<html> <head> <meta content="text/html; charset=windows-1252" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <div class="moz-cite-prefix">On Tuesday 17 February 2015 10:26 AM, thufir wrote: </div> <blockquote cite="mid:mbuhlc$tb9$1@ger.gmane.org" type="cite"> <pre wrap="">I have a netgear N-150 router and have tried to open ports on it. However, it keeps showing as closed: thufir@doge:~$ thufir@doge:~$ nmap -p 5060 192.168.1.1 Starting Nmap 6.46 ( <a class="moz-txt-link-freetext" href="http://nmap.org">http://nmap.org</a> ) at 2015-02-16 20:46 PST Stats: 0:00:00 elapsed; 0 hosts completed (0 up), 1 undergoing Ping Scan Ping Scan Timing: About 100.00% done; ETC: 20:46 (0:00:00 remaining) Nmap scan report for 192.168.1.1 Host is up (0.00044s latency). PORT STATE SERVICE 5060/tcp closed sip Nmap done: 1 IP address (1 host up) scanned in 0.07 seconds thufir@doge:~$ With consumer grade routers, in general, and this router, specifically, how do you go about opening ports? Do they even have that capability? I tried disabling the SPI firewall, also. I'm waiting to hear back from Netgear, but, since I've had the router for a while, I don't expect them to reply usefully. I have the manual, and it says: Warning: DMZ servers pose a security risk. A computer designated as the default DMZ server loses much of the protection of the firewall, and is exposed to exploits from the Internet. If compromised, the DMZ server computer can be used to attack other computers on your network. Incoming traffic from the Internet is usually discarded by the router unless the traffic is a response to one of your local computers or a service that you have configured in the Port Forwarding/Port Triggering screen. Instead of discarding this traffic, you can have it forwarded to one computer on your network. This computer is called the default DMZ server. <a class="moz-txt-link-freetext" href="http://documentation.netgear.com/wnr1000v2/enu/202-10546-01/index.htm">http://documentation.netgear.com/wnr1000v2/enu/202-10546-01/index.htm</a> p. 64 I want *all* devices on the network to be DMZ servers -- just disable all security! Because I'm in a double-NAT situation, with this router connecting to another router via wifi there's still the firewall/etc for the first, outer, router. But how do I do that? thanks, Thufiir </pre> </blockquote> check you what is your live ip given by your ISP, and scan your live ip from outside may be following[1] can help [1] <a class="moz-txt-link-freetext" href="http://www.t1shopper.com/tools/port-scan/">http://www.t1shopper.com/tools/port-scan/</a> <div class="moz-signature">-- <meta http-equiv="CONTENT-TYPE" content="text/html; charset=windows-1252"> <title></title> <meta name="GENERATOR" content="OpenOffice.org 3.2 (Unix)"> <meta name="AUTHOR" content="livewire "> <meta name="CREATED" content="20100413;16400600"> <meta name="CHANGEDBY" content="Livewire "> <meta name="CHANGED" content="20110817;15290400"> <meta name="CHANGEDBY" content="livewire "> <style type="text/css">  </style> */ <meta name="CHANGEDBY" content="livewire "> Jatin Khatri RHCSA RHCE CCNA <a href="http://www.fedoraproject.org/wiki/Jatin">www.fedoraproject.org/wiki/Jatin</a> Save Paper, Save Environment.** (Plant at least one tree in your life and nurture it !!!) </div> </body> </html>