Cannot acess the WEB interface from local ip, only from public ip

[Jony]

Hello guys.

First of all, english is not my first language, so sorry if i say something wrong.

I tried to search for a problem like this, but i couldnt find any thread with this issue.

So my problem is, that i cannot acess the WEB interface using the local ip, only if i port forward it from my public ip. So if i try connecting to 192.168.1.10, all i get is a time out. But if i port forward some other port, like 7000 to 80, and use my public ip:7000 i can access the WEB no problem. But this solution exposes the WEB to the public internet, and I naively think this is not the best for security.

My question is: Is there any workaround or trick, to not have my system open to the public internet?

My router/modem is a "Fiberhome HG6544c" if this helps, but i can post full specs of my machines if it is needed.


Thank you in advance

 

[sretalla]

What's happening there is certainly not normal/expected and shouldn't be done for the security reason you mentioned.

What TrueNAS version are you running?

What does your System | General page look like?

Have you defined any other network settings or changed anything else from defaults since installing?

 

[Jony]

Im running TrueNAS-12.0-U8.1

All ive done is I set my DHCP server to give my truenas the same IP every time.
Also this is not the first time i had an ISP router deny access to local ip-s, but that was a Huawei made one.
and btw, i cant even ping the ip using the CMD terminal.

I attached my General page as a screenshot.

 

[sretalla]

Are you sure you're not connecting your TrueNAS server to a port on your switch (or using an IP address) that's designated as DMZ? Or some kind of VLAN setup?

I can't see anything that points to any kind of restrictions that wouldn't be coming from the router in some way.

 

[Jailer]

Log into your NAS via SSH and post the output of ifconfig in code tags.

 

[Jony]

Log into your NAS via SSH and post the output of ifconfig in code tags.

I dont know how to use SSH, but i think this is what you were asking

 

[Jony]

Are you sure you're not connecting your TrueNAS server to a port on your switch (or using an IP address) that's designated as DMZ? Or some kind of VLAN setup?

I can't see anything that points to any kind of restrictions that wouldn't be coming from the router in some way.

this is the DMZ tab in my router, and i could not find VLAN options, only WLAN, but as far as i know, its 2 different things

As for ports, there are only 4 ports marked LAN on my router, and both my laptop and the TrueNAS pc is plugged into those

 

[sretalla]

OK, does the router have anything on the LAN ports? (Maybe under Settings or Management)

Also, what's the IP address of your PC? is it in the same subnet range? 192.168.1.x ?

 

[Jony]

it is in the same subnet range
also in the management tab, all you can do is restart and factory reset the router (but factory resetting is not an option since if i do that, the ISP has to send out someone to configure the login details to their servers, so that leaves me without internet for about a month)

Also the Firewall and UPNP are both disabled, i dont know if those are of any significanse

 

[Redcoat]

Do you have your default gateway defined in Network>Global Configuration?

 

[Jony]

Do you have your default gateway defined in Network>Global Configuration?

well i dont think so, but heres the picture

Also to clear some things up, after installing i literally changed nothing in TrueNAS, everything is on its default setting, I dont even know what half of these things do, so i just didnt touch them.

 

[Redcoat]

Oh boy.
Please put in your gateway address - 192.168.1.1 - in the 3 nameserver fields and the IPv4 Default Gateway Field and Save. Reboot and you should be able to get to the GUI at your assigned address of 192.168.1.10.
I suggest you start working through the configuration tutorials found at https://www.truenas.com/docs/core/coretutorials/

 

[Jony]

I hope I understood correctly, i think this is what you asked for. But sadly, i still get timed out, if i try 192.168.1.10

 

[winnielinnie]

Can you even ping 192.168.1.10 ?

 

[Jony]

Can you even ping 192.168.1.10 ?

I said it a few comments earlier, but no, i cannot

 

[Patrick M. Hausen]

Nobody asked for the IP address of his desktop/laptop system he is using to connect to the UI, so far. So that's what I'm doing now. What is the IP address of your local machine?

 

[Jony]

Nobody asked for the IP address of his desktop/laptop system he is using to connect to the UI, so far. So that's what I'm doing now. What is the IP address of your local machine?

192.168.1.2

 

[Patrick M. Hausen]

192.168.1.2

Now that is weird. What is the netmask?

 

[Jony]

well ipconfig didnt say netmask, only subnet mask, but that is 255.255.255.0

 

[Patrick M. Hausen]

Your TrueNAS and your desktop system should be able to communicate. Period. Can you connect them without going through your router? Gigabit Ethernet has mandatory MDI/MDI-X detection, so you don't need a special cable. Just plug in. If you can ping and connect to the UI, you won't have Internet, but we can at least come to the conclusion that it is your router that is fishy.

In wifi it is a common feature to enforce "client isolation". I.e. systems connected to the same access point cannot communicate with each other. I have yet to see a router that by default does the same for wired connections, but ... possibly.