Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


olivernz

218 posts

Master Geek

Lifetime subscriber

#262139 7-Jan-2020 12:41
Send private message

Hi all,

This is a 2degrees and potentially a Chorus question.

I am trying to do port forwarding for some services on my 2degrees fibre connection. The firewall i use is OPNsense, which is directly connected to the ONT using pppoe. Needless to say port forwarding is not successful. I have opened up the port as per description of OPNsense and it should be working. The services on that port are working fine too. But I don't even see the port being hit from the outside.

So in my investigation i came accross something I can't really explain. The FW says my external WAN IP is 100.66.xxx.xxx but when looking at my external IP from the outside it's 151.210.xxx.xxx. Is that because there's something like Carrier Grade NAT? I presume that is the difference between 2degrees network layer and internet traffic layer but I would have somehow expected this to be 1:1 NAT. So anything going to the 151 address to be directly forwarded to the 100.66 address.

So either the traffic isn't getting forwarded or it's hitting the FW as 151.210 and the FW isn't recognising it as legal traffic and dropping it (but not seeing that in the log).

So any help here would be greatly appreciated. How do others fare with port forwarding and PPPOE? Any issues? I am just trying to understand where the traffic is being dropped.

Thanks Heaps!
Oliver

Filter this topic showing only the reply marked as answer Create new topic
evilonenz
/dev/urandom
146 posts

Master Geek

Lifetime subscriber

  #2386604 7-Jan-2020 12:43
Send private message

This is due to the CG-NAT 2degrees have recently implemented. The only choice if port forwarding is 100% required, is a static IP.


 
 
 
 


hio77
'That VDSL Cat'
12534 posts

Uber Geek

Trusted
Spark
Subscriber

  #2386607 7-Jan-2020 12:45
Send private message

you are on CGNat. request a public ip..





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

 


olivernz

218 posts

Master Geek

Lifetime subscriber

  #2386611 7-Jan-2020 12:54
Send private message

Thanks heaps. Was suspecting some &€€&€_:- like that.

olivernz

218 posts

Master Geek

Lifetime subscriber

  #2387629 8-Jan-2020 21:03
Send private message

Yep, got fixed IP and all is working.

Filter this topic showing only the reply marked as answer Create new topic




News »

HP unveils new innovations for businesses adapting to rapidly evolving workstyles and workforces
Posted 17-Sep-2020 15:36


GoPro launches new HERO9 Black camera
Posted 17-Sep-2020 09:45


Telecommunications industry launches new 5G Facts website
Posted 17-Sep-2020 07:56


New Zealand ranks 3rd in world in GSMA index
Posted 15-Sep-2020 10:13


Trend Micro Security Suite adds web monitoring to prevent identity theft
Posted 14-Sep-2020 15:37


NVIDIA to acquire Arm for US$ 40 billion
Posted 14-Sep-2020 12:27


Epson launches its next gen A3+ colour EcoTank multi-function printer
Posted 10-Sep-2020 16:08


Sony launches three new native 4K SXRD home cinema projectors
Posted 9-Sep-2020 18:00


Catalyst Cloud brings Kubernetes-based open-source web hosting solution to market
Posted 9-Sep-2020 17:54


Verizon Connect eyes further growth in New Zealand
Posted 8-Sep-2020 09:26


PNY launches XLR8 gaming NVIDIA GeForce RTX 30 series powered by the all-new NVIDIA Ampere architecture
Posted 3-Sep-2020 16:39


NVIDIA delivers greatest-ever generational leap with GeForce RTX 30 Series GPUs
Posted 3-Sep-2020 16:17


Weta Digital advances visual effects and animation in the cloud with AWS
Posted 2-Sep-2020 17:09


Kiwrious lab-in-the-pocket kit designed for schoolchildren
Posted 28-Aug-2020 09:03


Fitbit introduces Sense, its most advanced health smartwatch
Posted 26-Aug-2020 10:14



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.