Quantcast
Channel: SmallNetBuilder Forums
Viewing all articles
Browse latest Browse all 6885

RT-AC56U: 445 port NAT bug

$
0
0
Hello!

Recently I bought the ASUS RT-AC56U router to share my Internet connection. However I found that using RT-AC56U I'm unable to access SAMBA shares in ISPs network. It's possible with any other router!

I found that the router doesn't perform NAT translation if destination port is TCP 445.

My ISP has some SAMBA shares in its 10.22.0.0/16 network. Router (firmware: 3.0.0.4.374_134-g9d50e8b) receive its WAN configuration via DHCP (it's a private IP address in 10.22.0.0/16 network). On computer I use static IP configuration using ISPs DNS and WINS servers. When I try to connect to SAMBA shares in ISPs network via the router Windows says the network path was not found:

Code:

tracert -d 10.22.10.12

Tracing route to 10.22.10.12 over a maximum of 30 hops

1 <1 ms <1 ms <1 ms 192.168.1.1
2 <1 ms <1 ms <1 ms 10.22.10.12

Trace complete.

Code:

nmap 10.22.10.12 -n -sS -p 139

Starting Nmap 6.40 ( http://nmap.org ) at 2013-09-09 15:56 Russian Standard Time

Nmap scan report for 10.22.10.12
Host is up (0.00088s latency).
PORT STATE SERVICE
139/tcp open netbios-ssn

Nmap done: 1 IP address (1 host up) scanned in 0.26 seconds

Code:

net use \\10.22.10.12
System error 53 has occurred.

The network path was not found.

It's possible to connect to the share via another router or if connect computer directly to ISPs network.



During investigation of the connection problem I installed sniffer on my computer.
  1. I set static WAN IP address of the router to 192.168.2.2/24 and default gateway 192.168.2.1.
  2. Set static IP address of my computer to 192.168.2.1/24 and connect it to the router WAN interface.
  3. Connect to the router via Wi-Fi (computer received 192.168.1.253/24 from the router).
  4. Start sniffer on my computer 192.168.2.1 interface.
  5. Enter command: net use \\10.22.10.12

Sniffer log:
Code:

1 16:53:24 09.09.2013 0.0000000 192.168.1.253 10.22.10.12 TCP TCP:Flags=......S., SrcPort=53631,DstPort=Microsoft-DS(445), PayloadLen=0, Seq=3634602023, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192
2 16:53:25 09.09.2013 1.0015180 192.168.2.2 10.22.10.12 TCP TCP:Flags=......S., SrcPort=53632, DstPort=NETBIOSSession Service(139), PayloadLen=0, Seq=565836296, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192
3 16:53:27 09.09.2013 3.0017490 192.168.1.253 10.22.10.12 TCP TCP:[SynReTransmit #1]Flags=......S., SrcPort=53631,DstPort=Microsoft-DS(445), PayloadLen=0, Seq=3634602023, Ack=0, Win=8192 ( Negotiating scale factor 0x8 ) = 8192
4 16:53:28 09.09.2013 4.0057190 192.168.2.2 10.22.10.12 TCP TCP:[SynReTransmit #2]Flags=......S., SrcPort=53632,DstPort=NETBIOS Session Service(139), PayloadLen=0, Seq=565836296, Ack=0,Win=8192 ( Negotiating scale factor 0x8 ) = 8192
5 16:53:33 09.09.2013 9.0064930 192.168.1.253 10.22.10.12 TCP TCP:[SynReTransmit #1]Flags=......S., SrcPort=53631,DstPort=Microsoft-DS(445), PayloadLen=0, Seq=3634602023, Ack=0, Win=8192 (Negotiating scale factor 0x8 ) = 8192
6 16:53:34 09.09.2013 10.0076960 192.168.2.2 10.22.10.12 TCP TCP:[SynReTransmit #2]Flags=......S., SrcPort=53632,DstPort=NETBIOS Session Service(139), PayloadLen=0, Seq=565836296, Ack=0,Win=8192 ( Negotiating scale factor 0x8 ) = 8192
7 16:53:46 09.09.2013 22.0024080 192.168.2.2 10.22.10.12 NbtNs NbtNs:Query Request for * Workstation Service
8 16:53:47 09.09.2013 23.5052800 192.168.2.2 10.22.10.12 NbtNs NbtNs:Query Request for * Workstation Service
9 16:53:49 09.09.2013 25.0046050 192.168.2.2 10.22.10.12 NbtNs NbtNs:Query Request for * Workstation Service

According to the log NAT translation doesn't performed if destination port is 445. Packets with number 1, 3, 5 have my computer IP address 192.168.1.253 instead of 192.168.2.2. I don't know reasons of that but because of that I can not connect to SAMBA shares.

Viewing all articles
Browse latest Browse all 6885

Trending Articles