cannot open the server from outside

[sumer 1]

I hope you can help me with the problem of not being able to open Embay from outside the home. I have done all the necessary steps and opened a port from inside the router, but the problem is still not solved and I cannot open the server from outside.

I want to subscribe to the premium subscription, but before that I would like to fix this problem

 

[pwhodges 2012]

Have you verified that your ISP doesn't use cgNAT?

Quote

 

You could also be blocked by your ISP in something known as a cgNAT (carrier grade Network Address Translation). One way of spotting this is to open a command prompt and doing a trace route to 8.8.8.8.

On windows it would be: tracert 8.8.8.8

Ignore the first line which will be your own router. What you want to see is if any of the next 3 or 4 lines start with 10., 100., 192., or 172. If the first number is 100 check if the next is between 64 and 127; if 172 check if the next is between 16 to 31; if 192 check for a following 168. If any of these returned lines match one of these patterns you are likely being blocked by your ISP using cgNAT.

 

  This procedure is a corrected version of the one given in: https://github.com/EmbySupport/Emby.Docs/blob/master/Remote-Setup.md

Paul

[sumer 1]

thanks for your replay
i have this

[pwhodges 2012]

OK.  With cgNAT your options are:

(1) Ask your ISP take take you off it and give you a real IP address; they may say no, they may charge, or they may just do it - can't tell till you try.

(2) Use Tailscale to link your server and client machines into a single virtual network.  This requires an install on each device, but people report it being easy to set up, and the free option should be enough.  I believe ZeroTier is similar, but it doesn't get mentioned as much.

(3) Find a VPN service that will enable you to have a known IP address and port forwarding; only some do this, and it won't be free - but it saves having to install something on every device.

Paul

 

[Luke 42080]

@sumerplease let us know if this helps. Thanks.

[sumer 1]

thanks for helping but the problem still, and i called my isp and he told me my ip is public
only i want to publish my website to Those close to me and friends outside the home, even if it costs me an increase in money or purchasing other features

Best Regards

[Luke 42080]

6 minutes ago, sumer said:

thanks for helping but the problem still, and i called my isp and he told me my ip is public
only i want to publish my website to Those close to me and friends outside the home, even if it costs me an increase in money or purchasing other features

Best Regards

OK, did you check out our remote setup guide?

Remote Setup

[sumer 1]

yes i check it all

[Luke 42080]

2 minutes ago, sumer said:

yes i check it all

What exactly did you do based on that guide? Can you please show us?

[sumer 1]

1 hour ago, Luke said:

What exactly did you do based on that guide? Can you please show us?

 

Edited March 12, 2024 by GrimReaper
WAN IP masked

[ebr 16185]

Hi.  It looks like you need to fill in the proper external IP address.

[sumer 1]

49 minutes ago, ebr said:

Hi.  It looks like you need to fill in the proper external IP address.

the problem with the port not open

 

Edited March 12, 2024 by GrimReaper
WAN IP masked

[Happy2Play 9781]

This doesn't look right do you have that many internal networks?

But looks like your server is on the 192.168.100.1 network.

@GrimReaperCan you edit WAN shown above and on Dashboard image.

[pwhodges 2012]

1 hour ago, sumer said:

thanks for helping but the problem still, and i called my isp and he told me my ip is public

The tracert shows unequivocally that you are behind cgNAT, having not only the 10. and 192.168. addresses in the ranges dedicated to local non-routable use, but also a 100.64. address - which is in the range specifically dedicated  to cgNAT.

It sounds as if the person you spoke to at the ISP doesn't even know about it.

Paul

[pwhodges 2012]

Just now, Happy2Play said:

This doesn't look right do you have that many internal networks?

This is the test to confirm cgNAT, in which the ISP uses non-routable networks, and sometimes a 100.64/10 address as in this case which is specifically dedicated to cgNAT usage.

Paul

[sumer 1]

4 minutes ago, Happy2Play said:

This doesn't look right do you have that many internal networks?

But looks like your server is on the 192.168.100.1 network.

@GrimReaperCan you edit WAN shown above and on Dashboard image.

Because I changed the Internet service and installed the server on a second computer, and this is the correct screenshot

[sumer 1]

4 minutes ago, pwhodges said:

This is the test to confirm cgNAT, in which the ISP uses non-routable networks, and sometimes a 100.64/10 address as in this case which is specifically dedicated to cgNAT usage.

Paul

Because I changed the Internet service and installed the server on a second computer, and this is the correct screenshot

[Happy2Play 9781]

But as @pwhodgesmentions I don't think your ISP was honest with you.

100.64.0.2 IP Address Location | SG IP network tools (speedguide.net)

Quote

Reserved and special use addresses:
100.64.0.0 ~ 100.127.255.255 (100.64.0.0/10 prefix) carrier-grade NAT communication between service provider and subscribers

 

[sumer 1]

3 minutes ago, Happy2Play said:

But as @pwhodgesmentions I don't think your ISP was honest with you.

100.64.0.2 IP Address Location | SG IP network tools (speedguide.net)

 

In this case, tomorrow morning I will go to the company to confirm this
But how do I know that they gave me a public IP address?

[pwhodges 2012]

That already shows they didn't - 100.64.0.2 is a cgNAT address.

If they don't admit it, or won't change it (which I guess they're under no obligation to do), then it's time to find your own solution using Tailscale or whatever.

Paul

[Luke 42080]

@sumercan you try TailScale? Many users have had a good experience with it.

[sumer 1]

thanks for your help
my ISP opend to me the port

best regards

Edited March 19, 2024 by sumer