Skip to content
P

New Contributor

 • 

9 Messages

Tue, Jun 29, 2021 7:20 PM

port forwarding on newer routers does not work

Still running a 5-year-old Comcast business router.   It has full support for NAT, including the ability to map the incoming port to an outgoing port for example:

<WAN IP>:22  to  <LAN IP>:2222 such as:

100.100.100.100:22  to  10.0.0.5:2222  

This port remapping is critical (NOT just IP alone) because ports like port 22 (SSH)  are *privileged* ports.  A server process cannot run on port 22 except as root, which is a security risk.   On top of that  on a locked-down system, privileged ports are not even accessible (except by root).

Problem is, all the newer "better: Comcast routers  fail to offer an option to map the incoming port to a *different* outgoing port. In effect, the only (brain dead) option is:

<WAN IP>:22 =>  <LAN IP>:22  <== cannot map to different port.

I'm flummoxed.  Without this capability, I cannot upgrade my aging Comcast router, or my servers will be inaccessible.

This post was escalated on July 2, 2021 by photo145

Responses

New Contributor

 • 

9 Messages

1 m ago

Similarly, the reverse problem problem occurs without the ability to map incoming  to outgoing port.  Same issue, in reverse.

For example, using an obscure incoming port to some internal standard port, like this:

New Contributor

 • 

9 Messages

1 m ago

Finally, with only one external WAN IP,  it may be desirable to be able to map more than one instance of the *same service* to more than one internal server eg:

<WAN IP>:22  to        10.0.0.15:2000

<WAN IP>:22001  to  10.0.0.25:2000

<WAN IP>:22002  to  10.0.0.35:2000

<WAN IP>:22003  to  10.0.0.45:2003

<WAN IP>:22004  to  10.0.0.45:2004

<WAN IP>:22005  to  10.0.0.45:2005

New Contributor

 • 

9 Messages

1 m ago

Comcast technician came by today.  We tried two of the mid-line modems, one was totally flaky, the other less-so.  NEITHER can do port forwarding of any kind—error messages with the most rudimentary configuration.

Then we installed the high-end modem.  It actually 'took' on the configuration and worked properly. Then less than one hour later, it crapped out: port forwarding stopped working, and any attempt to edit or redo configuration was met with error message after error message.

This is NOT an "internal network issue" (the Comcast stock line).   It is BROKEN MODEM FIRMARE.

New Contributor

 • 

9 Messages

1 m ago

With 1 of 3 routers (the high-end gigabit one), we finally go configuration to work and port mapping to function.  That lasted less than one hour before it crapped out and would never work again.  This is what it looked like when it worked for that brief time.

New Contributor

 • 

9 Messages

1 m ago

Once it crapped out, everything was hopeless. Rebooting the router did no good.   

Deleting port mapping entries works, but adding them back in results in errors every time:

- edit always fails with an error

- adding fails with an error

- changes fail with an error.

Example:

New Contributor

 • 

9 Messages

1 m ago

The only modem that works properly is the Comcast Netgear one, which Comcast has *discontinued*, and is actively eliminating at customer sites (according to a Comcast technician).

I have 3 years of trying and retrying Comcast modems. All fail to work properly for port forwarding, usually starting with outright failures for the most basic configuration.  

The result is that the Comcast Technicolor modems are USELESS for port forwarding, making a secure server setup impossible.  

It has NOTHING to do with network configuration at the user end and EVERYTHING to do with modem firmware that does not work for port forwarding.

No one at Comcast has ever taken responsibility and even offered to look into the bugs, let alone fix them.

New Contributor

 • 

3 Messages

20 d ago

Our router received an upgrade last night and now the port forwarding is broken (after working for years) and I get the same "failed to edit" when trying to add some new test ports.

New Contributor

 • 

9 Messages

20 d ago

Yikes!  Which router is it?  This is the Netgear model I am using  I am using the Netgear CG3000DCR.

New Contributor

 • 

5 Messages

15 d ago

I think we too received an update on July 9 which broke port forwarding. On the advice of a Comcast tech, we changed the DHCP range to include the IP addresses of the servers we were mapping (even though they are static IPs) and that works. But, IMHO it's still broken/wrong. I should not have to do this.

I'm responding to 

https://forums.businesshelp.comcast.com/conversations/equipment-modemsgateways/port-forwarding-on-newer-routers-does-not-work/60db72853aae1c503595e710?commentId=60e8ee5688715379966d879b#:~:text=5%20days%20ago-,Permalink,-Our%20router%20received

(edited)

New Contributor

 • 

3 Messages

15 d ago

@fred_ross_perry I figured out the DHCP fix on monday night and reported it yesterday morning.  It's great if they shared that with the techs and made it available to you.  (At least I think they shared my stuff with you, If they already knew the fix and didn't share it with me, that would be worse.)  But I fully agree that normally you port forward to internal LAN addresses that are fixed and outside the DHCP range and that that change to the software was either a bug or a very bad design decision.  I have not yet heard back on whether they will undo this change.

It was very difficult to convince Comcast that this was not my fault, and they basically refused to stand behind the port forwarding feature at all, "If it works it works, if not, then too bad, we made a business decision not to support this" is what I was told.

I'm glad you were able to get going!!

New Contributor

 • 

3 Messages

14 d ago

@photo145 I am using the Cisco DPC3941B.  But it looks like Comcast uses similar software on some of the different models, which would make sense for them in terms of making support easier.

New Contributor

 • 

5 Messages

14 d ago

@jdunham I am pretty sure we have the same one (Cisco DPC3941B).