I managed to break Google’s Powermeter — again. \u00a0But at least this time I know what I did.<\/p>\n
I was reviewing my router firewall logs and was not too happy with all the active connections and unknown addresses that were talking to devices in my house. \u00a0So after dumping them all into a spreadsheet and banging away at reverse DNS lookups I tightened my firewall rules. \u00a0But that shouldn’t have dumped google… Turns out I also went with a more restrictive set of rules on NAT. \u00a0If you’re using google power meter don’t select address and port restrictions. \u00a0Here’s what the D-Link manual has to say on it:<\/p>\n
\nNAT Endpoint Filtering <\/dt>\n The NAT Endpoint Filtering options control how the router’s NAT manages incoming connection requests to ports that are already being used.<\/p>\n \n
- Endpoint Independent <\/dt>\n
- Once a LAN-side application has created a connection through a specific port, the NAT will forward any incoming connection requests with the same port to the LAN-side application regardless of their origin. This is the least restrictive option, giving the best connectivity and allowing some applications (P2P applications in particular) to behave almost as if they are directly connected to the Internet. <\/dd>\n
- Address Restricted <\/dt>\n
- The NAT forwards incoming connection requests to a LAN-side host only when they come from the same IP address with which a connection was established. This allows the remote application to send data back through a port different from the one used when the outgoing session was created. <\/dd>\n
- Port And Address Restricted <\/dt>\n<\/dl>\n<\/dd>\n
- The NAT does not forward any incoming connection requests with the same port address as an already establish connection.<\/dd>\n<\/blockquote>\n
Address restriction works, but Port and Address breaks it.<\/p>\n","protected":false},"excerpt":{"rendered":"
I managed to break Google’s Powermeter — again. \u00a0But at least this time I know what I did. I was reviewing my router firewall logs and was not too happy with all the active connections and unknown addresses that were … Continue reading