Port forward done right through two routers and the ports are.....semi open?

Nick212

Prominent
Jun 10, 2017
18
0
510
Yeah so i've been f'ing around with these two routers for the last two hours and they don't seem to be working as they did.
If i check the ports with PFPortChecker it says that all my ports are open in the right configuration, but websites like canyouseeme.org all say not even one of the ports is open.
What the actual firetruck.

LElp6gU.png


JIx8CrB.png


V2nnSxh.png


All the IPs are correct and everything. The first router's pointing to the second one which is pointing to my computer. I've had that working in the past flawlessly and now for some reason it doesn't want to work. The firewall on my computer is off and with it on, both the game and nVidia GeForce Experience are allowed.

Yeah i'm trying to do the Moonlight Game Stream thing to be able to play coop in Enter The Gungeon with a friend. Followed a Reddit thread for the ports.
Any help is very welcome.
 
You are double NATing any reason why? (this could be the issue) It looks like you have 192.168.100.0/24 and 192.168.0.0/24.

Is your internet connection Cable/FiOS or something like 4G LTE?, If its LTE you are also being NATed behind the carrier's router and opening ports inbound won't work. (asking if its LTE because Huawei is big in cell networks)

Edit looks like that router is for fiber optics
 

Nick212

Prominent
Jun 10, 2017
18
0
510
The connections between the routers and my PC are via cable on a Gigabit network.
Also, could you please explain what double NATing is?
All i can say is that i've done this type of forwarding between these two routers to play Moonbase Alpha with some friends a few months ago and it worked perfectly...

edit: Yeah, the first one is.
 
So double natting, You an an external IP lets say its is 84.255.243.9 (making one up). Your router/modem gets that for an external IP address which in your case is the Huawei unit. That router also has an internal address of 192.168.100.1 and will assign DHCP addresses between 192.168.100.2-192.168.100.254.

Your second router is getting 192.168.100.2 as its external IP, and has 192.168.0.1 as it's internal IP, it will then give out DHCP addresses between 192.168.0.1-192.168.0.254.

Networks and firewall rules can often get confusing when you are double NATing (network address translation). A better option would to have your second router act as a switch/wireless access point, where instead of plugging in the network to the "internet" ethernet port, you would plug it into a normal LAN port, and let it lease an address from the Huawei unit. Doing this would negate the need for any firewall rules on that device as it would basically be acting as a switch (and if it has wireless it will still broadcast the WiFi network)

In this scenario everything on your network would have addresses in the 192.168.100.1-192.168.100.254 address block (Single NAT) and creating firewall rules would be much easier.

Also check to see if the Windows Firewall or any other programs (like anti virus) you are using are blocking inbound network traffic.
 

Nick212

Prominent
Jun 10, 2017
18
0
510
Making the second router just a wireless switch isn't an option as the way the routers are positioned in my house is the following:
The first router which is basically acting as both a modem and a wireless router gets the internet signal, produces wifi, connects to a computer nearby via cable and then, through a 20 meter cable, connects to the 2nd router in my room in the ethernet port, so then I am able to connect a short cable from one of the router's lan ports into the back of my PC.
As i said in the original post, i've done it in this exact same configuration with the same idea: the first router pointing to the second, pointing to my pc and it worked just fine. i just don't understand why it won't work now.
There isn't any firewall issue, nor on my pc, nor on any of the routers...
And i still can't understand how that PFPortChecker sees the ports as open and the websites as closed...
 

Nick212

Prominent
Jun 10, 2017
18
0
510
Okay, i legit do not know what is happening.
If i press check on PFPortChecker with TCP ticket and then quickly press check on canyouseeme.org IT SAYS SUCCESS, but after the check on PFPortChecker ends or i close the program, it says the port is closed, on canyouseeme.org .
 
First and foremost to port forward through double NAT you need to do as follows:
Router 1 forwards traffic on that port to WAN IP of Router 2.
Router 2 then forwards same port to IP of computer the service is running on
For reliability all of these IP addresses should be static.

Secondly some port checkers simply see if they dont get a fail from the router, others REQUIRE that the service is running and an active session created in order to call the port open.

Thirdly you should be making your second router as an access point, this will eliminate the double NAT issue all together.
An access point will allow you to use the wireless and the wired ports of the second router as an "extension" to the 1st router while keeping ALL of the devices on the same local LAN network.
Probably a more model specific writeup for your second router but in general to make a router an Access Point (if it does not have a built in mode radio button) is setting a static IP address in the same subnet as router 1 (so if router 1 is 192.168.0.1 then set router 2 to 192.168.0.2) and set gateway to the same IP address of router 1. FYI router 1 needs to have DHCP pool NOT start at .2, set this to at least .10 if not .100. Now that you have IP address set you can disable DHCP on router 2 and then connect it back to router 1 via ethernet except now put the cable in a LAN port instead of the WAN port.


Also, why does your connection from router 1 to router 2 have to first pass through a computer?
 

Nick212

Prominent
Jun 10, 2017
18
0
510


This is how it is.
Also, why does your connection from router 1 to router 2 have to first pass through a computer?

It doesn't. In all seriousness I just drew how everything's set up with the help of my very professional drawing skills:
EzUpFdz.png
 

Nick212

Prominent
Jun 10, 2017
18
0
510
I think i found what's the problem...
I quickly downloaded a blank Minecraft server executable and ran it on port 8856. When it's closed, the port is closed and when it's open, the port's also open.
How can I listen to all these ports so my friend can connect to my nVidia GameStream?...
 


That is how most port checkers work, if you are not running the software it will say it is closed.

What do you mean by you want to "listen" to all of the ports?

OH as a side note you should call your ISP and get your IP address changed. You should never post your WAN IP on a public forum like you did in your first pic.
 

Nick212

Prominent
Jun 10, 2017
18
0
510
What do you mean by you want to "listen" to all of the ports?

Well when my friend tries to connect to my nVidia GameStream it tells him that it can't connect, the same as it would say if the ports were closed...

OH as a side note you should call your ISP and get your IP address changed. You should never post your WAN IP on a public forum like you did in your first pic.

Ah really? Didn't know that. Meh, I believe a restart of both routers will do the job. (I have a public dynamic IP so i think it will change the WAN one too)
 
Rebooting router 1 wont just change your IP. IF it is dynamic it will change on its own a couple weeks, but you may want to just call up ISP and ask them to change it.

If it is dynamic you will either need to check public IP before having yoru friends join server, or use a DynamicDNS service that gives you a URL instead of IP address, and then your router or computer will use software to keep your Public IP address in sync with their servers.