ConnectTimeoutException

[ZeroCitrus]

<-------------------------Subsonic Help Request---------------------->
Problem Description: As I'm sure you guys run across regularly, I'm receiving a ConnectTimeoutException when I attempt to click the "Access Your Server over an easy-to-remember address." Port forwarding does not appear to have worked correctly.

I am actually behind two routers. Cable modem plugs into router 1 (192.168.0.1) which runs an ethernet cable through the window/wall into router 2 upstairs (192.168.2.1), which runs an ethernet cable into my desktop (192.168.2.181). My current setup is forwarding port 1025 (in case 80 was blocked, as is possible) from 192.168.0.1 to 192.168.2.1 over virtual server screen (as shown below)



and then forwarding port 1025 from 192.168.2.1. to 192.168.2.181 over port forwarding setup screen (as shown below). In case either of these settings are incorrect, I have also set up the port forwarding on both routers as both virtual servers and both port forwarding, in addition to the current virtual server -> port forward -> computer.



When a friend of mine scanned the port in question:

[14:34:53] <seasn4ke> PORT STATE SERVICE VERSION
[14:34:53] <seasn4ke> 1025/tcp filtered NFS-or-IIS

So, in summary, as you can see in the screenshots above, 192.168.0.1 is clearly set to forward port 1025 to 192.168.2.1, which is set to forward to 192.168.2.181, but something somewhere has gone horribly wrong.

The result:



Troubleshooting Steps: Extensive. Please see above for my current attempt to set everything up correctly.

EDIT: not mentioned above, but I attempted to use the automatic port forwarding. It said the forwarding had been completed successfully, but I received the same error. I figured this probably meant only one router had been successfully configured, so I turned off automatic port forwarding and attempted to do it manually.

Also, uPnP is enabled on both routers.

Playback Application and version: Haven't really gotten that far, but will be the subsonic Android app. I have used this a couple times to confirm that it is indeed not working. Version should be latest, as it was dl'd yesterday.
Subsonic Version: 4.4 (build 2172) – February 6, 2011
Server Version: jetty-6.1.x, java 1.6.0_15, Windows Vista (44.2 MB / 66.1 MB)
Hardware Platform: Windows Vista
Java Memory Limit: 100mb
Problem Filename: N/A
Output from ffmpeg -i:

Code: Select all

C:\Program Files\FFMpeg\ffmpeg-git-c1daf07-win32-static\bin>ffmpeg -i
ffmpeg version git-N-30508-gc1daf07, Copyright (c) 2000-2011 the FFmpeg develope
rs
  built on Jun  3 2011 14:10:45 with gcc 4.5.3
  configuration: --enable-gpl --enable-version3 --enable-memalign-hack --enable-
runtime-cpudetect --enable-avisynth --enable-bzlib --enable-frei0r --enable-libo
pencore-amrnb --enable-libopencore-amrwb --enable-libfreetype --enable-libgsm --
enable-libmp3lame --enable-libopenjpeg --enable-librtmp --enable-libschroedinger
--enable-libspeex --enable-libtheora --enable-libvorbis --enable-libvpx --enabl
e-libx264 --enable-libxavs --enable-libxvid --enable-zlib --disable-outdev=sdl -
-pkg-config=pkg-config
  libavutil    51.  4. 0 / 51.  4. 0
  libavcodec   53.  6. 1 / 53.  6. 1
  libavformat  53.  2. 0 / 53.  2. 0
  libavdevice  53.  1. 0 / 53.  1. 0
  libavfilter   2. 12. 0 /  2. 12. 0
  libswscale    0. 14. 1 /  0. 14. 1
  libpostproc  51.  2. 0 / 51.  2. 0
ffmpeg: missing argument for option 'i'

C:\Program Files\FFMpeg\ffmpeg-git-c1daf07-win32-static\bin>

Last ten log file lines:

Code: Select all

[6/3/11 12:16:57 PM EDT]    INFO   NetworkService   Deleted port mapping for port 1025
[6/3/11 12:21:01 PM EDT]    INFO   PodcastService   Starting scheduled Podcast refresh.
[6/3/11 12:21:01 PM EDT]    INFO   PodcastService   Completed scheduled Podcast refresh.
[6/3/11 12:26:32 PM EDT]    INFO   NetworkService   Deleted port mapping for port 1025
[6/3/11 12:26:38 PM EDT]    INFO   CoverArtController   Created thumbnail cache c:\subsonic\thumbs\200
[6/3/11 12:26:40 PM EDT]    INFO   PlaylistInputStream   admin listening to "A Life Like No Other - A Life Like No Other\A Life Like No Other - A Life Like No Other - 01 Parallels.mp3"
[6/3/11 12:26:50 PM EDT]    INFO   CoverArtController   Created thumbnail cache c:\subsonic\thumbs\48
[6/3/11 2:14:46 PM EDT]    INFO   NetworkService   Deleted port mapping for port 1025
[6/3/11 2:15:16 PM EDT]    INFO   NetworkService   Deleted port mapping for port 1025
[6/3/11 2:19:21 PM EDT]    INFO   NetworkService   Successfully forwarding port 1025.
[6/3/11 2:19:37 PM EDT]    INFO   NetworkService   Successfully forwarding port 1025.
[6/3/11 2:20:10 PM EDT]    INFO   NetworkService   Deleted port mapping for port 1025
[6/3/11 2:20:46 PM EDT]    INFO   NetworkService   Deleted port mapping for port 1025
[6/3/11 2:49:41 PM EDT]    INFO   NetworkService   Deleted port mapping for port 1025
[6/3/11 2:51:16 PM EDT]    INFO   NetworkService   Deleted port mapping for port 1025
[6/3/11 2:52:18 PM EDT]    INFO   NetworkService   Deleted port mapping for port 1025
[6/3/11 3:09:23 PM EDT]    INFO   NetworkService   Deleted port mapping for port 1025

