Huawei HG633 - TalkTalk Router

Hi,

I am trying to setup a webserver on one of my PC's connected to my home network.

I have 2 main PC's directly connected through the Huawei Router, A=Upstairs using WiFi 5.0, B=Downstairs using Ethernet cable.

Both machines are using Windows10 Pro 64bit fully patched, along with all applications and drivers etc.

The PC I want to setup as a webserver is B

The issue I am facing is that PC B cannot respond to any port forwarding rules I apply in both the router and the Kaspersky Firewall (Kaspersky Internet Security 2017).

On PC B I am running the latest version of Apache and confirm that it is listening to port 80. This is part of the wampserver software which included PHP and MySQL servers. http://www.wampserver.com/en/

When I use websites to check ports, some say port 80 is open, others closed.

I have setup folders called www http public_http on the root HD with both PHP and Html versions of my website.

I have set up a domain which points to my router/IP url and is dynamic so it updates every 5 minutes.

There are no issues with any outbound ports and I can connect remotely to this PC over the LAN.

If I use my data connection from my smartphone, or another location not connected to my Lan, and try to connect using a standard browser, I get a couple of warnings that the connection is not secure, then if I bypass those warnings I get the admin login page for my router.

Anyone have any idea's what I maybe doing wrong?

Edited by deleted (Tue 24-Oct-17 09:44:08)

MOST IMPORTANT...

It looks like you have exposed the web admin interface of your router, fix that first before worrying about the web server.

Second....web hosting including full virtual machines is so cheap these days that in terms of security and hassle much better to host with a hosting service.

Thanks for the rapid response.

How I have exposed the admin, I have no clue, for all I know it could have been like that since I installed the router some 18 months ago. I have been informed by those that frequent the TalkTalk (my ISP) forums, this is 'quite normal'.

The purpose for setting up a home webserver is a requirement for demonstrating purposes. I already have several virtual hosts, but none of those suit my direct requirements. Getting this working is a need, not a want, for me.

Your router is running a webserver on port 80 and this is serving pages in preference to your port forwarding.

You need to disable the routers webserver's access to the WAN, as anybody on the internet currently has access, which is obviously a security risk.

If the HG633 is not playing nicely you might be better swapping it out for third party hardware where you are more in control too. Is this an ADSL2+ or VDSL2 service.

Most router interfaces have the option to disable WAN access to config interface, but without a HG633 to hand impossible to say where it is hidden, and very much doubt that this is open by default on the WAN side to people.

In reply to a post by MrSaffron:

If the HG633 is not playing nicely you might be better swapping it out for third party hardware where you are more in control too. Is this an ADSL2+ or VDSL2 service.

Most router interfaces have the option to disable WAN access to config interface, but without a HG633 to hand impossible to say where it is hidden, and very much doubt that this is open by default on the WAN side to people.

I have no idea how to do that. All I have altered is in Port Forwarding, so whatever is the cause, has been factory/firmware set.

In reply to a post by MrSaffron:

If the HG633 is not playing nicely you might be better swapping it out for third party hardware where you are more in control too. Is this an ADSL2+ or VDSL2 service.

Most router interfaces have the option to disable WAN access to config interface, but without a HG633 to hand impossible to say where it is hidden, and very much doubt that this is open by default on the WAN side to people.

To make things even more difficult, as Huawei made this router bespoke for TalkTalk, they have released no manuals, or even acknowledge it on their website. TalkTalk only say the router came with a manual...... yeah the one that says 'the yellow plug goes into the yellow hole'.......

I have a fibre connection so a VDSL2 router.

https://help2.talktalk.co.uk/guided-assist/what-enha...

A few clicks and found this article showing where remote management is controlled from

I use port forwarding and translation to access web sites on my local lan. The web sites on my lan have fixed IP addresses, and I set my router to translate from some 5 digit port number to port 80. All the domestic routers I have seen will do this.

In reply to a post by MrSaffron:

https://help2.talktalk.co.uk/guided-assist/what-enha...

A few clicks and found this article showing where remote management is controlled from

Oh, thanks for that, I thought I had explored every inch of the router, that must have been enabled by default from day 1. Bad Huawei, bad talktalk.