topic Re: Static IP inbound ports blocked in Broadband

Static IP inbound ports blocked

puccovelli — Wed, 24 Jun 2026 20:24:31 GMT

I have a static IP and I've been trying to connect into my network from an external device but I don't seem to have any inbound ports open according to a port scan.

I've tried different routers including the new HUB TWO but I can't connect in, not even on port 80.

Anyone have any ideas?

Re: Static IP inbound ports blocked

jab1 — Wed, 24 Jun 2026 20:28:39 GMT

What 'external device', and where is it?

Re: Static IP inbound ports blocked

puccovelli — Wed, 24 Jun 2026 20:30:22 GMT

Its a Raspberry PI VPN client in Spain. But I can't even server a webpage on Port 80.

Re: Static IP inbound ports blocked

jab1 — Wed, 24 Jun 2026 20:33:50 GMT

OK. That information may be useful to others, but unfortunately it is a little outside my skill-set.

Re: Static IP inbound ports blocked

MisterW — Thu, 25 Jun 2026 05:53:23 GMT

@puccovelli

Some older accounts may still have the broadband firewall functionality.

It needs to be OFF or LOW to enable incoming connections.

Also you will need port forwards configured on the router

Re: Static IP inbound ports blocked

Dan_the_Van — Thu, 25 Jun 2026 06:55:22 GMT

@puccovelli

I assume you are hosting a VPN server, which is?

Most VPN use UDP an open port checker usually only check TCP, so all ports would be closed as not testing for UDP

By default all inbound ports are closed for unsolicited incoming connections, port forward rules are required.

For the Hub two with port forward rules set you would see these messages for an incoming connection in the event log

On the Hub two >Home ->Advanced settings --> Technical log ---> Event log

hh:mm:ss, dd mmm. FWL Port Forward Server(server IP) TCP <port> accepted a new connection from <client IP>
hh:mm:ss, dd mmm. FWL Port Forward Server(server IP) UDP <port> accepted a new connection from <client IP>

Example
16:22:51, 22 Oct. FWL Port Forward Server(192.168.10.252) UDP 53262 accepted a new connection from 148.252.129.11
16:16:40, 22 Oct. FWL Port Forward Server(192.168.10.252) UDP 53262 accepted a new connection from 148.252.129.11

Re: Static IP inbound ports blocked

markhawkin — Thu, 25 Jun 2026 06:55:47 GMT

My recommendation is to use a router that supports VPNs.

A second hand Draytek (for example) would do this.

Use a router that supports Wireguard.

You can port forward on the Plusnet Hub 2. A search for "port forwarding on Plusnet Hub 2" should give some instructions.

You really want to be sure that whatever you have port forwarded to is secure however.

Re: Static IP inbound ports blocked

puccovelli — Thu, 25 Jun 2026 07:02:08 GMT

Hi yes it’s a VPN server I’m trying to connect to. I know it uses udon and port scans generally don’t work for UDP but as I said I can’t even serve a simple page from port 80. So thing is blocking before it even gets to my router.

Re: Static IP inbound ports blocked

markhawkin — Thu, 25 Jun 2026 07:06:18 GMT

Unless the router is set to port forward it will block incoming connections.

You need the VPN server on a static IP address (set on the Hub 2) and port forwarding to that address.

Don't leave something serving a web page on port 80 visible on the Internet for any length of time. You will be hacked and become a source of nuisance to others.

Re: Static IP inbound ports blocked

puccovelli — Thu, 25 Jun 2026 07:10:37 GMT

It’s set to forward port 80. What I’m saying is no matter which router, what port I’m forwarding it just won’t get there. Seems to be something to do with plusnets network. Its filtering before it gets to my router and yes plusnets firewall is OFF

Re: Static IP inbound ports blocked

markhawkin — Thu, 25 Jun 2026 07:19:41 GMT

It's not a general thing with Plusnet's network.

I use a Wireguard VPN on Plusnet's network and that works.

I assume you can see your server "inside" the network. If so it sounds like the port forward is failing for some reason.

Can you ping your address from outside the network? (You need to set the Plusnet router to respond to ping I think).

I still recommend a router that supports VPN functuality rather than doing it this wey.

Re: Static IP inbound ports blocked

Dan_the_Van — Thu, 25 Jun 2026 07:29:19 GMT

@puccovelli

There has been a recent Hub two firmware update to 0.11.01.11071-PN. This required a https connection to the GUI.

Looking at a port scanner you now need port 443 to connect to a Hub Two.

Re: Static IP inbound ports blocked

puccovelli — Thu, 25 Jun 2026 07:36:09 GMT

Yea I can see the server inside the network. I can spin up any port inside and connect to it internally. I just can’t connect in from outside. Even RDP 3389 doesn’t let anything through when I forward that port. 3 different routers. It’s not so much about the VPN it’s about port blocking or Static IP profile issues

Re: Static IP inbound ports blocked

markhawkin — Thu, 25 Jun 2026 07:40:13 GMT

Dan, would this firmware version impact port forwarding from the WAN (rather than GUI access to the router from the LAN)?

Re: Static IP inbound ports blocked

markhawkin — Thu, 25 Jun 2026 07:49:39 GMT

@puccovelli

I assume you have checked the broadband firewall setting (post 5) and that isn't set.

If so I'm puzzled.

Certainly Plusnet doesn't block connections at a network level and people do use the port forwarding capability.

I personally have Wireguard working (but not on a Plusnet Hub).

I assume the other routers you have don't have explicit VPN support, as if they did, that would be worth a go.

Any clues in the Plusnet Hub logs? (I think it does logging).

Re: Static IP inbound ports blocked

puccovelli — Thu, 25 Jun 2026 07:53:02 GMT

Yes like I said Plusnet firewall is OFF. Believe me you’re not the only one that’s puzzled. I’ve tried everything.

I need the static IP working properly or there is no point having it. I’m gonna do some final checks this morning but if it’s not working by my the time I have my cancellation chat this afternoon I see no option but to have to use a different ISP.

Re: Static IP inbound ports blocked

Dan_the_Van — Thu, 25 Jun 2026 07:59:50 GMT

@puccovelli

Do you see the port forward messages when you are testing?

Can you share the >Home ->Advanced settings --> Technical log ---> Event log ?

@markhawkin

I'm not using my Hub two anymore, so can not answer the question you asked.

Re: Static IP inbound ports blocked

puccovelli — Thu, 25 Jun 2026 08:03:34 GMT

No I see nothing on the logs no matter which router I use.

Re: Static IP inbound ports blocked

markhawkin — Thu, 25 Jun 2026 09:23:45 GMT

Does a ThinkBroadband monitor "see" the router?

I think you may need to set the Hub 2 to respond to WAN pings.

Also I assume you must be an "old" customer as static IP addresses are not available to recent sign ups.

Is this a recent setup or have you had VPN connections working in the past?