Need help in port forwarding (Airtel Xstream with Static IP)

TheBark said:
What modem do you have?
Click to expand...
Not even sure which one it is.
It's connected in bridge mode to my primary router so it's running pretty much as a dumb ont/media converter.

Having said that, i sort of doubt that any specific modem/router would have internal limitations on port that can be fwdd.

It may be Worth sharing pics of your wan config and NAT setup .
 
@superczar here are some screenshots.

ibb.co

6-E4-E8904-B8-F2-47-E8-9698-C42-EF68-A7024 hosted at ImgBB

Image 6-E4-E8904-B8-F2-47-E8-9698-C42-EF68-A7024 hosted in ImgBB
ibb.co ibb.co
ibb.co

06156-AB1-346-D-4740-80-C6-57-B2-DAB5-E349 hosted at ImgBB

Image 06156-AB1-346-D-4740-80-C6-57-B2-DAB5-E349 hosted in ImgBB
ibb.co ibb.co
ibb.co

E6-DC22-D2-346-A-4-D6-A-B735-CEC775-F950-FE hosted at ImgBB

Image E6-DC22-D2-346-A-4-D6-A-B735-CEC775-F950-FE hosted in ImgBB
ibb.co ibb.co
ibb.co

B8-D30-F9-A-6-BBE-4-CA0-B2-E8-97187-D6-C7-CAA hosted at ImgBB

Image B8-D30-F9-A-6-BBE-4-CA0-B2-E8-97187-D6-C7-CAA hosted in ImgBB
ibb.co ibb.co
 
TheBark said:
@superczar here are some screenshots.

ibb.co

6-E4-E8904-B8-F2-47-E8-9698-C42-EF68-A7024 hosted at ImgBB

Image 6-E4-E8904-B8-F2-47-E8-9698-C42-EF68-A7024 hosted in ImgBB
ibb.co ibb.co
ibb.co

06156-AB1-346-D-4740-80-C6-57-B2-DAB5-E349 hosted at ImgBB

Image 06156-AB1-346-D-4740-80-C6-57-B2-DAB5-E349 hosted in ImgBB
ibb.co ibb.co
ibb.co

E6-DC22-D2-346-A-4-D6-A-B735-CEC775-F950-FE hosted at ImgBB

Image E6-DC22-D2-346-A-4-D6-A-B735-CEC775-F950-FE hosted in ImgBB
ibb.co ibb.co
ibb.co

B8-D30-F9-A-6-BBE-4-CA0-B2-E8-97187-D6-C7-CAA hosted at ImgBB

Image B8-D30-F9-A-6-BBE-4-CA0-B2-E8-97187-D6-C7-CAA hosted in ImgBB
ibb.co ibb.co
Click to expand...
On the last screenshot, i am presuming 192.168.1.1 is the lan ip for your gateway/router (ie the device you are configuring itself)
I am assuming the intent is to forward 443 to a server/device on the lan.
Are you getting the same error if you change the target ip for nat to any other device on your network
 
superczar said:
On the last screenshot, i am presuming 192.168.1.1 is the lan ip for your gateway/router (ie the device you are configuring itself)
I am assuming the intent is to forward 443 to a server/device on the lan.
Are you getting the same error if you change the target ip for nat to any other device on your network
Click to expand...
No no it’s to another device. 193.168.1.15. It’s got cutoff due to resolution.
 
TheBark said:
ibb.co

B8-D30-F9-A-6-BBE-4-CA0-B2-E8-97187-D6-C7-CAA hosted at ImgBB

Image B8-D30-F9-A-6-BBE-4-CA0-B2-E8-97187-D6-C7-CAA hosted in ImgBB
ibb.co ibb.co
Click to expand...
From this one I would have inferred that it's a router limitation.
Yes a few routers have such limitations. For example, the Sercomm one wouldn't allow me more than 8 ports to be forwarded. Whatever the reason, the firmware has such limitations.

Just raise a query with Airtel Black/Xstream support, they will replace your router with another model.
Or put this one in bridge mode and use your own router.
 
john wick and his cat....please let us know that, for port forwarding, do we really require static IP in the airtel service discussed over here?
 
napstersquest said:
Another update on the situation.
Since the static IP config changes that the 'network engineer' made on my router, the landline wasn't working.

I told him about the missing config for the voice channel in the WAN settings, he had no idea what I was talking about.

