[mythtv-users] With HDHomeRun, which ports need to be forwarded to Myth?

[Mike Perkins]

On 19/01/11 12:23, rawgarlic at gmail.com wrote:
> On Wed, Jan 19, 2011 at 3:53 AM, Mike Perkins
> <mikep at randomtraveller.org.uk>  wrote:
>
>> Huh? Isn't the WAN side of a firewall usually considered to be the
>> 'outside', i.e. the public side of your network? Why ever would you want to
>> put your myth box where everyone else can see it? Surely you mean that your
>> myth box is on the LAN side?
>>
>> --
>>
>> Mike Perkins
>
> Please read my original post again.
> I am NOT putting the myth box where everyone else can see it.
> On the contrary, the myth box is being further isolated within the existing LAN.
>
> Currently, the myth box is on a LAN.
> Current Firewall 192.168.6.1
> <--LAN1-->  HDHomeRun 192.168.6.9
> <--LAN1-->  myth 192.168.6.5
>
> Next, myth will be moved further behind another (2nd) firewall.
> Current Firewall 192.168.6.1
> <--LAN1-->  HDHomeRun 192.168.6.9
> <--LAN1-->  DD-WRT Firewall 192.168.6.12
> <----LAN2---->  myth 192.168.14.3
>
> That is why I need to know ...
> Which ports on DD-WRT need to be forwarded to 192.168.14.3 (the Myth box)?
>
I would say that you're *still* putting your myth box on the wrong side of the 
2nd firewall if you intend to isolate it further. It needs to be connected to 
the LAN side, not the WAN side. For your purposes, the WAN side of FW2 should be 
connected to the LAN side of FW1. That way you simply open a hole in FW2 to 
allow the myth box to access the HDHR.

Another option might be to connect the HDHR to a DMZ on FW2. That way both sides 
can get access but you have control.

-- 

Mike Perkins