My ISP provided Siemens SE260 ADSL2 modem receives a dynamic public ip address and provides a LAN ip of 192.168.1.1. I can access the web based user interface but have neither a manual nor administrative password. The modem has some port forwarding and DMZ capabilities and does not provide any user interface for either NAT or UPnP. The interface also permits adding an ip to its native firewall ("parental blocking") but the firewall configuration is otherwise not discussed. While hopefully not relevant, the Internet is delivered to the modem by a routable wireless signal.
The modem plugs into a dLink DIR-300 wifi router (rev 1a updated to 1.04 firmware) with LAN address of 192.168.1.2 (access point mode: NAT disabled). In router mode (NAT not disabled), the router's access point is 191.168.0.1. Maybe, this precludes the above noted double NAT conflict between the modem and router/access point. Each wifi or hard-wired client is configured to receive a static ip address like 192.168.1.4 and uses the modem (192.168.1.1)as a default route instead of the router (192.168.1.2 or 192.168.1.3) using NetworkManager Applet 0.8.. In access point mode the router provides no forwarding, NAT or firewall capabilities. Nothing else is on the LAN side (192.168.1.x). If appropriate, I can switch back to router mode. For now everything is configured for access point mode. The conversion of this modem to or from access point mode takes hours but appears to work.
I use firestarter as a firewall but for port testing purposes I disable firestarter. Perhaps naively, I think the only remaining firewall I have is in the modem. The following port forwarding rules are enabled on the modem:
Local Public
Local IP Protocol Port Comment Enable Remote Host Port Interface
192.168.1.4 TCP+UDP 4662 amule Enable 192.168.1.1 4462 ---
192.168.1.4 TCP+UDP 4462 amule Enable 192.168.1.2 4462 ---
192.168.1.4 TCP+UDP 44662 amule Enable 192.168.1.1 44662 ---
192.168.1.4 TCP+UDP 44662 amule Enable 192.168.1.2 44662 ---
192.168.1.4 TCP+UDP 51413 trans Enable 192.168.1.2 51413 ---
192.168.1.4 TCP+UDP 51413 trans Enable 192.168.1.1 51413 ---
The modem rejected my attempt to forward the (dynamic) public ip using the (static) remote host ip as not on the same sub-net.
Amule's port checker web page reports "TCP Error 111 Connection refused" for ports 4662, 44662, and 51413 with firestarter disabled. How do I identify the source of the blockage?
For diagnostic purposes, I also tested an Asus RT16N configured in access point mode (private ip 192.168.1.3) and observed the same blocked ports.