Can't access my website externally and I cannot figure out why.

[norfolk_uk]

I have Apache running on a Raspberry Pi, hosting a website. On my LAN I can access the website no problem. Outside of my LAN it times out. I am happy that Apache is working correctly and that UFW (Uncomplicated Firewall) is letting the right stuff in and out (because I can access the website from the LAN no problem).

I have a static IP from Vodafone and the DNS is correct (if I use the IP:port number I still cannot access the site externally).

My ISP is Vodafone and I am using their router (THG3000). I have set the web server a static IP and I have port forwarded ports 80 and 443.

I should also say that with the same equipment I have successfully hosted a site from home before.

I assume that the traffic is not being port forwarded, despite port forwarding being set up. I have also put the web server in the DMZ to no avail and even turned the router's firewall off completely for a minute to test, also to no avail.

I have spoken to Vodafone who confirmed that they do not block port 80.

At this point I am at a loss to explain it. Does anyone have any ideas please?

[Ripshod]

I kinda confirm that port forwarding does not work. Neither does the static NAT/DMZ, so I'm gladly removing the vf router from my setup.

[norfolk_uk]

Could it be to do with carrier NAT? Am I effectively only opening the ports to Vodafone's LAN? I have a static IP so does that rule that out?

[Ripshod]

Having a static ip should mean no CG-NAT. I'm on a static ip too. The vodafone router doesn't work, my asus does. All I can surmise is the vf router is blocking port forwarding. 

[Jayach]

---

@Ripshod wrote:

Having a static ip should mean no CG-NAT. I'm on a static ip too. The vodafone router doesn't work, my asus does. All I can surmise is the vf router is blocking port forwarding. 

---

Vodafone doesn't use CG-Nat on the home broadband.(dynamic or static)

Port forwarding works for me, and I've no reason to suspect the DMZ wouldn't.

We know different users get different configurations (via TR-069/CWMP) so could it be that?

[norfolk_uk]

---

---

Vodafone doesn't use CG-Nat on the home broadband.(dynamic or static)

Port forwarding works for me, and I've no reason to suspect the DMZ wouldn't.

We know different users get different configurations (via TR-069/CWMP) so could it be that?

---

 Are you using the THG3000?

[Jayach]

As I said in a previous post, yes.

Re: Can't access my website externally and I canno... - Community home (vodafone.co.uk)

[Jayach]

Also my torrent client opens ports via UPnP and that works fine.

[norfolk_uk]

Tomorrow (today, it's after midnight) Vodafone will be contacting me regarding this. They simply cannot be preventing a fundamental way networking is used, to anybody that has Vodafone supplied routers (which I know people have proven isn't the case (Jayach for one), so what is going on here?)

[Jayach]

Good luck expecting Vodafone to contact you. Don't hold your breath.

Sorry, that's just the cynic in me.

[Jayach]

Out of interest, these are the ports opened by my torrent client, 

If the router allows software to open ports, why would they restrict us doing it?