Sky hub as just a modem.

[StuXxxxx]

Seems a very complicated way of getting from A to B.  Why not just access the server from within your LAN?  Anyway, the only thing that comes to mind is that the sky hub is translating the port on the outgoing but not translating it on the incoming.  As you'd expect with a DMZ.  I’m afraid I’ve nothing more to offer on that one.  I'd need to ponder it for a while. 

[Warzilla]

I have apps on my mobile that access resources on my LAN.

They use my custom domain in configuration, so it doesn't matter if I'm home on local network or outside using cellular network. It all just works.

I had this setup working with Sky Hub, but Connect Hub firewall is blocking this traffic, even when the whole firewall is disabled. Seems to me like a bug in firmware. Turning firewall off should disable all the rules, IMHO.

[mae-3]

@Warzilla 

It is a NAT firewall on IPv4 and cannot be totally disabled. One has to forward ports through the NAT firewall by defining rules to work for IPv4 for internal LAN servers.

[Warzilla]

@mae-3I've tried adding port forward rule like below, but to no avail.

[mae-3]

@Warzilla 

That looks like you have defined the service but under security, it may have other settings, could the community see the security tab, please?

[DolmanDF5]

I'm all sorted now thank you!

Many thanks for all your sugestions 

[Warzilla]

Thank you for your assiatance, @mae-3 !

In security tab I have the whole FW disabled:

[TrebleTA]

On the sky device you need to make a firewall rule for outbound to allow all on x ip, if you look by default there is a block all rule.

But with the device you have it looks all different.

[mae-3]

@Warzilla 

You have disabled the firewall for outgoing connections. For incoming, you must add a rule for the service you previously defined.

[mae-3]

@Warzilla 

Just select the inbound service 'add' and then select the service DMZ.

[Warzilla]

@mae-3 

The configuration below doesn't work. I can't 'select' a service, I have to type in actual IP address. 192.168.0.2 is the address of my UDM Pro router (added to DMZ).

[mae-3]

@Warzilla 

Enabled.

Protocol DMZ.

LAN User 192.168.0.2

WAN Server leaves blank.

Action Allow.

[mae-3]

@Warzilla 

Can you list what is under protocol?

[Warzilla]

There's no DMZ protocol in the dropdown (DMZ is enabled under Advanced)

[mae-3]

@Warzilla 

Under protocol use TCP for 1 rule and a 2nd rule uses UDP both pointing to 192.168.,0.2 for LAN, so two rules in total. And the DMZ setting looks good so it should just work to the third-party router, so I'm surprised.