#JesterOfGods Networking

1 messages · Page 1 of 1 (latest)

proud wolf
woeful solar
#

it shouldn't block it

#

yeah i can connect no problem

devout matrix
#

Great. Now lets see some screen shots of your router port forwarding

woeful solar
#

note that adding my external ip on the external host field throws an error of invalid ip

devout matrix
#

Yep don't do that

proud wolf
#

As it should, you want external host to accept connections from everyone, not just you

devout matrix
#

Send me your invite link

#

Run this command and post the results

lofty rampartBOT
#
Carrier Grade Network Address Translation (CGNAT)

CGNAT is a service used by ISPs to decrease the number of IPv4 addresses their networks use. It places an additional router outside the customer's own network and provides them with an internal IPv4 address provided by the company. This often prevents incoming connections on numerous ports.

Confirming the presence of CGNAT

To confirm you are affected by CG NAT, use one of the following commands:

Windows 10: open a powershell window and use the following command
tracert (curl https://ifconfig.me/ip -UseBasicParsing); tracert 8.8.8.8

Mac/Linux: open a terminal and use the following command
traceroute $(curl ifconfig.io); traceroute 8.8.8.8

After the command has completed, please post a screenshot here with the results so a troubleshooter can interpret them.

woeful solar
#

w8... my default dns is 1.1.1.1

proud wolf
#

That should be fine

devout matrix
#

Should take a minute to run. There will be more

woeful solar
#

ok

devout matrix
#

you can use ``` to paste it as a big block

woeful solar
#

got some time outs

devout matrix
#

That's normal. Just wait it out

#

It finish?

proud wolf
#

Ok, so your issue is that your ISP has you behind something called CG-NAT, that's those 10. IPs in the trace; it's basically extra layers of routers that you don't have access to for configuring port forwarding. What that means is that the next step for you is to call your ISP and ask them nicely to not put you behind CG-NAT and instead give you your own IP. Some ISPs just do it when asked, others want to charge money, and others refuse.

If they won't cooperate, your options are either to use VPN-like software (such as Hamachi, ZeroTier, ngrok, etc) to punch a connection through the CG-NAT or to use some form of external hosting.

External hosting can be a Foundry hosting partner (just show up with your license and credit card and they take care of the rest) or self-hosting on a VPS (like AWS or Oracle, which both have free options; but hosting that way does require following some linux command line tutorials) or having a friend with a friendlier ISP host Foundry for you.

woeful solar
#

hmmm... interesting.

#

thank you very much

#

just one more question.

proud wolf
#

Yeah, it's an unfortunate thing, but ISPs use CG-NAT to cut costs and buy fewer IPs (it doesn't impact most people, just people who want to host servers for stuff)

woeful solar
#

that ch-nat wouldnt let me host my own server of a website as well right?

proud wolf
#

It's basically any server at all (Foundry is, at its heart, just a website server too). NAT like that essentially prevents incoming connections (which are what a server responds to when people connect)

#

Port forwarding can bypass NAT and let people connect to your server, but CG-NAT is NAT that the ISP is doing, so you don't have access to do port forwarding yourself