Trouble with opening ports

[Burnerdroid]

Hey all - wondering if someone can help.

I have a Arris cable modem / router combo that is set to NAPT mode - Disabled which should make it only act as a modem.

Asus 3100 with 01/22 most up to date merlin firmware

WAN Connection Type	Automatic IP​
Enable WAN	Yes
Enable NAT	Yes
Enable UPnP UPnP FAQ	No

target device with Manually Assigned IP around the DHCP list assigned 192.168.2.179

UPnP disabled

I go into WAN / port forwarding and input my IP of target device, port I want open. Turn it on. Check the port on portchecker and its still closed.

Custom Configuration
Service Name	OPEN PORT TEST
Protocol	TCP
External Port	44158
Internal Port	* Optional
Internal IP Address	192.168.2.179 (the target device)
Source IP	* Optional

Tried updating firmware (was on the previous build, now up to date) rebooting, searched google and youtube for about 3 hours... Any advice? Ive setup port forwarding on other routers without issue.

Any advice would be GREATLY appreciated.

Thanks!

 

[Burnerdroid]

Oh and firewall is turned off on my machine and the router

 

[shama_001]

maybe obvious but is something listening on the target computer on port 44158/TCP? (netstat or ss shows it on the computer?)
The system log>port forwarding on the router shows the port opened to the correct protocol/local IP?

 

[bbunge]

Oh and firewall is turned off on my machine and the router

Not a good idea!

 

[L&LD]

Are you running an RT-AC3100 with RMerlin 386.4_0 firmware?

What was the previous firmware you had running on it? Was the router/network working well then?

If you made a big jump to the latest firmware I refer to in this post, did you do a full reset afterward and then minimally and manually configure the router (without using a saved backup config file)?

 

[Burnerdroid]

maybe obvious but is something listening on the target computer on port 44158/TCP? (netstat or ss shows it on the computer?)
The system log>port forwarding on the router shows the port opened to the correct protocol/local IP?

Correct it is opened to the correct protocol and the target IP of the machine, confirmed IP on machien with ipconfig / how it shows connected in ASUS GUI web - Can see other ports established in the high 49xxx- 65XXX - unsure why the one I have plugged in isnt showing.

Are you running an RT-AC3100 with RMerlin 386.4_0 firmware?

What was the previous firmware you had running on it? Was the router/network working well then?

If you made a big jump to the latest firmware I refer to in this post, did you do a full reset afterward and then minimally and manually configure the router (without using a saved backup config file)?

Correct. Previous was 386.2 i believe it was the previous build/ Everything else working fine. I have never opened a port before on this router (i am saying I have experience opening ports, but in like 2017 different router) firmware update didnt flip a setting if that is what you are asking, couldnt get it to work on older firmware either, thats why I updated. Will maybe try a fresh install.

Not a good idea!

This is for testing purposes only

 

[ColinTaylor]

Is this another "miner" problem?

Check that your ISP is giving you a public IP address and not a CGNAT address.

Port Forwarding not working on RT-AC88U

Please update your RT-AC88U firmware. Based on the screenshot you provided, your firmware version 3.0.0.4.380* is from early 2018 which contains exploits. You can choose either one of the following which were both released today: ASUS RT-AC88U firmware version: 3.0.0.4.386.45987 (Dec 16, 2021)...

www.snbforums.com

 

[Burnerdroid]

Is this another "miner" problem?

Check that your ISP is giving you a public IP address and not a CGNAT address.

Port Forwarding not working on RT-AC88U

Please update your RT-AC88U firmware. Based on the screenshot you provided, your firmware version 3.0.0.4.380* is from early 2018 which contains exploits. You can choose either one of the following which were both released today: ASUS RT-AC88U firmware version: 3.0.0.4.386.45987 (Dec 16, 2021)...

www.snbforums.com

Not CGNAT issue.... should be able o

 

[Burnerdroid]

No CGNAT issues. I tried setting up an azure open VPN with dedicated IP address & routing the config so my machine goes through 44158, internet access, opened ports on azure as well, but still no dice seeing 44158 open... i literally have no idea now.

 

[shama_001]

49xxx- 65XXX means Ms RPC protocol, so a very common thing but not with the WAN
If the portforwarding is not listed in system log>port forwarding then for sure it will not be accessible. Have you tried to change the port for anything >1024 (eg: 5678)
The meaning here is to dodgne any ISP limitation or reserved port

 

[ColinTaylor]

49xxx- 65XXX means Ms RPC protocol,

No it doesn't. Ports 49152 to 65535 is the IANA ephemeral port range. So just about all outgoing connections from clients will be from these ports.

 

[shama_001]

No it doesn't. Ports 49152 to 65535 is the IANA ephemeral port range. So just about all outgoing connections from clients will be from these ports.

And here I need to to say...You're right .

 

[Burnerdroid]

Hmmm trying to understand system log and connections - does this mean I am open on my 192.168.2.23 device? Xed out the destinations but they are all different....

Proto	NAT Address	NAT Port	Destination IP	Port	State

tcp	192.168.2.23	44158	XXXXXX	443	ESTABLISHED
tcp	192.168.2.23	44158	XXXXXX	443	ESTABLISHED
tcp	192.168.2.23	44158	XXXXXX	2154	ESTABLISHED
tcp	192.168.2.23	44158	5XXXX	2154	ESTABLISHED
tcp	192.168.2.23	44158	7XXXXXX4XXXX	44158	ESTABLISHED
tcp	192.168.2.23	44158	XXXXXX201	44158	ESTABLISHED
tcp	192.168.2.23	44158	XXXXXXX6	44158	ESTABLISHED
tcp	192.168.2.23	44158	10XXXXXX	2154	TIME_WAIT

 

[ColinTaylor]

does this mean I am open on my 192.168.2.23 device?

Yes it means there are multiple active connections to your Helium miner.

 

[Burnerdroid]

Yes it means there are multiple active connections to your Helium miner.

I wonder what was causing the headache checking the ports and they were all closed... oh well its working now. Thanks for all the help everyone.