AnOldMan.com

HOW TO DO IT EVEN THOUGH YOU SHOULDN'T

THIS ARTICLE WORKS, BUT THERE IS AN EASIER WAY NOW.

VISIT UPDATED: Forwarding Ports on your Magnia SG20 FOR MORE INFO

This document assumes you have ftp access to your magnia, or are willing to edit files from a bash prompt (yuck!). If you have ver 2.5xx you will also need to understand IPCHAINS.
If you don’t understand what I just said you are going to have SERIOUS trouble! Go bowling or something.

One of the first things a power user asks after replacing his/her router with a Magnia is "How the heck do I forward ports?"

The short of it is: YOU CAN'T!

Toshiba very thoroughly and completely locked the bugger down tight for security reasons.
Your Magnia is a COMPUTER running SOFTWARE and CAN BE HACKED!! It is not a simple router with firmware!

If you want to access stuff on the other side of your firewall - use VPN. It works great.

If you want others to be able to access stuff on the other side of your firewall... make sure you have a drive image of your magnia (sooner or later you're going to need it) and follow along with me.

This example applies to a Magnia SG20 ver 2.6xx. Note I’ve said this twice now.
2.5xx uses IPCHAINS not IPTABLES so the rules syntax is different!
The menu setup, however, is the same... so if you are clever you can use the example to figure the rest out - menus YES rules NO!!

The next most common question is "How can I get my magnia upgraded to ver 2.6xx?" The simple answer is: you must find a hard drive image, download it, and write the image to the magnia's drive with another computer. OR you need to get somebody who has the image to write it for you - this process requires special software and hardware. Buy a spare drive for your magnia and send it to someone who can image it for you! If this doesn’t sound simple to you, remember, that was the simple answer!

Firewall rules are located in /sa2/firewall

These are the firewall rules available by default in the administration menu
under Firewall --> Customize

1: Checkpoint VPN Client (UDP Encapsulation Mode)
2: Cisco VPN Client (IPSec over UDP)
3: Internet Games
4: FTP Server
5: Telnet Server
6: WWW Server

These firewall options offer limited access and are of almost no use to anyone. I have no idea why Toshiba even bothered with some of them.
I put the numbers in (instead of checkboxes) for a reason... bear with me.

Each firewall rule is in it's own folder.
Each folder contains the following files:

index - contains the number that determines the order the rule appears in the magnia's firewall menu (i.e. 60)
description - contains the description of the rule that appears in the magnia's firewall menu (i.e. WWW Server)
rule - contains the actual IPTABLES rule
type - for most port forwarding will contain the word "server"

By far the easiest way to "make" a new rule for opening a port is:
1: copy an existing rule folder to your local machine using ftp
2: modify the folder name, index #, description, and rule
3: copy the new folder back to the magnia with ftp
4: enable the rule through the magnia's firewall "customize" menu

Tips:
Use a short description, I use ports. IE: "Forward port 4240 to 192.168.1.249:80
The index number for the new rule must be greater than existing rules. The format seems to be in tens. So rule one is 10, rule two is 20, and so on. Your first new rule would be 70.

Examples: (taken from working RULES files, comment lines start with #)

1:     # forward anything going to port 4240 to 192.168.1.249 port 80
        $IPTABLES -A PREROUTING -t nat -p tcp --dport 4240 -j DNAT --to 192.168.1.249:80
        # allow packets trying to go from the wan to lan to the forward port 4240 thru.
        $IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport 80 -j ACCEPT
        $IPTABLES -A FORWARD -i $INTIF -o $EXTIF -p tcp --sport 80 -j ACCEPT

2:     # forward anything going to port 4662 to 192.168.1.2 port 4662
        $IPTABLES -A PREROUTING -t nat -p tcp --dport 4662 -j DNAT --to 192.168.1.2:4662
        # allow packets trying to go from the wan to lan to the forward port 4662 thru.
        $IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport 4662 -j ACCEPT
        $IPTABLES -A FORWARD -i $INTIF -o $EXTIF -p tcp --sport 4662 -j ACCEPT

Toshiba Magnia SG20 Small-Business Server

Overview:

- 8 Port Router
- Wireless Ready
- 20GB Hard Drive
- VPN (Virtual Private Network)
- Firewall, Server, Network Attached Storage and much more!

System:
- Celeron 566mhz processor
- 128MB RAM
- 20 GB HDD
- Wireless 802.11b Ready
- Ethernet LAN Network Interface
- 10/100 Mbps Auto configuration
- 1 public WAN RJ-45 port
- 7 private LAN RJ-45 ports
- 1 private RJ-45 uplink port
- Wireless LAN Network Interface
- Access Point capable with PCMCIA IEEE 802.11b Card. (Orinoco ONLY)

General I/O
- 16-character x 2-line backlit LCD with Scroll Button on the front of the machine
- 1 25-pin D-SUB Centronics parallel port
- 1 RJ-11 V.90 DSP Modem Port
- Power Button (front)
- Reset Button (rear)
- Administrator Password Reset Button (rear)
- Power Supply 100V-240V 50/60Hz 50 Watts

Dimensions:
- Width: 13.375in (339.90mm)
- Depth: 10.625in (269.88mm)
- Height: 2.625in (67.40mm)
- Weight: 10 lbs. (4.5 kg)

Software and Services:
- Red Hat Linux based kernel

- Simple Network Configuration
- Automatic DHCP, DNS, NAT, and Web Services.
- Personalized Intranet without learning to program HTML by managing the pre-configured templates included with the Magnia SG20.
- Security: Packet filter & IP tables Firewall protects company data from Internet intrusion.
- Cross-platform File Sharing: Windows® and Mac OS® users can exchange information with the Magnia SG20 using file sharing services.
- Enhanced Backup and Restore: The Magnia SG20 includes an application for file backup and restore. The application can backup and restore files to/from a backup device connected to a networked client computer, to a shared directory or through secure FTP to Toshibas Internet-based storage service (fee based).
- Second Hard Disk Drive Configuration: An optional second hard drive (2.5") can be configured for additional storage capacity or it can be configured to mirror the primary hard drive.
- Content Filtering: Built-in application that allows administrator to restrict access to specific Web sites, or to sites that contain certain phrases or words in their domain name.
- Internet Connectivity: Connect to the Internet via the built-in 56K Modem or auto-sensing 10/100 Ethernet WAN port. The 10/100 Ethernet WAN Port can connect to broadband Internet service from a Corporate LAN, a DSL line, or a Cable line.
- Virtual Private Networking: Virtual Private Networking is certified only for client computers running Microsoft® Windows operating systems. The Virtual Private Network requires the Magnia SG20 be connected to the Internet using the Public WAN Ethernet port. The Magnia SG20 can manage a Point -to-Point Tunneling Protocol (PPTP) Virtual Private Network with authorized users.
- Digital Photo Album: Includes an application to manage centrally stored digital pictures (JPEG) and digital videos.
- Digital Jukebox: Includes the capability to store and organize digital music (MP3 and WMA file formats). The Magnia SG20 can deliver music to any wired or wireless connected computer or supported Pocket PC device, as well as through a Voyetra® Turtle Beach® AudioTron to a home stereo system.