Plusnet UDP block list

[#1]

can someone enlighten me on what UDP ports plusnet block, as am trying to set up a home private VPN using wireguard UDP port 51820, and i have checked everything my side and tested online with a open port checker and it constantly comes back that the port is blocked. 

So i can safely say its you're end that is blocking it! is there are list of know ports that Plusnet block out there at all?

thanks 

tim 

🙂

[#2]

@timsansom Plusnet dont block any ports. That is UNLESS you have the Broadband firewall enabled. However, the firewall functionality has not been available to new customers for quite some time now, and given you only registered recently on the forums I would guess that you dont have the functionality. You can check by logging into the member centre and going to https://www.plus.net/member-centre/broadband/firewall

and i have checked everything my side and tested online with a open port checker and it constantly comes back that the port is blocked. 

I assume you have setup port forwarding on your router and your VPN server is actually running ?

[#3]

yes i have checked everything is set up correctly port forwarding on the router to the IP in question and all that jazz.

the vpn is working i get a valid ip but i get get online lits like something is blocking it i have turned all the firewalls off  but still its blocked tested it on https://portchecker.co that came back as blocked. thats why i asked i been a plus customer for years so i have never had a reason to do this until recently.

oh by the way the link you provided does not work it starts to load then then its just a blank page.

thanks

tim

🙂

[#4]

@timsansom 

I have two wireguard VPN servers hosted on raspberry pi, no issue for me using wireguard. I use my own defined UDP ports.

As the VPN makes an inbound connection you will need to set up a port forward rule.

Typical open port checkers only test TCP so no use for UDP so try this one https://www.ipvoid.com/udp-port-scan/ 

EDIT: If using a Hub two you should see an inbound UDP connection in the event log.

[#5]

i been a plus customer for years so i have never had a reason to do this until recently.

So do you still have the firewall functionality in the member centre ?

 i have turned all the firewalls off

Do you realise that you need to drop and reconnect the pppoe seesion for any firewall change to take effect ?

edit: seems our posts crossed and from what you say you don't have the firewall option

[#6]

@timsansom 

I've had wireguard working through three different routers over the years.

Are you using a router or server/pc based wireguard server?

[#7]

server based i have turned the router version off. 

[#8]

the vpn is working i get a valid ip but i get get online lits like something is blocking it i have turned all the firewalls off

Are you testing connecting off or on your network. VPN testing should really be tested off, I use my smartphone on mobile data.

If the connecting device is getting an IP, then the tunnel has been setup, what are you meaning by something is blocking it.

[#9]

ok on the mobile it seems to work fine! but on my MAC theres an issue with the pings dropping when i ping 10.0.0.2 which is the network i have setup in docker the address that the mac gets is 10.13.13.3 but if i ping say the bbc or cloud-flare DNS it drops like files lol 

Im thinking it might be a double NAT issue with the Open reach modem Huawei EchoLife HG612 V2 ADSL modem as i ethernet from that to my TP-link GE800 router ive checked the settings on the route PC and mac and still i get issues valid ip no throughput cant get webpages and ping externally are dropping but everything in docker is working fine as iphone works  i have lowered the MTU  and everything and still no connection from the mac 

*** very confused.com**

lol

[#10]

TP-Link GE800 is a bit over the top for xDSL connection, but assuming you'll get Full Fibre at sometime you won't need a new router.

The Huawei EchoLife HG612 V2 ADSL modem to TP-link GE800 router will not give you double NAT, you'd need a router to router and be connected to the second router for double NAT

Have you tried to tether your MAC to your smartphone to see if everything is working that way or is that how you are testing now?

What does a traceroute reveal? 

What is your Wireguard hosted on, 10.0.0.2 suggests a virtual machine of some sort.

EDIT: if it is hosted on a virtual server using a NAT interface, then maybe try moving interface to being a 'Bridged Adapter' if that is possible.

[#11]

yeah its virtualization in docker! using Hyper -V rather than WSL  on windows server! that's what the server is i'll give the bridge a go and see if that resolves the issue.. i know the router is over-kill right now, but i am planning to get FTTP and cabling the house up with a 10GB connection everywhere (Future Proofing) i've already got a home-lab set up i just wanted to get this VPN working on both my 2 laptops and the network and my phone.

here is my settings :

[Interface]

PrivateKey ="KEY"=

Address = 10.13.13.3/32

DNS = 10.0.0.2

MTU = 1200

[Peer]

PublicKey = "KEY=

PresharedKey = "KEY"=

AllowedIPs = 0.0.0.0/0, ::/0

Endpoint = timski.ddns.net:51820

Wirguard UP and running on the mac

i hope this helps you all

Thanks for all the pointers 

tim

🙂

[#12]

@timsansom 

My wireguard key looks much the same

[Interface]
PrivateKey = <redacted>
Address = 10.5.5.3/32

[Peer]
PublicKey = <redacted>
PresharedKey = <redacted>
AllowedIPs = 0.0.0.0/0
Endpoint = <static public IP Address>:53264
PersistentKeepalive = 25

VPN connections through double NAT which what you have can be problematic so using a Bridge interface rather than NAT for your virtual system would be advised. It only costs one of your 253 available IP Addresses

I decided to use a couple of raspberry pi for my VPN servers, started off with openVPN but moved to Wireguard. I came across this site which simplifies a VPN installation https://www.pivpn.io/ 

I've use Oracle Virtual Box from my works days, so on a VM guest I have used that link to create a VPN on a debian lite distro, the required disk space can be just 16Gb, used a 'Bridged Adapter'.

I have found with some system (linux) a VPN connection can be set to always connected, not really necessary when connected to you local network.

[#13]

I think i'm on to it now love the Raspberry PI, i'm actually thinking of building a cluster out of them and turning them into a super compuer using Kubernetes mmm... i have already managed to get get Raspberry PI Hole installed on the docker... i think i'm making progress right now  last night I flashed the stock firmware on the ASDL modem from openreach the HG612 so that i could at least get in to the the thing and do what i need to do and guess what there was NAT switched on in there so yeah so I disabled that and any updates from BT so i can always get in if i need to and created a rule from the modem 192.168.1.X to my network 10.x.x.x and it was was better results than i had expected so the NAT on the modem was causing an issue after all... 

Bloody BT !