Did BSNL blocked incoming TCP connections?

  • Thread starter Thread starter Helper9581
  • Start date Start date
  • Replies Replies 16
  • Views Views 329
Messages
10
Location
Kadapa
ISP
BSNL
I’m self-hosting several services (Jellyfin, Immich, qBittorrent, WireGuard, etc.) on my home server. I access them through subdomain.mydomain.com.


This setup has been working fine for the past 6 months. But since about a week ago, I can’t access any of them externally.


  • Port forwarding is correctly configured on my router.
  • UFW firewall allows the ports (80, 443, 6882, 29472, etc.).
  • Services are listening properly on the server.
  • I’m not behind CGNAT (WAN IP = public IP, matches DNS).
  • External port checkers report all TCP ports as closed, even though they’re open internally.
  • WireGuard (UDP/51820) still works fine, so inbound UDP seems unaffected.

This makes me think BSNL has recently started blocking incoming TCP connections.


I’m in Andhra Pradesh. is anyone else seeing this? Has BSNL officially blocked inbound TCP on residential plans?
 
your local exchange might have ran out of ipv4 addresses and now under cg nat. my ipv4 and ipv6 was accesible outside on bsnl network till last week tho before i closed the connection
 
@Helper9581 I am also facing this with Airtel on v6 and BSNL on v4, so could be routing issue. Icmp is going through fine, not sure what is the issue.
 
Can confirm on my side that atleast 80 and 443 are being blocked here in UP west. Wireguard default port and 8022 are working. Will check other ports.
 
Same here as well.

I am now using Oracle Cloud Free Tier VPS as my tunnel.

Home server -> Wireguard Mesh -> VPS -> Reverse Proxy using WG IP (I have noticed uncommon ports can still be forwarded so you could remove wireguard and simply use public ip in reverse proxy)

You can also try Pangolin for easier setup.
 
Same case in Kerala as well. If you’re not aiming for using WG mesh to proxy, simply switching to non-standard ports works too (atleast for now). I moved away from 443 to 8443.
 
Such a huge plus point for BSNL for homelab users. F**k BSNL for removing this. Hope they don't block other ports or change to cgnat.
 
Back