QoS enabled, but that still isn't bad.

[Shelnutt2]

Just to double check your router, http://www.dd-wrt.com/wiki/index.php/Wireless_Access_Point

[Jimbob7]

You'd be much better off getting rid of dd-wrt, using a switch, and putting a (linux compatible) wireless card into the smoothwall box, it will be so that way :)

Or three network cards into smoothwall box, and having one for modem, one for the switch for your main rig etc and one for your ddwrt as the wireless link :)

[Angry]

You'd be much better off getting rid of dd-wrt, using a switch, and putting a (linux compatible) wireless card into the smoothwall box, it will be so that way :)

Or three network cards into smoothwall box, and having one for modem, one for the switch for your main rig etc and one for your ddwrt as the wireless link :)


I thought about that, and may try that when I get my hands on a gigabit switch. These 10/100 speeds are starting to get to me when transfering large files like a 60gb drive image to the server for backup. A friend has a nice d-link router that hes going to let me borrow, it was setup with a smoothwall before he switched to a router with gigabit LAN ports,for a long time. (His smoothwall died of hardware issues...so it was taken out)

Really wish DD-WRT had a PC capable setup lol, I had it back up in less than 5mins with all my ports. (For open NAT on MW2 and a few other games)

I had an idea though, instead of routing traffic of the LAN across the routers switch itself.
Would it be possible to do this:
Cable modem ~~~>DD-WRT WAN~~~>to a gigabit switch from LAN on DD-wrt~~~>Out to wired LAN.

Setting it all up like that, would I still get gigabit speeds across the wired network and DD-WRT still handle DHCP?

All the computers have gigabit network cards except for my girlfriends pc. Least till I build her a nice mATX setup. My sons PC will get a gigabit card when I order the gigabit switch. (hell I mite order a bunch of gigabit cards.)

[thideras]

You would be better off going:

Cable modem ~~~>to a gigabit switch~~~>DD-WRT WAN *and* wired LAN

Basically, don't run it through the DDWRT box. It adds an unnecessary step. Either way, you can get this to work, changing hardware, at this point, is just silly.

[Angry]

So your saying I should keep trying with the smoothwall, or ....?

[thideras]

That is ultimately up to you and the decision is not mine. I, however, encourage you to try and get it to work. Not only will it be a higher performance firewall with more features, you learn a bit in the process; as frustrating as it is.

[Angry]

Gotcha, when I had it before it was great. No issues at all with mine or my friends. I actually helped him set his up. But his died of hardware failure. And mine was never hooked back up when I moved. Only recently with the g/f moving in and adding much larger load did I decide to gather all the parts and put it back together. That and I was bored....lol

When installing smoothwall, do I need to put in the DNS numbers from the cable modem, or will the modem serve that out to the smoothwall via DHCP?


Wait, nevermind, those are only used if DHCP is disabled on the modem.
Youtube example:
(Skip to about for 5:23 the post-install config and 7:00 for the DNS config)
http://www.youtube.com/watch?v=fEkO_mQOGGQ

[Angry]

Know or heard anything about Untangle?

Ive been looking at some of its demos and what not on it site and it seems somewhat impressive... I may tool around with it later today if I get a chance.

[Angry]

Got the box up and running Untangle this evening,and so far I really like it. Ports forwarded and everything. If it keeps doing good on this Socket A Athlon XP rig, Ill move it to a Dell Poweredge 1750 that I have.

Really likeing not seeing any ads online at all LOL..

[thideras]

Glad you got it working!

[Angry]

I would already have it on the Dell Poweredge if I had some blank CD-Rs...all the poweredge has is a very laptop like CD-rom...and it will not boot from USB...I may go pick up some CD-Rs today.

[Angry]

Got it loaded onto the Poweredge, and put it in the basement after moving the cable modem down there and running an extension cord and surge protector. Its just to loud to have upstairs when it decides to kick the fans up into high gear in its little 1U chassis.

All I had to do was save a config file from the Socket A system and reload it to the Poweredge...heh. Was NICE!
Cant wait to add a second Xeon CPU and another 2gb of ram to it.

Going to let a friend play with the Socket A system at his place.