Linux - NetworkingThis forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.
Notices
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
Hi, I was unable to do port forwarding from a ZXHN H298N router. I had created a static address on my wireless network card. Also created a path on 'Application-NatLoop and Port Forwarding' on the router. I had reduced security on firewalls to minimum on both router and computer. I was using opensuse Leap 42.2. I was trying to open port 80 on my machine.
When I used 'canyouseeme.org' to verify if port 80 was open I got message: Error I could not see your service on 88.**.***.*** **on port (80). One reason why I was not getting port forwarding may be because I was behind more than one router. My external IP address was different from the IP address of the router. I read that if that was the case the internet facing router was with the ISP.
I wrote to my ISP and the following was their reply.
Quote:
Since your site (building) has been migrated to CGN (Carrier-grade NAT), all the routers on that site (including the one located in your property) have CGN IP addresses. CGN implies that one public IP address is translated into several CGN IP addresses that we are providing to our residential customers.
The CGN migration is something that all providers in UK (and all over the world) started to implement for residential customers due to lack of IPv4 addresses.
The Static IP is available as an add-on and it is charged £5 per month. It can be added or removed from your account anytime and it is a temporary solution until we fully migrate to IPv6.
The IPv6 migration is happening as we speak and all sites should be migrated within the next 2 months. Should you wish to add the Static IP to your account, please confirm by replying to this e-mail.
Could someone explain what is being said in the message (I don't have a clue) or what I should do to resolve my problem. All help will be greatly appreciated.
Translation: You're behind yet another NAT router now, and it is one you do not control. You'll have to pay the fee for a static IP address if you want to host a service, or else set up a tunnel to someone who actually has a routable public IP address and is willing to forward your traffic.
The CGN migration is something that all providers in UK (and all over the world) started to implement for residential customers due to lack of IPv4 addresses.
The Static IP is available as an add-on and it is charged £5 per month. It can be added or removed from your account anytime and it is a temporary solution until we fully migrate to IPv6.
Hi, Many thanks for your replies. One thing that I don't understand is after IPv6 migration will the situation remain the same, that is, will I still be part of my ISP's private network or will my router have a public IP address? If latter then I might as well just wait for the changeover.
Distribution: Debian /Jessie/Stretch/Sid, Linux Mint DE
Posts: 5,195
Rep:
IP6 does not use NAT anymore. Your computer will have its own public IPv6 address and can be reached without port forwarding. The number of IPv6 addresses is sufficient for the forseeable future.
In order to protect you from attacks your modem does provide a block for all traffic coming from the outside. Just as for port forwarding you have to allow for incoming connections. But that is filtering, and not NAT-ting.
So you could wait until IPv6 is deployed, BUT you can be reached from the outside only by the IPv6 protocol. Because you have a public IPv6 address, but not a IP4 address anymore.
There will be enough IPv6 addresses to give your underwear a static address as well as to the bottle of your dish detergent... ( wait. She said what, when she left the house?)
And we will rejoice and dance in the streets (dense as we are).
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.