Chrome WAN Remote Access times out, but only from within LAN

TheWaterbug

TheWaterbug

Known around here
Oct 20, 2017
1,072
2,044
Palos Verdes
I used the BI remote access wizard and the DynDNS client and port-forwarding and firewall access rules within my pfsense firewall to set up remote access by FQDN a few weeks ago, and it worked great! I spent $12 for the iOS app, and it worked fine as well.

From inside my 192.168.1.0/24 network I can get to my BI server from Chrome at:


But I can't get to it from Chrome at:


nor at:


Both time out.

From OUTSIDE my LAN, I can get Chrome to:


or


But neither WAN request will work from inside my LAN.

I don't believe it's my router (pfsense 2.4.4) , because I can get to my router's config page at either:


or at:


or at:


so the WAN-to-LAN redirecting (or whatever the proper term is) is working.

If I'm at my office, 192.168.0.0/24 with a hardware IPSec tunnel to 192.168.1.0/24, then either BI URL works in Chrome.

The iOS app works anywhere, presumably because it knows to use the LAN IP inside and the WAN IP/DynDNS outside.

Is there something within BI that checks the original requested URL and refuses it if it's a WAN request from a LAN address?

The reason this matters to me is that I will shortly have 3 different BI sites and servers to manage (Home, Office, Parents' Home), and I'd much rather have 3 bookmarks than 6 bookmarks.
 
Blue Iris normally has no problem with this once it is configured correctly in the router. As far as Blue Iris is concerned, the traffic will appear to originate from the router's LAN IP address.

This is how I configured mine. System > Advanced > Firewall & NAT.

NAT Reflection mode for port forwards: Pure NAT
Reflection Timeout: [blank]
Enable NAT Reflection for 1:1 NAT: Checked
Enable automatic outbound NAT for Reflection: Checked

1641414868575.png

1641414924359.png
 
SouthernYankee said:
http://myDynDNSAccount.dyndns.org:81/ui3.htm is connecting to the router not the BI box. You must port forward to the BI PC in the router (not recommended) Or set up OpenVPN to connect to your local network.
Click to expand...

Port forwarding is already set up, and it works properly when I'm outside my LAN. Chrome can get to my BI server at my WAN address when I'm at Starbucks.

The BI iOS app also connects to my WAN address from anywhere.

So the port forwarding is correct, and the firewall rules are passing the traffic.
 
bp2008 said:
Blue Iris normally has no problem with this once it is configured correctly in the router. As far as Blue Iris is concerned, the traffic will appear to originate from the router's LAN IP address.

This is how I configured mine. System > Advanced > Firewall & NAT.

NAT Reflection mode for port forwards: Pure NAT
Reflection Timeout: [blank]
Enable NAT Reflection for 1:1 NAT: Checked
Enable automatic outbound NAT for Reflection: Checked
Click to expand...

Ah, this was the trick! For some reason I had NAT Reflection turned off. Now it's on, and it's working. At least it's working on 3 of my installations.

On my 4th installation the router appears to lack this feature. :banghead:
 
You must log in or register to reply here.
Top Bottom