Page 1 of 1

Accessing PC from WAN to LAN

Posted: Sun Apr 23, 2017 6:28 am
by Shrink0
I have the following configuration on my network

Image

with default settings, I could access from PC1 to PC2.

But now I want to access from PC2 to PC1 (I want to access all PCs in this subnet and the other way round. ) So I've started with the following configuration:

1. setting static route on ISP-Router to 192.168.1.0 subnet (now tracert on PC2 shows me it knows the route)
2. disabling all firewall rules on Gargoyle-Router as here descriped: https://www.gargoyle-router.com/wiki/do ... e_firewall

so this is my current firewall configuration

Code: Select all

config defaults
        option syn_flood '1'
        option input 'ACCEPT'
        option output 'ACCEPT'
        option forward 'ACCEPT' (changed from 'REJECT')

config zone
        option name 'wan'
        list network 'wan'
        list network 'wan6'
        option input 'ACCEPT'  (changed from 'REJECT')
        option output 'ACCEPT'
        option forward 'ACCEPT'  (changed from 'REJECT')
        option masq '1'
        option mtu_fix '1'

config forwarding
        option src 'lan'
        option dest 'wan'

But I'm still unable to reach PC1 from PC2. Did i miss something?

I've read about adding

Code: Select all

config forwarding
        option src 'wan'
        option dest 'lan'
but that didn't help aswell. Ping times out.

Re: Accessing PC from WAN to LAN

Posted: Sun Apr 23, 2017 7:21 am
by ispyisail
If you disable the firewall why do you need gargoyle?

Just get a switch?

Re: Accessing PC from WAN to LAN

Posted: Sun Apr 23, 2017 7:32 am
by Shrink0
- measure and manage Bandwidth Usage (quotas) in the 192.168.1.0 subnet

- minimizing the broadcast area (not yet sure if this works)

- using TOR for the 192.168.1.0 subnet clients and NOT for the 192.168.2.0 clients

Re: Accessing PC from WAN to LAN

Posted: Sun Apr 23, 2017 4:44 pm
by ispyisail
My understanding is all those features require the firewall.

Disabling the firewall is a bad thing.

Re: Accessing PC from WAN to LAN

Posted: Mon Apr 24, 2017 2:40 am
by Shrink0
Ok probably you're right is there at least a way to access PC1 from PC2?

Not just a Port forwarding, I need to access PC1 by its IP with all ports.

Re: Accessing PC from WAN to LAN

Posted: Mon Apr 24, 2017 3:14 am
by ispyisail
Yes

OpenVPN

Re: Accessing PC from WAN to LAN

Posted: Mon Apr 24, 2017 3:16 am
by ispyisail
But a better way is to change your wiring

Gargoyle works best when all devices are on the same subnet

Re: Accessing PC from WAN to LAN

Posted: Mon Apr 24, 2017 3:17 am
by ispyisail
Image