Port forwarding not working

[sunface]

I see there are lot of topics discussing on this already, and I did try to follow them and made some changes but I still couldn't able to make it work, hence creating this topic.

My set up

PON --> EA8100 (OpenWrt) --> Machine (connected via WiFi)

I wanted to allow traffic from the internet to reach a service I'm running on my machine.

Config changes I made by following some of the discussion on the topics in this forum.

Created Port Forwarding entry

Unchecked Masquerading for WAN

Created entry in Traffic rules

I started with Port forwarding entry (it didn't work) so, unchecked the Masquerading box (it didn't work) so, added the traffic rule.

After doing all this, it still doesn't work, Am I missing anything?

[ncompact]

@sunface

Unchecked Masquerading for WAN

restore wan "Masquerading"

check if the ip address on the wan is a public ip address,

install tcpdump and check if you get input traffic on port 5000

[sunface]

@ncompact

restore wan "Masquerading"

ok noted.

@ncompact

check if the ip address on the wan is a public ip address,

Nope, it doesn't seems to be Pubilc ip

[ncompact]

check if the address is the same as the one shown by:

https://whatismyipaddress.com/

show this:

Can't open correctly ports in OpenWrt

Hi to all, sorry for my English but i'm italian... Few days ago i tried to host a minecraft server out of nowhere but i encoutred this problem that is giving me nerves for days. I've opened all the ports in the settings of the router and in the Windows Firewall, but the server still says this: [23:22:06] [Server thread/INFO]: Starting Minecraft server on 194.39.145.253:25565 [23:22:06] [Server thread/INFO]: Using default channel type [23:22:11] [Server thread/WARN]: **** FAILED TO BIND TO POR…

[sunface]

nope, its not the same.

[ncompact]

then you are behind CGNAT ...

Carrier-grade NAT

[sunface]

@ncompact

then you are behind CGNAT ...

https://en.wikipedia.org/wiki/Carrier-grade_NAT

Thanks for the link, Guess the below statement from the link shared is the reason.

[ncompact]

request public ip address from ISP (ipv4)

maybe you are allowed to do this with your ipv6 ip address

or

how to overcome this limitation

show:

Connecting to router behind CGNAT

Hi, I assume this is a common user-case. I want to be able to ping devices behind my cottage router running OpenWRT that uses 5G modem to access Internet and thus does not have public IP. I already use WireGuard server on my home router (which works flawlessly) but I presume that similar setup is not possible in cottage due to CGNAT? What are my options? Let cottage router (CGNAT) connect to home router (public IP) via WireGuard client installed in cottage and tunnel back to cottage via home…

https://forum.openwrt.org/search?q=CGNAT

[sunface]

Thanks, let me explore it. I'm not a network person, so I might need to spend some time to understand all this.

[eduperez]

You seem to have a public IPv6 address. You will not be able to reach your network from an IPv4-only remote location, but you should be fine from a location that uses IPv6.

[sunface]

@eduperez

You seem to have a public IPv6 address. You will not be able to reach your network from an IPv4-only remote location, but you should be fine from a location that uses IPv6.

Hmm.. I manged to set it up using IPv6 and tested using this website ([IPv6 Port checker] (https://port.tools/port-checker-ipv6/)), which says port is open, but when I use this website which uses CURL (Curl playground) it doesn't work. not sure what's happening.

[eduperez]

Sorry, but "it dies not work" is not very informative... What error message did you get? What kind of service is your machine offering? Did you use 'tcpdump' as advised?