Issue with autmated HTTP to HTTPS forward

[fredyerne]

Hi,

I'm using an ASUS RT-AC5300 with Merlin, I do have some N port formwardings in place which are working as expected.
Now I tried to setup an additional port forwarder to port 80, but instead of getting a forwarder to port 80, "something" is automatically forwarding it HTTPS:443.

If I disable the port forwarder to 443, it still tries to forward to HTTPS, but Fails after a certain time.

The really strange Thing is, that happens only if I use the Domain Name, if I try directly with the IP adress, it works!

http://www.fredy.li -> Redirects to HTTPS:443
http://178.82.36.145 -> works as expected

unfortunately no clue where or what this could be, hope someone can help

Thanks, Fredy

 

[thelonelycoder]

Does that only happen with your .li domain or with other domains as well?
Greetings from .ch BTW.

 

[fredyerne]

Does that only happen with your .li domain or with other domains as well?
Greetings from .ch BTW.

Hi,

well, not sure if it is releated to the Domain Suffix, but if I use the following one, it works:

http://www.erne-dubs.ch

so still wondering what I did missconfigure, I belive it must be somewhere in the router config ;-)
And greetings back from .ch, just found the .li Domain useful for testing

 

[thelonelycoder]

Did you try the .li domain with another browser?
Might just be a browser or OS cache issue.
Clean the cache in both and restart the router to see if that fixes it.
Issuing a

service restart_dnsmasq

through SSH or telnet would also clear the Dnsmasq cache, saves you from rebooting the router.

 

[fredyerne]

Did you try the .li domain with another browser?
Might just be a browser or OS cache issue.
Clean the cache in both and restart the router to see if that fixes it.
Issuing a

service restart_dnsmasq

through SSH or telnet would also clear the Dnsmasq cache, saves you from rebooting the router.

thanks for the hint, behavior is the following:

clearing the browser cache, opening http site -> works
opening the https site -> works
opening the http site again -> Forward to https

starting again with clearing the cache -> same behavior

well, after testing it internally and externally with different browsers, I found the issue - HSTS - funny stuff with intelligence in the browser to force people using HTTPS - good thing for security, unfortunatelly a pain for people using NAT with different Targets for SSL and non SSL sites.

However, many thanks for your help!

 

[thelonelycoder]

Glad it's as simple as that.

 

[Trikein]

FYI I heard that Asus AICloud listens on port 443. Sounds like you solved your problem, but wanted to let you know if you need to forward 443 instead of 80, just disable AICloud in the router UI.

 

[thelonelycoder]

FYI I heard that Asus AICloud listens on port 443. Sounds like you solved your problem, but wanted to let you know if you need to forward 443 instead of 80, just disable AICloud in the router UI.

You can set the port AI Cloud listens to to something else, like 9443, as I do (automatically) in AB-Solution when pixelserv-tls is installed and AI Cloud is set to 443.

 

[Trikein]

Where exactly do you change the port that AI Cloud listens to? Could you share the page link in the Merlin UI? Or a link to a support article?

 

[thelonelycoder]

Where exactly do you change the port that AI Cloud listens to? Could you share the page link in the Merlin UI? Or a link to a support article?

AICloud/Settings
It's the "AiCloud Web access port"