Static IP inbound ports blocked

[#1]

I have a static IP and I've been trying to connect into my network from an external device but I don't seem to have any inbound ports open according to a port scan.

I've tried different routers including the new HUB TWO but I can't connect in, not even on port 80.

Anyone have any ideas?

[#2]

What 'external device', and where is it?

[#3]

Its a Raspberry PI VPN client in Spain. But I can't even server a webpage on Port 80.

[#4]

OK. That information may be useful to others, but unfortunately it is a little outside my skill-set.

[#5]

@puccovelli 

Some older accounts may still have the broadband firewall functionality.

Login to your account and check its status https://www.plus.net/member-centre/broadband/firewall 

It needs to be OFF or LOW to enable incoming connections.

Also you will need port forwards configured on the router

[#6]

@puccovelli 

I assume you are hosting a VPN server, which is?

Most VPN use UDP an open port checker usually only check TCP, so all ports would be closed as not testing for UDP

By default all inbound ports are closed for unsolicited incoming connections, port forward rules are required.

For the Hub two with port forward rules set you would see these messages for an incoming connection in the event log

On the Hub two >Home ->Advanced settings --> Technical log ---> Event log

hh:mm:ss, dd mmm. FWL Port Forward Server(server IP) TCP <port> accepted a new connection from <client IP>
hh:mm:ss, dd mmm. FWL Port Forward Server(server IP) UDP <port> accepted a new connection from <client IP>

Example
16:22:51, 22 Oct. FWL Port Forward Server(192.168.10.252) UDP 53262 accepted a new connection from 148.252.129.11
16:16:40, 22 Oct. FWL Port Forward Server(192.168.10.252) UDP 53262 accepted a new connection from 148.252.129.11

[#7]

My recommendation is to use a router that supports VPNs.

A second hand Draytek (for example) would do this.

Use a router that supports Wireguard.

You can port forward on the Plusnet Hub 2. A search for "port forwarding on Plusnet Hub 2" should give some instructions.

You really want to be sure that whatever you have port forwarded to is secure however.

[#8]

Hi yes it’s a VPN server I’m trying to connect to. I know it uses udon and port scans generally don’t work for UDP but as I said I can’t even serve a simple page from port 80. So thing is blocking before it even gets to my router.

[#9]

Unless the router is set to port forward it will block incoming connections.

You need the VPN server on a static IP address (set on the Hub 2) and port forwarding to that address.

Don't leave something serving a web page on port 80 visible on the Internet for any length of time. You will be hacked and become a source of nuisance to others.

[#10]

It’s set to forward port 80. What I’m saying is no matter which router, what port I’m forwarding it just won’t get there. Seems to be something to do with plusnets network. Its filtering before it gets to my router and yes plusnets firewall is OFF

[#11]

It's not a general thing with Plusnet's network.

I use a Wireguard VPN on Plusnet's network and that works.

I assume you can see your server "inside" the network. If so it sounds like the port forward is failing for some reason.

Can you ping your address from outside the network? (You need to set the Plusnet router to respond to ping I think).

I still recommend a router that supports VPN functuality rather than doing it this wey.

[#12]

@puccovelli 

There has been a recent Hub two firmware update to 0.11.01.11071-PN. This required a https connection to the GUI.

Looking at a port scanner you now need port 443 to connect to a Hub Two.

[#13]

Yea I can see the server inside the network. I can spin up any port inside and connect to it internally. I just can’t connect in from outside. Even RDP 3389 doesn’t let anything through when I forward that port. 3 different routers. It’s not so much about the VPN it’s about port blocking or Static IP profile issues

[#14]

Dan, would this firmware version impact port forwarding from the WAN (rather than GUI access to the router from the LAN)?

[#15]

@puccovelli 

I assume you have checked the broadband firewall setting (post 5) and that isn't set.

If so I'm puzzled.

Certainly Plusnet doesn't block connections at a network level and people do use the port forwarding capability.

I personally have Wireguard working (but not on a Plusnet Hub).

I assume the other routers you have don't have explicit VPN support, as if they did, that would be worth a go.

Any clues in the Plusnet Hub logs? (I think it does logging).