NGINX + pimatic + dnsmasq

---

Hi,

for 2 days I’m running nginx and pimatic v9. It works as expected (including letsencrypt). Unfortunately I have one of those routers (Telekom / Speedport) which do not provide NAT Loopback (Hairpin NAT) anymore. This stopped me from using my external DynDNS adress in my local network (from my mobile phone or tablet at home).

So I decided to install DNSMASQ to run my own DNS and DHCP on the pi. Therefore I’ve added my local IP of the pimatic server matching with the public DynDNS. After that I’ve disabled DHCP on my router.

After getting a new DHCP lease on my MacBook I was able to reach my pimatic over my external adress.

Now the issue:

My Phone (Android) and my iPad aren’t able to reach it. I’ve installed a DNS Scanner on the device to test if the DNS setting has been loaded. The DNS Scanner app resolves the IP correctly but Pimatic keeps saying “Reconnecting”. Any idea what I’m missing?

Partovic

@Partovic Could you please post your dnsmasq and nginx config?

Seems to be no real pimatic issue…

here is my DNSMASQ configuration:
dhcp-range=192.168.2.100,192.168.2.200 dhcp-option=3,192.168.2.1 dhcp-option=6,192.168.2.90,192.168.2.1 cache-size=8192

no big deal. 192.168.2.90 is my dns / web / pimatic server.

The nginx config is 1:1 this: link

@Partovic Okay, your config looks fine. Have you already cleared the cache on your phone and tablet?

@thost96 Yes. Nothing changed. Found out that my MacBook looses connection after a while too. If I leave pimatic page opened a while it says: “Reconnecting” I have to completely close my browser instance to get it back connected. Seems there is still an issue.

Your problem is that you only disabled DHCP in your main router. This means that it still routes network traffic, without NAT loopback. If your pi also routes traffic they might get into conflict.
If your pi is configured as a full router and also caches from internet dns servers it can route everything. In that case you need to disable routing as well on your router and make it an AP (access point) only.
Don’t forget in this case to set your router as gateway in your pi config.

@Harry-van-der-Wolf Hey, thanks for your reply. I don’t know if its possible to completely disable routing in my speedport. And I dont know if that is a good idea. But I will check that later

I downloaded one of the telekom speedport route manuals and you can configure it as a repeater (Erweiterte Konfiguration -> Netzwerk/Repeater). I do not know if that is valid for your router as well but there you should be able to find it (or not).