Firewall Problems with Remote LiveClient Login

[shelzmike]

I have been pulling my hair out on this one. Here is the setup:

We hav NetGear ProSafe FVX538 as our firewall
We are running SBS 2003 that acts as DHCP and Primary DNS
TrendMicro OfficeScan (Not sure if this is important, but inlcuded it anyway)
NAT'd
LAN IP range - 10.0.0.xxx

We have a security camera setup using VIVOTEK products - 4 cameras here and one at another location.

We currently use LiveClient to access all cameras and record in one location (which is considered the LiveClient Server (LCS). THis server runs on port 3454 and 554. This server actually gets the feeds from the cameras all into one place. From a client computer, you can install LiveClient and simply connect the the server using the IP address and port 3454. Inside the LAN, this works beautifully. However, outside the LAN, this does not work at all. The port is blocked but I cannot figure out where at. What should be able to happen from the internet is that you can enter the global IP with port 3454 and use Live Client remotely.

I have been working on this for a full day and cannot figure it out. Here is what I have done:

Contacted ISP to be sure they are not blocking ports 3454 and 554 (they are not).
Completely disabled the firewall on the LiveClient server (which is Win7 Home Premium<--don't ask why but it will be fixed soon, but it shouldn't matter because the service works internally.

I have set up the way (I think) I am supposed to set up port forwarding on our Netgear ProSafe FVX538. Here is what I have done there:
Security-->Services-->Add Custom Service
Name: LIVE CLIENT DB
Type: TCP
ICMP Type: n/a
Start Port: 3454
Finish Port:3454
Default QoS Priority: Normal-Service

I did the same for port 554 using the same settings (differnt name though)

Then -
Security-->Firewall-->Inbound Services-->Add
Service Name: LIVE CLIENT DB
Filter: Allow Always
LAN Server IP Address: 10.0.0.xx:3434 (this is the LAN IP:Port of the LiveClient Server)
LAN Users: {blank}
WAN Users: Any
Destination: WAN1
Bandwidth Profile: NONE
Log: NEVER

Again, same for Port 554.

However, a.) the service does not work (i.e. cannot get connected to the server from the internet - actually is sent as connection refused as opposed to time-out) and b.) when I check the port using something like canyouseeme.org It comes back as NOT being able to see the service on GLO.BAL.IP.ADD on port 3454

What in the world could I be missing here? It seems that I have everything set up correctly. Please tell me I am overlooking something extremely simple!

Mike

[bobby1471]

Would the destination on your firewall not be LAN? Since your coming from the WAN to the LAN? I know some firewalls have to be setup so ANY user can come in on WAN and be directed to LAN IP's and ports.
_________________
www.controlbynet.com