I raised a request through the Thanks app, called him again, he assigned it to himself.
Called me to reset the router to factory settings. The old pppoe for internet and voice settings came back, I changed the Internet settings from pppoe to static IP and internet (and landline) works again.

I just wish every ISP had at least one knowledgeable person in every region/locale.

Now I told him about port forwarding, let's see.


Edit 8:34PM:


Now this is super dumb (I don't know if on my part or on how it works).

So it seems all the port forwarding was working from the beginning.

Basically I tried to access home assistance instance (port 8123) on my static IP (after port forwarding) with mobile data (Not WiFi) and it works.
port 80 still points to the airtel router web panel, but the rest of the ports seem to work.

But if I am on the WiFi and try to access via http(s)://<Static IP> then it does not work (connection times out).

I have changed the LAN DNS to a pihole instance and WAN DNS to googledns by the way. Before and after behaviour is the same about above.
@superczar can you please verify if you can access http(s)://<Static IP>:<WAN Port> from inside your LAN as well as via internet? I am able to access it over SIM network, but not when I am on same network.

<LAN IP>:<LAN Port> works fine though on local network.
You have been very helpful so far. Thank you
Click to expand...
Hey Ive been trying to enable port forwarding in my router as well to make a Minecraft server and it doesn't seem to work
could you tell me how u enabled port forwarding.?
 
Vishn said:
Hey Ive been trying to enable port forwarding in my router as well to make a Minecraft server and it doesn't seem to work
could you tell me how u enabled port forwarding.?
Click to expand...
Which router are you using?
Have you paid for static IP? Unfortunately you can't forward port without static IP (There are other ways to get minecraft access to work over internet)
 
Hey how did you solve the router page issue? I have a static IP and I setup DNS record as well. but when I visit my domain it shows router page. Why would this even happen? I do have port forwarding setup with 80 -> 80 and DMZ as well
 
Either do DMZ or port forwarding. Not both.
Also change router admin panel port to something other than 80. (in router settings)
mangaman said:
Hey how did you solve the router page issue? I have a static IP and I setup DNS record as well. but when I visit my domain it shows router page. Why would this even happen? I do have port forwarding setup with 80 -> 80 and DMZ as well
Click to expand...
 
napstersquest said:
Either do DMZ or port forwarding. Not both.
Also change router admin panel port to something other than 80. (in router settings)
Click to expand...
brother, i had the sercomm router yesterday today i got the replacement because i have fortforwarding issue in it. I have static ip and my ports are blocked,
I am trying to make a DAYZ server and want to forward port 2302 plz help me or suggest me omething because the airtel guys and backhand team are dumb ass....
 
@napstersquest
Just a fyi :)
Port forwarding in general is not considered good from a security perspective, it's like you are punching holes in your security blanket/firewalls.
If the requirement is just to access some things from outside, you can do that without port forwarding or static IP.
It takes some setup, which I'm happy to assist you with since I did it recently, but it's free so you will save some money haha.
Let me know ..
 
demon_slayer said:
@napstersquest
Just a fyi :)
Port forwarding in general is not considered good from a security perspective, it's like you are punching holes in your security blanket/firewalls.
If the requirement is just to access some things from outside, you can do that without port forwarding or static IP.
It takes some setup, which I'm happy to assist you with since I did it recently, but it's free so you will save some money haha.
Let me know ..
Click to expand...
I have hosted around 10 websites on home server, by forwarding just 2 ports and using NPM.
 
Opening anything to the internet invites some vulnerabilities. Other options like Tailscale (local VPN) exist, but they have their own limitations and overheads.
I'd suggest completely containerizing whatever you want to expose to the internet and having a non root user as the container execution user.

I ended up going the Tailscale route because I was too lazy to get a static IP for a single media server app but the security principle carries over either way.
 
distroquerim said:
Opening anything to the internet invites some vulnerabilities. Other options like Tailscale (local VPN) exist, but they have their own limitations and overheads.
I'd suggest completely containerizing whatever you want to expose to the internet and having a non root user as the container execution user.

I ended up going the Tailscale route because I was too lazy to get a static IP for a single media server app but the security principle carries over either way.
Click to expand...

I initially started with using Cloudflare tunnels, discovered Tailscale down the line and it's just so easy and flawless.
 
Back
Top