Jump to content

cannot open the server from outside


sumer
Go to solution Solved by pwhodges,

Recommended Posts

sumer
I hope you can help me with the problem of not being able to open Embay from outside the home. I have done all the necessary steps and opened a port from inside the router, but the problem is still not solved and I cannot open the server from outside.
I want to subscribe to the premium subscription, but before that I would like to fix this problem
 
Link to comment
Share on other sites

  • Solution
pwhodges

Have you verified that your ISP doesn't use cgNAT?

Quote

 

You could also be blocked by your ISP in something known as a cgNAT (carrier grade Network Address Translation). One way of spotting this is to open a command prompt and doing a trace route to 8.8.8.8.

On windows it would be: tracert 8.8.8.8

Ignore the first line which will be your own router. What you want to see is if any of the next 3 or 4 lines start with 10., 100., 192., or 172. If the first number is 100 check if the next is between 64 and 127; if 172 check if the next is between 16 to 31; if 192 check for a following 168. If any of these returned lines match one of these patterns you are likely being blocked by your ISP using cgNAT.

 

  This procedure is a corrected version of the one given in: https://github.com/EmbySupport/Emby.Docs/blob/master/Remote-Setup.md

Paul

  • Like 1
Link to comment
Share on other sites

pwhodges

OK.  With cgNAT your options are:

(1) Ask your ISP take take you off it and give you a real IP address; they may say no, they may charge, or they may just do it - can't tell till you try.

(2) Use Tailscale to link your server and client machines into a single virtual network.  This requires an install on each device, but people report it being easy to set up, and the free option should be enough.  I believe ZeroTier is similar, but it doesn't get mentioned as much.

(3) Find a VPN service that will enable you to have a known IP address and port forwarding; only some do this, and it won't be free - but it saves having to install something on every device.

Paul

 

  • Like 1
Link to comment
Share on other sites

sumer

thanks for helping but the problem still, and i called my isp and he told me my ip is public
only i want to publish my website to Those close to me and friends outside the home, even if it costs me an increase in money or purchasing other features

Best Regards

Link to comment
Share on other sites

6 minutes ago, sumer said:

thanks for helping but the problem still, and i called my isp and he told me my ip is public
only i want to publish my website to Those close to me and friends outside the home, even if it costs me an increase in money or purchasing other features

Best Regards

OK, did you check out our remote setup guide?

Remote Setup

Link to comment
Share on other sites

2 minutes ago, sumer said:

yes i check it all

What exactly did you do based on that guide? Can you please show us?

Link to comment
Share on other sites

sumer
Posted (edited)
1 hour ago, Luke said:

What exactly did you do based on that guide? Can you please show us?

image.png.ae02a90a3e0b0afdb6b6478aee4d587e.png

 

2.png

3.png

4.png

5.png

Edited by GrimReaper
WAN IP masked
Link to comment
Share on other sites

Hi.  It looks like you need to fill in the proper external IP address.

Link to comment
Share on other sites

sumer
Posted (edited)
49 minutes ago, ebr said:

Hi.  It looks like you need to fill in the proper external IP address.

the problem with the port not open

image.png.9196e9ce2e1e57e032dccfa06256bcd9.png

 

Edited by GrimReaper
WAN IP masked
Link to comment
Share on other sites

Happy2Play

This doesn't look right do you have that many internal networks?

image.png.24929f6d5a464b04a652a0e458053085.png

But looks like your server is on the 192.168.100.1 network.

@GrimReaperCan you edit WAN shown above and on Dashboard image.

  • Agree 1
Link to comment
Share on other sites

pwhodges
1 hour ago, sumer said:

thanks for helping but the problem still, and i called my isp and he told me my ip is public

The tracert shows unequivocally that you are behind cgNAT, having not only the 10. and 192.168. addresses in the ranges dedicated to local non-routable use, but also a 100.64. address - which is in the range specifically dedicated  to cgNAT.

It sounds as if the person you spoke to at the ISP doesn't even know about it.

Paul

Link to comment
Share on other sites

pwhodges
Just now, Happy2Play said:

This doesn't look right do you have that many internal networks?

This is the test to confirm cgNAT, in which the ISP uses non-routable networks, and sometimes a 100.64/10 address as in this case which is specifically dedicated to cgNAT usage.

Paul

Link to comment
Share on other sites

sumer
4 minutes ago, Happy2Play said:

This doesn't look right do you have that many internal networks?

image.png.24929f6d5a464b04a652a0e458053085.png

But looks like your server is on the 192.168.100.1 network.

@GrimReaperCan you edit WAN shown above and on Dashboard image.

Because I changed the Internet service and installed the server on a second computer, and this is the correct screenshot

7.png

Link to comment
Share on other sites

sumer
4 minutes ago, pwhodges said:

This is the test to confirm cgNAT, in which the ISP uses non-routable networks, and sometimes a 100.64/10 address as in this case which is specifically dedicated to cgNAT usage.

Paul

Because I changed the Internet service and installed the server on a second computer, and this is the correct screenshot

7.png

Link to comment
Share on other sites

Happy2Play

But as @pwhodgesmentions I don't think your ISP was honest with you.

100.64.0.2 IP Address Location | SG IP network tools (speedguide.net)

Quote
Reserved and special use addresses:
100.64.0.0 ~ 100.127.255.255 (100.64.0.0/10 prefix) carrier-grade NAT communication between service provider and subscribers

 

Link to comment
Share on other sites

pwhodges

That already shows they didn't - 100.64.0.2 is a cgNAT address.

If they don't admit it, or won't change it (which I guess they're under no obligation to do), then it's time to find your own solution using Tailscale or whatever.

Paul

Link to comment
Share on other sites

@sumercan you try TailScale? Many users have had a good experience with it.

Link to comment
Share on other sites

sumer
Posted (edited)

thanks for your help
my ISP opend to me the port

best regards

Edited by sumer
  • Thanks 1
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...