Hi guys,
I'm trying to set some port forwarding and not having success
Would need to setup a group between 9000 and 10999
I've tried 9000-10999 or 9000 - 10999 (both options just opens the 9000 port)
The only way to make the ports works is typing one by one separated by a comma
Is that the only way to go?
Airport Express 7.7.9 firmware
Thank you
AirPort Time Capsule 802.11ac
Using the AirPort Utility, a contiguous range of ports just need to be separated by a hyphen. In your example, either 9000-10999 or 9000 - 10999 would be correct and what would be entered in any of the public or private TCP/UDP port windows.
Are you getting an error when configuring the Time Capsule for port mapping or when you are testing to see if the port range is open? If the latter, what are you using to test open ports with and how are you doing so. That is, are you testing for open ports while connected to the local network or from a remote location? Does your ISP provide you with a static public IP address for your Internet router? Is that address a public (does NOT start with 10, 172, or 192) or private (does start with those addresses) one?
There are some magic numbers.
Are you writing the port forwards correctly?
See Tesserax instructions.
AirPort - Port Mapping Basics using AirPort Utility v6.xff
Post your actual screenshot of the configuration of the port forwards.. then the man himself can check it.
How are you actually testing.. ??? Most test sites are utterly useless with airport router.. so the only real test is real world testing.
Also try testing in blocks under 10,000 and over 10,000..
Ports already allocated can stop anything working.. so this should be done with a newly rebooted network.. and only one computer doing the connection to the Airport to make the changes.
Why do you need 2000 ports open???
Thanks for replying
I'm setting up a PBX VoIP system
Not getting an error message on the Aiport Utility when I set 9000-10999 or 9000 - 10999
Seems to be working, but the built-in firewall checker is complaining about these doors
The software is called 3CX and here are the screenshots
Yes I do have a static public IP address
As I said earlier, if I set on the airport utility separated by a comma, the checker can see the open doors
It really helps when we get specific info.
If you look closely at the specs of the router.. you will find the requirement is "Full-Cone NAT"
Read this carefully.
https://www.3cx.com/docs/troubleshooting-firewall-checker/
The Airport is using random ports.
It seems the behaviour is different when you are able to set specific ports but using the range the airport is using Symmetric NAT.. although I cannot find anywhere Apple specifically describes their NAT behaviour.
Your easiest solution is replace the Airport with another brand of router which does use Full-Cone NAT.
(Some more recent models actually have selection for full-cone).
I have run into this before with VOIP setups. Lots of routers will fail VOIP due to NAT issues.
You can keep the Airport as bridged device just for wireless.. but it is clearly going to need replacement of a SMB type router .. Airport are domestic equipment.
Airport Extreme Multiple Port forwarding