<-------------------------Subsonic Help Request---------------------->

[ZeroCitrus]

I guess I'll post following the original post so as to provide a chronology of what happens as I keep attempting to fix this.

Attempting to visit zerocitrus.subsonic.org on my computer currently takes me to the login screen. Attempting to visit zerocitrus.subsonic.org on my phone now correctly resolves the IP address and port, but times out.

It is not an issue with Windows Firewall; turning this off temporarily did not stop the ConnectTimeoutException.

[martyscholes]

I don't have an answer for you, but it does seem related to the two layers of NAT.

I am curious, why do you need two subnets?

[ZeroCitrus]

The goal was to get WiFi to the entire house. I don't really have the option of changing it; I'm renting.

Anyways, cable modem is downstairs and plugs into the router down there. Then there's an ethernet cable that runs out of a mildly modified window and along the outside of the house (because there's not wiring through the house) up to a router that's upstairs that provides wifi for the upstairs. My room is upstairs, so my desktop is plugged in via ethernet to that second router.

[OlYeller21]

From my experience, two routers never goes well. There are repeaters your can buy and you can hack certain DLink and Linksys routers to be repeaters. I've never done it but I researched the option about a year ago. The repeaters cost $70-90 USD for some reason which is why I went with another option.

Sorry. That doesn't really answer your question but it might be a solution.

[GJ51]

Replace the second router with a cheap switch. Double NAT = Double trouble. Only one device should do the routing. If you use the second router as a port multiplier, turn off all DHCP services and control the network from the first router, i.e. the one attached to the gateway device.

[Kirk]

I see what you did.

On your first router you're forwarding to "192.168.2.1". On the second router you're forwarding to "192.168.2.181".

Your second router needs to get an IP from the first.

The first router looks like it's 192.168.0.1. Look in the WAN connection on your router 2. It's getting an IP from router 1. It should be like 192.168.0.2... that's the IP you need to forward. Router 1 can't see 192.168.2.x because it's on 192.168.0.x.

Change the port forward in router 1 to the 192.168.0.* IP of Router 2. Then everything will work as expected.

By the way: There is nothing wrong with "double NAT" as long as it's configured correctly. Actually, lots of businesses do internal NAT of a sort... called VLANs. If it's setup correctly and it's on equipment that can keep up with the demand for performance, it can be quite useful in some situations. I'll admit it's unnecessary for your situation, but it's not an illegitimate way to do it, it just might be a bad performing way since you're using two cheap Dlink routers rather than Cisco smart switches.

- Your Cisco CCNA Friend.

[GJ51]

Hi Kirk,

Long time no hear. Thanks for the analysis. I agree, I just always prefer the KISS method. The older I get, the more often I prefer it.

[martyscholes]

Ironically, after asking you why you did two NAT layers, I did the same thing for a few hours. Comcast had an outage, so I changed my router wireless from AP to client and had it attach to my cell phone which was running as an AP. My whole house had slow internet at least. The phone had NAT and the router also had NAT. Subsonic didn't work.

Others have made some good suggestions. Let me add some more.

If one router will support DD-WRT or Tomato, install the firmware and do one of the following.

* provision another port as WAN, letting your PC sit behind only the first NAT
* use the second router as a repeater (forget the correct term) and get rid of the cable from window to window

Or, go get a cheapo switch and put it upstairs in front of the second router.

I have used the repeater mode on some routers to extend coverage in my house. Works pretty well.

[Kirk]

Long time no hear. Thanks for the analysis. I agree, I just always prefer the KISS method. The older I get, the more often I prefer it.

For 99% of situations, especially residential situations, I agree 100%. I just have to argue against "double nat = bad" because statements like that spread ignorance.

-Kirk

[Kirk]

Hi Kirk,

Long time no hear.

And yeah, I haven't been hanging around here as much as I'd like. I try to come by when I'm at work sometimes, but more often than not, I get phpBB database errors on this forum before I have the chance to reply to anything... and my time has been rather limited these days in general. Nice seeing you again too GJ51.

-Kirk