Hi, Strictly speaking a router will always route all packets regardless of TCP port number depending on its routing tableŠ(because routers route IP packets only and it is TCP, which has a port number that is made up of IP packets hence the name TCP/IP) However our home internet ³routers² nearly always have firewalls built in along with NAT(Network Address Translation) capability. Normally the default firewall configuration on our home ³router² blocks all inbound packet flows which would stop any inbound IAX2 protocol flows from reaching the Allstar box and thus the repeater running allstar would be able to send packets to the allstar network but not receive any IAX2 packets back hence the Allstar connection would not work. There are normal at least two ways to get inbound connections (packet flows) to work on such home ³routers"; 1. Most home internet ²routers² allow a single IP address to be configured so the ³router" will send all inbound connections to this ip address. It is sometimes called a DMZ ( DeMilitarized Zone) ip address. However if you do this, there is nothing ³demilitarised" about this IP address. To all intensive purpose your Allstar box will be standing ³naked² on the internet with NO protection at all! So make sure you have a firewall configured on the Allstar box (that allows SSH and IAX2 connections) after you have tested this configuration. 2. Most home internet ²routers² allow you to configure inbound ports that the router will allow in through the firewall. This is much safer but may be harder to setup.Remember that because of NAT you will never see your internal home IP addresses on the Internet. What you will see is the IP address of the Internet connection that your home router is using. So your Allstar box will appear on the Internet to have the IP address of the home ³router².vOne tip to aid in testing the firewall setup is to use the IAX2ping tool on voip-info.org. Hope this helps... Regards Anthony, VK2ACP On 24/09/2014 4:36 pm, "app_rpt-users-request@ohnosec.org" <app_rpt-users-request@ohnosec.org> wrote:

Send App_rpt-users mailing list submissions to app_rpt-users@ohnosec.org

To subscribe or unsubscribe via the World Wide Web, visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users or, via email, send a message with subject or body 'help' to app_rpt-users-request@ohnosec.org

You can reach the person managing the list at app_rpt-users-owner@ohnosec.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of App_rpt-users digest..."

Today's Topics:

1. Not able to receive incoming connections (gene@wb9coy.com) 2. Re: Not able to receive incoming connections (Doug Crompton) 3. Re: Not able to receive incoming connections (gene@wb9coy.com) 4. Re: Not able to receive incoming connections (gene@wb9coy.com) 5. Re: Not able to receive incoming connections (Doug Crompton)

----------------------------------------------------------------------

Message: 1 Date: Tue, 23 Sep 2014 15:34:22 -0700 From: <gene@wb9coy.com> To: app_rpt-users@ohnosec.org Subject: [App_rpt-users] Not able to receive incoming connections Message-ID: <20140923153422.6bda0fc0b2fcdc09c2716b2cba60b34f.b59f50f291.wbe@email12.s ecureserver.net>

Content-Type: text/plain; charset="utf-8"

My node is 41303 W6QAR

I have verified that I NAT on port 4569. It was mentioned that a check can be done on my node to see if it had to be forced.

------------------------------

Message: 2 Date: Tue, 23 Sep 2014 19:38:57 -0400 From: Doug Crompton <doug@crompton.com> To: "gene@wb9coy.com" <gene@wb9coy.com> Cc: "app_rpt-users@ohnosec.org" <app_rpt-users@ohnosec.org> Subject: Re: [App_rpt-users] Not able to receive incoming connections Message-ID: <BLU172-W48C33D5293469A55079C46BAB00@phx.gbl> Content-Type: text/plain; charset="iso-8859-1"

Gene,

Not sure what you mean by forced but you need to port foward port 4569 upd to the IP address of your Allstar computer. The Allstar computer should be set as a static IP address on your local network so that the local address does not change.

In addition if you want to access your system remotely or have someone else do it for maintenance you need to port forward port 222 tcp to the IP address of your Allstar computer. 73 Doug WA3DSP http://www.crompton.com/hamradio

...

From: gene@wb9coy.com To: app_rpt-users@ohnosec.org Date: Tue, 23 Sep 2014 15:34:22 -0700 Subject: [App_rpt-users] Not able to receive incoming connections

My node is 41303 W6QAR

I have verified that I NAT on port 4569. It was mentioned that a check can be done on my node to see if it had to be forced.

_______________________________________________ App_rpt-users mailing list App_rpt-users@ohnosec.org http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users

To unsubscribe from this list please visit http://ohnosec.org/cgi-bin/mailman/listinfo/app_rpt-users and scroll down to the bottom of the page. Enter your email address and press the "Unsubscribe or edit options button" You do not need a password to unsubscribe, you can do it via email confirmation. If you have trouble unsubscribing, please send a message to the list detailing the problem.