Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[SignedAdam]

Chrysalis - Please could you supply the settings i need to imput, or other users need to imput, in to the firewall user interface, telnet wont cut it because we want it to save the settings, not lose them on a reboot or power cut,

[Dray]

As for the change dray recommended, I am glad it works, although compared to how other routers behave this is inconsistent.

The pfSense instructions appear to indicate all modems will behave in this way as they aren't specially done for the HG612.

[Chrysalis]

I dont even know how you got that to appear in the GUI, when I was messing around I couldnt get such a box to appear.

I did my guide.

But the method you are using now shouldnt need any firewall changes.

Dray both my billion and zyxel dont behave this way, they require lan isolation to prevent problems, indeed some may remember a post i made when I first started using the zyxel as someone had to figure the isolation out for me to get it to work properly.

[SignedAdam]

Please check out the full Permanent Guide http://forum.kitz.co.uk/index.php/topic,17671.0.html

if you see any problems with the post, please comment 

thanks for this i'm so happy with my setup, I dont feel like buying a new modem, not that you can find just a modem anymore...

[Dray]

How has this

As far as I can see, all you need to do is

1) Untick bindings. from Basic - WAN - port 1 and 2
2) Give the modem the address 192.168.3.1 netmask 255.255.255.0 in Basic - LAN - LAN Host Settings

3) Apply these settings to the router:

Code: [Select]

ifconfig vlan2:1 192.168.3.253 netmask 255.255.255.0
iptables -t nat -I POSTROUTING ! -s $(nvram get lan_ipaddr) -d 192.168.3.0/24 -j SNAT --to 192.168.3.253

expanded to that? - http://forum.kitz.co.uk/index.php/topic,17671.0.html

[Chrysalis]

dray can you be kind of enough please to point me to the pfsense docs that say to remove all wan bindings? thanks.

[Dray]

They don't say that, they just say how to configure another interface in the same subnet as the modem, which has to be a separate subnet outside of the LAN subnet, much like you did to configure a VLAN bridge.
https://doc.pfsense.org/index.php/Accessing_modem_from_inside_firewall

[SignedAdam]

How has this

As far as I can see, all you need to do is

1) Untick bindings. from Basic - WAN - port 1 and 2
2) Give the modem the address 192.168.3.1 netmask 255.255.255.0 in Basic - LAN - LAN Host Settings

3) Apply these settings to the router:

Code: [Select]

ifconfig vlan2:1 192.168.3.253 netmask 255.255.255.0
iptables -t nat -I POSTROUTING ! -s $(nvram get lan_ipaddr) -d 192.168.3.0/24 -j SNAT --to 192.168.3.253

expanded to that? - http://forum.kitz.co.uk/index.php/topic,17671.0.html

Well, for people starting out in the world of networking, they will need it spel!ing out to them, like I needed, sometimes seeing something in full, Helps! also i'm sure everyone here agrees, scrolling through pages and pages of comments, is harder than my post,

[Chrysalis]

They don't say that, they just say how to configure another interface in the same subnet as the modem, which has to be a separate subnet outside of the LAN subnet, much like you did to configure a VLAN bridge.
https://doc.pfsense.org/index.php/Accessing_modem_from_inside_firewall

Sorry am confused, I thought you were saying pfsense is telling people to unbind wan on modem's.  That page does make sense, what is happening on the hg612 does not, I think its just lucky it happens to be working this way.

[SignedAdam]

They don't say that, they just say how to configure another interface in the same subnet as the modem, which has to be a separate subnet outside of the LAN subnet, much like you did to configure a VLAN bridge.
https://doc.pfsense.org/index.php/Accessing_modem_from_inside_firewall

Sorry am confused, I thought you were saying pfsense is telling people to unbind wan on modem's.  That page does make sense, what is happening on the hg612 does not, I think its just lucky it happens to be working this way.

I agree with you Chrysalis, it dont seem normal, but it works thank the coding gods

I made alot of spelling mistakes, because of my phones auto correct, lol

[SignedAdam]

Chrysalis - I wish to update my Guide with a way to enter the firewall settings, with out needing telnet, please show me what to enter in to the modems user interface,

Guide on how you get the extra options to show up in IP filtering :

1) Go to the modems user interface : 192.168.3.1
2) Login admin and password
3) Advanced - Firewall
4) Click Standard which should show a list of options
5) Pick custom
6) In the new empty box, enter a name for the new custem profile you just made
7) Click submit
8) Select the new profile you just made, then click IP filtering
9) All the boxies you should now be able to edit now

from 10) i'm sure you know what your doing,

[Dray]

Did you see this? http://forum.kitz.co.uk/index.php/topic,15343.msg306218.html#msg306218

[SignedAdam]

Thats for tomato, I like DD-WRT more don't believe it has that functionality