wndr 3300, ddclient, spi firewall issue ??

[aaron_]

Hi.

I have a security system that I set up to monitor remotely using ddclient (it notifies dyndns of my ip change. NOTE: I tried the internal way, using the router, but it didn't seem to work correctly.)

I have the appropriate ports forwarded in the router and everything works (i.e. I can remotely access my computer from whereever) for a while. However, after an hour or so I lose access. The ports are still open as I can see that they are using online port scanners.

I can fix the issue (temporarily) by checking and unchecking the 'disable spi firewall' checkbox but all this does is refresh my ip so i'm not sure if this is the actual fix (checking the box) or if the refresh of the IP address is the fix. I'm guessing the latter.

I'm using the latest firmware 1.0.45.

Any hints and/or suggestions?

Thanks.

[jmizoguchi]

I can fix the issue (temporarily) by checking and unchecking the 'disable spi firewall' checkbox but all this does is refresh my ip so i'm not sure if this is the actual fix (checking the box) or if the refresh of the IP address is the fix.

SPI will NOT change WAN IP at all. SPI allows the traffic easier by loosen the firewall. Depending on how the traffic is made by the remote management of the security, router may see has an issues

one test is to disable and try if you continue to have an issues. disable SPI does not dramatically weaken the firewall

[aaron_]

THanks for the reply.

However, if I check the 'disable spi firewall' box and then click 'apply' I will indeed be issued a new IP address (I realize that it's my ISP who's handing out the IPs).

The same happens if I uncheck it and click 'apply'.

It's worth noting that not only does my security cameras become unreachable so does my music server. Both services operate on separate ports on separate computers.

They both work fine for a good 2 hours and then, BAM, they become unreachable.

[jmizoguchi]

However, if I check the 'disable spi firewall' box and then click 'apply' I will indeed be issued a new IP address (I realize that it's my ISP who's handing out the IPs).

only reason it will do that because you have DSL as services and PPPOE dialup will update IP when you reconnect to ISP


Been dynamic IP, either check/uncheck and apply or DSL gets disconnected will results in same manner

They both work fine for a good 2 hours and then, BAM, they become unreachable.

not sure when you have an issues you are able to access the router management remotely or just able to access the router interface from lan only.