Never succeed hosting anything with AT&T fiber and asuswrt merlin pls help reddit / selfhosted ---------------------------------------------------------------------- Elegant_Collection_7 · 2023-10-16 15:24 Been trying for years and never succeed hosting anything to external IPs. Right now I'm trying to setup a Vaultwarden server on Synology NAS. I have DDNS setup and port forward with reverse proxy setup correctly. However only LAN connection works. I have AT&T provided BGW320 fiber modem/wifi AP passthrough to Asus RT-AX86U on latest merlin. Not sure if this is a forwarding issue or firewall or modem to Asus AP passthrough. I have no issue with day to day web browsing and gaming. Services I have working is Openvpn with asus provided ddns on router. Synology quickconnect features also works. Firewall and AIprotect on Asus router are set to OFF as diagnosing the issue. Anything else I tried hosting with raspberry pi all failed for possible same reason. It looks like I am missing something there if someone could help pointing it out will be really appreciated. ---------------------------------------------------------------------- thekrautboy · 2023-10-16 15:29 Have you checked if youre behind a provider NAT? CGNAT? Does your public IPv4 belong only to you or is it shared with many other customers? ---------------------------------------------------------------------- Elegant_Collection_7 · 2023-10-16 16:38 Upon checking I don't believe I am under CGNAT as my IP shows up the same in my router and findmyip.com. As for exta NAT layer I am not sure how to check. AT&T Fiber did mention about not allowing web hosting when signup but not sure how they implement the policy. My IP is not in 100.127 range so I assumed I am fine? ---------------------------------------------------------------------- thekrautboy · 2023-10-16 16:41 > not allowing web hosting when signup but not sure how they implement the policy By blocking ports for example as the easiest way. You could simply contact them and ask if they are actively blocking any ports or if they are using any other measures to prohibit you from hosting. ---------------------------------------------------------------------- MeudA67 · 2023-10-16 20:18 >AT&T Fiber did mention about not allowing web hosting Shouldn't be a problem. I have the same modem/router combo from AT&T (GB fiber), and have no issue selfhosting my services. I configured the BGW320 to passthrough to an Opnsense box, which forwards 443 traffic to my nginx (swag) container, which reverse proxies to a variety of services. And I am still using Google Domains...need to figure out what to use moving forward. ---------------------------------------------------------------------- JzJad12 · 2023-10-16 23:03 Same setup here with pfsense, the only thing atnt blocks on residential (even if you pay them for statics...) is email sadly but understandable to some degree. Move to cloudflare for domains? ---------------------------------------------------------------------- justahobby20 · 2023-10-17 01:26 If I remember correctly, you want cascading and not passthrough. Also, with a little work you can throw the AT&T router in a closet. The only hiccup is when you have to call to report an outage and pretend like you're rebooting their router. https://github.com/MonkWho/pfatt ---------------------------------------------------------------------- EasyRhino75 · 2023-10-17 04:23 Cascade is for if you have a special service provision from AT&t. Possibly static IPs, possibly something else. IP pass through is what you use for a typical consumer connection where you just want to forward all of the ports directly to your desired router. And I use that and it works fine I think I remember having to reboot both the AT&t box in my router a couple of times to make the IP pass through really stick. Also, I possibly had to manually assign the Mac address rather than use some sort of auto detections scheme I would check the logs on the ASUS router to see if any traffic is coming to it. ---------------------------------------------------------------------- Elegant_Collection_7 · 2023-10-17 05:55 Surprisingly I have it up and running after rebooting the AT&T BGW320 gateway. Turned out all my setting was done correctly. All I have changed was to clear existing DHCP clients and disable onboard WiFi. Didn't think those matters and didn't understand why a gateway reboot is needed but it works now. Thank you all for the input I can finally live a happier life now. ---------------------------------------------------------------------- Elegant_Collection_7 · 2023-10-17 06:37 Good info I'm keep that in mind when I setup pfSense so far I only need it up and running so I can proceed with next setup. As soon as performance bottlenecks I'll come back and study this. Half of it was still new to me.