Why cant i reach my server via WAN/Internet? reddit / selfhosted ---------------------------------------------------------------------- iHaku · 2023-10-27 19:28 Sometimes, when i do networking, i feel like im actually just stupid, and this is adjacent to my rl job so i should know this. hopefully someone here can help me. the setup: 2 Windows PC's. one of them is used as a server for different applications. mostly games, but one of them is supposed to be ran as a fileserver now. a tp-link router. some netbook via wlan essentially, i'm using the open source file browser software to host a simple browsing interface for my servers hard drive. locally i can open it in the browser via [127.0.0.1](https://127.0.0.1):55537 (the port i set the application to listen to). i can also reach the server from my main pc via its private nentwork ip [192.168.0.106:55537](https://192.168.0.106:55537) (which obviously also works localy). additionally, i can reach it via radmin from an outside pc, since its a simulated network. no problems there. additionally, i can reach it when using my routers dynamic IP address. I do not have a domain yet, but i'm planning on purchasing one once i get this working. opening it up this way, sometimes takes a very long time to respond tho, not sure why and if this is important. anyway, I have forwarded the port with TCP and UDP in my router, which is why i can open it up by entering my routers IP. however, i can not reach my server from a device on WAN or the internet via the routers IP or the Servers assigned IP and i have no idea why. firewalls on my router and server are disabled, so that shouldnt be it. Anyone got some pointers for me? ---------------------------------------------------------------------- GolemancerVekk · 2023-10-27 19:55 >i can reach it when using my routers dynamic IP address > i can not reach my server from a device on WAN or the internet via the routers IP or the Servers assigned IP How many IP's does your router have? Also: > I have forwarded the port with TCP and UDP in my router > firewalls on my router and server are disabled These things also kind of contradict each other (the router things that do forwarding and firewall are the same thing). ---------------------------------------------------------------------- amcco1 · 2023-10-27 20:43 Your explanation is very convoluted and doesn't make much sense. If you can access it via its ip:port within your LAN. Then all you should do is port forward it in your router. You forward port 55537 to your servers ip and the same port. However, this may not work depending on you ISP. Some ISPs do not allow port forwarding. I reccomend you use a reverse proxy of some sort. Cloudflared is dead simple, also better than opening ports, more secure. You can add 2fa to it also. ---------------------------------------------------------------------- Ariquitaun · 2023-10-27 21:26 You contradict yourself on paragraphs 5 and 7. First you say it's reachable from the outside then it isn't. ---------------------------------------------------------------------- thekrautboy · 2023-10-27 21:36 Headache incoming... ---------------------------------------------------------------------- stupv · 2023-10-27 23:43 When you say 'routers ip' do you mean 192.168.0.1, it some other number? ---------------------------------------------------------------------- iHaku · 2023-10-28 05:20 \>How many IP's does your router have? my router displays an ip starting with 100.X.X.X, with (dynamic) in parentheses behind it, with which my server is also reachable from within the private network. apparently this is a CGNAT? i haven't really had to deal with this before, but reading up on it it seems to imply that the server wont be reachable, unless my ISP is going to setup port forwarding for me, which they wont do. ---------------------------------------------------------------------- GolemancerVekk · 2023-10-29 08:47 If it's in the range 100.64.0.0 – 100.127.255.255 then yes it's CGNAT. Often an ISP offers some way to bypass CGNAT. It can be a dynamic public IP, it can be a static public IP, it can be a dynamic DNS service (a public domain name they keep synced to a public dynamic IP). But the cost of that service may be too big. If there's no way (or too expensive) for the ISP to allow bypass, you can use Cloudflare tunnels or Tailscale funnels. They're both free but there are pros and cons to each of them. Cloudflare requires you to use a domain and to use their own DNS service in order to use their tunnels, and they don't allow media streaming through them. Tailscale doesn't care what you use them for but you have to use a domain allocated by them. ---------------------------------------------------------------------- iHaku · 2023-10-29 11:02 thanks for the reply, but i've already setup a tailscale network for my group yesterday, and its working as we needed, since its usuable on mobile too.