Time Capsule is blocking access to ip address

In addition to the questions from Tesserax, it would be helpful to know what type of modem that you might be using.

The DHCP and NAT router mode choice would normally be the correct setting to use if you have a simple modem.....like the example below.....that will almost always have only one Ethernet port.

But......if the device that you call your "modem" is really a modem/router or gateway.....like the example below with multiple Ethernet ports......the DHCP and NAT setting would not be the correct router mode for the Time Capsule.....which should be using the "Off (Bridge Mode)" setting for router mode.

Let me start with a few questions, if you don't mind:

1. Which exact model is your Time Capsule (TC)?
2. Which version of firmware is it running?
3. What is the make & model of the Internet modem or gateway that you have the TC directly connected to by Ethernet?
4. Does your ISP provide you with a static public WAN-side IP address?

FYI ... with the TC configured for "DHCP and NAT" Router Mode, it uses a simple NAT "firewall." That is, all unsolicited network traffic inbound from the Internet will be blocked. As you know, the AirPort base stations do not employ any type of SPI or IPS/IDS features as it is a simple consumer-grade router.

Tracert -

On my hotspot (which works) 19 hops and I see the server name.

On my TC - takes 18 hops and starts with the *** replies.

Ah, and this may be telling us something. The first hop should be to from your Mac to your TC and appear as a local IP address (starting with 10, 172, or 192), and then, onto your ISP's router which would be the first public IP address, eventually making its way to your remote web server.

The "***" indicate an issue with that hop. If they are happening at the beginning, would be a good indication of an issue with your local network ... as you are already aware of. Again, I suspect that this is the Apple/Motorola issue I have mentioned. Try doing the traceroute again with just your Mac connected to the modem. Does the "***" hops disappear now?

The following may be helpful in understanding these traceroutes:

• How to read a traceroute - inmotion hosting
• A Practical Guide to (Correctly) Troubleshooting with Traceroute - nLayer Communications, Inc.

Thanks for the info.

What is the make & model of the Internet modem or gateway that you have the TC directly connected to by Ethernet? - - - Motorola Surfboard SB6141. Why would it matter? It works without the TC in the config.

Potentially, yes. The Motorola SB61NN-series have been known to be somewhat problematic with the Apple base stations. Neither are necessarily bad in themselves, but they just don't "play nice" with each other. Typical symptoms are inconsistent Internet connectivity and loss of Internet connectivity all together ... so this may be a factor here.

I am assuming that you are running a web server on your home/local network that you need to access from a remote location for administration purposes ... correct ... or is it the other way around that you are trying to access your website at a remote host from your local network? If it is the latter, then no port on the Extreme would be blocked so accessing this web server should not be prevented by the TC ... unless the TC is faulty or the TC/Motorola modem combo is causing connectivity issues. However, I wouldn't suspect that for just a single remote IP address.

What happens if you run a traceroute to the web server?

You're very welcome! I'm glad you got it working ... hopefully, it will continue to do so. If not, you at least have an idea on what you can try (replacing either the modem or base station) as the "next step."