TomatoUSB

Hi there,

I am running an ASUS RT-N12 router flashed with TomatoUSB tomato-K26-1.28.RT-N5x-MIPSR2-123-Max.trx. After getting the router set up with our private network range (10.x.x.x) I set up a Microsoft RDP port 3389 forward in PortForwarding - Basic. After adding the rule and saving, the port on the router WAN public internet interface is not open (tested with telnet/portforward.com) nor is forwarded.

From what I have read my configuration in Port Forwarding is correct. I looked into the TomatoUSB firewall options but did not see anything related to unblocking an inbound WAN port to allow it to be forwarded.

Thanks,

Normally port forwarding NAT rules are mirrored in your firewall rules.

www(dot)canyouseeme(dot)org

What does this site say?

I was looking to set up a forward for RDP 3389

Using the canyouseeme.org to check for 3389 it is showing it could not see it open.

Doing some research today I cam across a forum post where someone had a similar issue on Shibby so I flased Toatsman's tomato-K26USB-1.28.0506.3MIPSR2Toastman-RT-N-Std today but still having the same issue.

Here's the output of iptables -nvL

Chain INPUT (policy DROP 30 packets, 20555 bytes)
pkts bytes target prot opt in out source destination
2 92 DROP all — * * 0.0.0.0/0 0.0.0.0/0 state INVALID
124 16511 ACCEPT all — * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
1 40 shlimit tcp — * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 state NEW
0 0 ACCEPT all — lo * 0.0.0.0/0 0.0.0.0/0
244 20718 ACCEPT all — br0 * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT icmp — * * 0.0.0.0/0 0.0.0.0/0 limit: avg 10/sec burst 5
0 0 ACCEPT udp — * * 0.0.0.0/0 0.0.0.0/0 udp dpts:33434:33534 limit: avg 50/sec burst 5

Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
22778 7281K all — * * 0.0.0.0/0 0.0.0.0/0 account: network/netmask: 10.44.0.0/255.255.255.0 name: lan
0 0 ACCEPT all — br0 br0 0.0.0.0/0 0.0.0.0/0
10 484 DROP all — * * 0.0.0.0/0 0.0.0.0/0 state INVALID
292 15772 TCPMSS tcp — * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU
11711 5139K L7in all — vlan1 * 0.0.0.0/0 0.0.0.0/0
22497 7186K ACCEPT all — * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
7 392 wanin all — vlan1 * 0.0.0.0/0 0.0.0.0/0
264 93348 wanout all — * vlan1 0.0.0.0/0 0.0.0.0/0
264 93348 ACCEPT all — br0 * 0.0.0.0/0 0.0.0.0/0

Chain OUTPUT (policy ACCEPT 241 packets, 33791 bytes)
pkts bytes target prot opt in out source destination

Chain L7in (1 references)
pkts bytes target prot opt in out source destination
2 152 RETURN all — * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto skypetoskype
0 0 RETURN all — * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto youtube-2012
0 0 RETURN all — * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto flash
0 0 RETURN all — * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto httpvideo
2051 408K RETURN all — * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto rtp
149 21009 RETURN all — * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto rtmp
0 0 RETURN all — * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto rtmpt
0 0 RETURN all — * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto shoutcast
0 0 RETURN all — * * 0.0.0.0/0 0.0.0.0/0 LAYER7 l7proto irc

Chain shlimit (1 references)
pkts bytes target prot opt in out source destination
1 40 all — * * 0.0.0.0/0 0.0.0.0/0 recent: SET name: shlimit side: source
0 0 DROP all — * * 0.0.0.0/0 0.0.0.0/0 recent: UPDATE seconds: 60 hit_count: 4 name: shlimit side: source

Chain triggers (1 references)
pkts bytes target prot opt in out source destination
0 0 TRIGGER tcp — * * 0.0.0.0/0 0.0.0.0/0 tcp dpts:8000:9000 TRIGGER type:out tcp match:8000-9000 relate:8000-9000
0 0 TRIGGER tcp — * * 0.0.0.0/0 0.0.0.0/0 tcp dpt:990 TRIGGER type:out tcp match:990 relate:990
1 67 TRIGGER udp — * * 0.0.0.0/0 0.0.0.0/0 udp dpts:8000:9000 TRIGGER type:out udp match:8000-9000 relate:8000-9000
0 0 TRIGGER udp — * * 0.0.0.0/0 0.0.0.0/0 udp dpt:990 TRIGGER type:out udp match:990 relate:990

Chain wanin (1 references)
pkts bytes target prot opt in out source destination
7 392 TRIGGER all — * * 0.0.0.0/0 0.0.0.0/0 TRIGGER type:in match:0 relate:0
7 392 ACCEPT tcp — * * 0.0.0.0/0 10.44.0.5 tcp dpt:3389
0 0 ACCEPT udp — * * 0.0.0.0/0 10.44.0.5 udp dpt:3389

Chain wanout (1 references)
pkts bytes target prot opt in out source destination
264 93348 triggers all — * * 0.0.0.0/0 0.0.0.0/0

the port on the router WAN public internet interface is not open (tested with telnet/portforward.com) nor is forwarded.

I have numerous RT-N12 with Shibby and VicTec firmware programmed and performing port forwarding. Works Great. No Snags. I am just dying to help you get yours working.

First of all, FUCK portforward.com results.

Next step is to verify this;
1 - Your router has no corruption and is configured properly.
2 - Your RDP host is configured for RDP inbound connections

1 - In the Tomato admin menu perform a thorough NVram clear and then program from scratch. Default configs + RDP forward rule is all you need to start with. Do that and report your results. If this does not remedy the problem then we will move to your RDP host for more trouble shooting.