Firewall settings

[proempiet]

I try to connect my TS-239Pro II to an Windows 2008 SBS server.
The server can connect when I put it in the LAN at the office but when I hook it up to my ADSL modem at home our at my sisters Cable Modem the server can not connect.

I opened the firewall port 3260 on both modems and from the office server I get an telnet connection to the QNAP.

When I then try to connect with the iSCSI connector I get no connection.

When I look in the log of on the modems I see the entries shown below.

[LAN access from remote] from 98.xxx.xxx.xxx:16001 to 10.0.0.8:3260, Monday, February 08,2010 08:15:58
[LAN access from remote] from 98..xxx.xxx.xxx:3159 to 10.0.0.8:3260, Monday, February 08,2010 08:07:31
[LAN access from remote] from 98..xxx.xxx.xxx:3147 to 10.0.0.8:3260, Monday, February 08,2010 08:06:23

Does this mean that I have to open the ports 16001, 3159 and 3147 also???

Please give me some advice or tips how to debug my setup!

[oops]

Is you firewall NAT based? Does it support ISCSI ALG (Application Layer Gateway)?
As I know, iscsi target will respond the SendTarget request in private ip issued by firewall to the initiator. If your firewall is NAT based and don't have iSCSI ALG, this private ip will mislead the initiator.

[proempiet]

The modem I use at home is an THOMSON ST780
The modem on the other location is an Netgear WNDR3700

I can not figure out what they are using!

[schumaku]

Network Address Translation (NAT) is evil to iSCSI, NAT twice is even worse - and iSCSI ALG are more than just very uncommon on consumer equipment...

Windows 2008 SBS <-NAT-> Cable Internet <-> DSL <-NAT-> TS-239Pro II

Please allow the question: What exactly do you intend to achieve with this configuration? For iSCSI in the classical sense (independent of the NAT issues), it cannot perform very fast. What kind of data and in which intensity do you intend to access on the Turbo NAS from the Windows Server over the Internet?

-Kurt.

[proempiet]

I want to make remote backups from our server to an remote site.

Or should I use something different for this.