Airtel finally rolled out CGNAT in Nagpur.

[albonycal]

And I found out why VOIP wasn't working. I was using the 10.0.0.1/8 network for my LAN. The same is used by airtel for VOIP so there was conflict

 

[albonycal]

.

 

[Zexen]

Getting bad ping in MW2 compared to previous ISP SITI. Getting 80-90ms with SITI it was 60-70ms. Port Forwarding worked so at least getting OPEN NAT. When I do speed test on fast.com it says my location is PUNE. Just checked now client is Yavatmal. SITI use to say Nagpur.

 

[albonycal]

Yea the geoip location is like that. You can't do anything about it. Try complaining about high latency to airtel.

 

[albonycal]

So I tried using ip6tables -A INPUT -p tcp --dport 80 -j ACCEPT on the ONT while keeping the firewall settings at low. And the requests to port 80 are still dropped (IPv6) ?
@bbforumstalker

 

[bbforumstalker]

@albonycal what is the output of brctl show ?

Also you are appending to the bottom, there may be rule blocking it above your rule.

Use -I instead:

ip6tables -I INPUT -p tcp --dport 80 -j ACCEPT

 

[albonycal]

[root@AONT: /]# brctl show
bridge name    bridge id        STP enabled    interfaces
br0        8000.4033063cb55e    no        ecd0
                            eth0.0
                            eth1.0
                            eth2.0
                            eth3.0
                            ra0.v0
                            ra1.v0
                            ra2.v0
                            ra3.v0
                            ra4.v0
                            rai0.v0
                            rai1.v0
                            rai2.v0
                            rai3.v0
                            rai4.v0
br_sfu        8000.4033063cb55e    no        wan0

And using -I is not working too...

 

[bbforumstalker]

I should have asked this earlier, but where is your source IP and destination IP ? Are they both in your LAN?
It seems you don't have bridge mode configured
Or are you trying to connect to port 80 of a device in your LAN from the internet?

 

[albonycal]

trying to connect to port 80 of a device in your LAN from the internet

Yes
basically I have this ipv6-mirror.albony.xyz

 

[bbforumstalker]

In that case, can you check via tcpdump on the Nokia if there is anything in your firewall config blocking traffic when you try to curl on port 80 ?

tcpdump -nnvvee -i any port 80

If you see requests coming in with dest port 80 ( <ipv6 addr>.80 )but not going to the LAN device, then its likely due to the default DROP policy in the FORWARD chain.

If so, you can test again by ACCEPTing for the entire chain:

ip6tables -I FORWARD -j ACCEPT

EDIT:
BTW I am able to reach your server:

$ nc -zv ipv6-mirror.albony.xyz 80
Connection to ipv6-mirror.albony.xyz (<redacted>) 80 port [tcp/http] succeeded!