UFB Port Forward

Forums › New Zealand Broadband › UFB Port Forward - EOL ISP

nakedmolerat

4631 posts

Uber Geek
+1 received by user: 874

Trusted

Lifetime subscriber

#110189 4-Oct-2012 19:33

I have been using my DGND3700 modem+router for ages now.

Just got fiber installed. The GPON unit installed is HG8240. I use the same router and connected it to eth1. PPPOE setup is fine. Internet works great.

My current issue is with port forward. Same setting on the router but the port is closed. Even if I put the whole computer IP under DMZ, the port is still closed.

I have been into HG8240 web interface but a bit clueless what else do I have to change.

Edit: Same setting, connect to my ADSL, the port forward works fine.

1 | 2

69 posts

Master Geek
+1 received by user: 13

Trusted

#696421 4-Oct-2012 20:58

The service provided by the local fibre co. doesn't do any port forwarding, blocking or anything along those lines.
Interesting that you can get into the HG8240 web config. I would have expected that will be well locked down by the LFC. Besides, as per my earlier comment, you won't find anything in there to change which could solve your problem.
Suggestions : talk to your ISP, perhaps they are treating UFB connected customers differently from ADSL customers.
Put your router settings into your PC and plug it directly into the ONT (that's the HG8240). Make sure you have suitable security in place as you'll be exposing your PC to the outside world.
No other ideas so far.

Disclaimer : I worked for an LFC for year, but not any more.

chevrolux

4962 posts

Uber Geek
+1 received by user: 2638
Inactive user

#696440 4-Oct-2012 21:28

The ONT is still working at Layer 2 from what I understand (which isnt alot tbh lol) so you wont find anything in there to do with NAT or port forwarding. Your router should be the only thing doing NAT and therefore the only place that port forwarding will happen. What port are you trying to open? And what are you using to test it?

nakedmolerat

4631 posts

Uber Geek
+1 received by user: 874

Trusted

Lifetime subscriber

#696449 4-Oct-2012 21:43

chevrolux: The ONT is still working at Layer 2 from what I understand (which isnt alot tbh lol) so you wont find anything in there to do with NAT or port forwarding. Your router should be the only thing doing NAT and therefore the only place that port forwarding will happen. What port are you trying to open? And what are you using to test it?

port 6112 (warcraft) - you cant host game if this port is closed. also confirmed with Open Port Check Tool

one thing I notice is my router has different IP compared to my WAN IP

I scanned with Shields Up, all ports are closed except for port 80 left open and port 646 is stealth. If it scans straight onto my router, it should be stealth (that is what I get when use it on my ADSL).

I got the feeling this can only be resolved with my ISP.

nakedmolerat

4631 posts

Uber Geek
+1 received by user: 874

Trusted

Lifetime subscriber

#696538 5-Oct-2012 04:36

Anyone?

nakedmolerat

4631 posts

Uber Geek
+1 received by user: 874

Trusted

Lifetime subscriber

#696569 5-Oct-2012 08:49

Found the answer to this issue. The whole network is behind one big ISP firewall.

It turns out that I need my own private IP address which is another additional cost.

sbiddle

30853 posts

Uber Geek
+1 received by user: 9996

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#696570 5-Oct-2012 08:52

Wow, who is the ISP? Clearly somebody who doesn't have enough IPV4 addresses for their customers!

Dyson

Shop now for Dyson appliances (affiliate link).

nakedmolerat

4631 posts

Uber Geek
+1 received by user: 874

Trusted

Lifetime subscriber

#696573 5-Oct-2012 08:55

sbiddle: Wow, who is the ISP? Clearly somebody who doesn't have enough IPV4 addresses for their customers!

EOL

They are the first ISP that can provide fiber at my area. I will not recommend to other home users. it is better to wait for big players (eg: Snap) to come on board.

kyhwana2

2572 posts

Uber Geek
+1 received by user: 233

#696594 5-Oct-2012 09:33

nakedmolerat: Found the answer to this issue. The whole network is behind one big ISP firewall.

It turns out that I need my own private IP address which is another additional cost.

You mean they're doing Carrier Grade Nat already? Whoops! Bring on IPv6 already..
(And I think you mean they want you to pay for a public ipv4 address, since they probably can't get any more from APNIC)

nakedmolerat

4631 posts

Uber Geek
+1 received by user: 874

Trusted

Lifetime subscriber

#696653 5-Oct-2012 10:40

kyhwana2: You mean they're doing Carrier Grade Nat already? Whoops! Bring on IPv6 already..
(And I think you mean they want you to pay for a public ipv4 address, since they probably can't get any more from APNIC)

Maybe. From a regular customer point of view, it is a nuisance. I wish they inform me before singing up. What a hassle.

nakedmolerat

4631 posts

Uber Geek
+1 received by user: 874

Trusted

Lifetime subscriber

#696840 5-Oct-2012 16:06

apart from that hiccup, i get good speed with EOL

Auckland:

Melbourne:

Los Angeles:

raytaylor

4076 posts

Uber Geek
+1 received by user: 1296

Trusted

#696877 5-Oct-2012 17:52

This is the second ISP i have heard of natting customers.

Ray Taylor

There is no place like localhost

Spreadsheet for Comparing Electricity Plans Here

AliExpress

Shop now on AliExpress (affiliate link).

Publius

276 posts

Ultimate Geek
+1 received by user: 27

#696878 5-Oct-2012 17:52

Wow. Thats not good. This is the first landline ISP i've heard of doing carrier grade NAT. In the last month or so 2degrees has moved to using carrier grade nat also.

I hope this was advertised well by the ISP.

nakedmolerat

4631 posts

Uber Geek
+1 received by user: 874

Trusted

Lifetime subscriber

#696883 5-Oct-2012 18:12

Publius: Wow. Thats not good. This is the first landline ISP i've heard of doing carrier grade NAT. In the last month or so 2degrees has moved to using carrier grade nat also.

I hope this was advertised well by the ISP.

Unfortunately no. I spent all night trying to find out what is going on.

It was not until I call them I was made aware of this 'limitation' (which also costs me extra to 'fix' it).