Accessing PC from WAN to LAN

[Shrink0]

I have the following configuration on my network



with default settings, I could access from PC1 to PC2.

But now I want to access from PC2 to PC1 (I want to access all PCs in this subnet and the other way round. ) So I've started with the following configuration:

1. setting static route on ISP-Router to 192.168.1.0 subnet (now tracert on PC2 shows me it knows the route)
2. disabling all firewall rules on Gargoyle-Router as here descriped: https://www.gargoyle-router.com/wiki/do ... e_firewall

so this is my current firewall configuration

Code: Select all

config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT' (changed from 'REJECT')

config zone
        option name 'wan'
        list network 'wan'
        list network 'wan6'
        option input 'ACCEPT'  (changed from 'REJECT')
        option output 'ACCEPT'
        option forward 'ACCEPT'  (changed from 'REJECT')
        option masq '1'
        option mtu_fix '1'

config forwarding
        option src 'lan'
        option dest 'wan'

But I'm still unable to reach PC1 from PC2. Did i miss something?

I've read about adding

Code: Select all

config forwarding
        option src 'wan'
        option dest 'lan'

but that didn't help aswell. Ping times out.

[ispyisail]

If you disable the firewall why do you need gargoyle?

Just get a switch?

[Shrink0]

- measure and manage Bandwidth Usage (quotas) in the 192.168.1.0 subnet

- minimizing the broadcast area (not yet sure if this works)

- using TOR for the 192.168.1.0 subnet clients and NOT for the 192.168.2.0 clients

[ispyisail]

My understanding is all those features require the firewall.

Disabling the firewall is a bad thing.

[Shrink0]

Ok probably you're right is there at least a way to access PC1 from PC2?

Not just a Port forwarding, I need to access PC1 by its IP with all ports.

[ispyisail]

Yes

OpenVPN

[ispyisail]

But a better way is to change your wiring

Gargoyle works best when all devices are on the same subnet

[ispyisail]