I was not on CGNAT (maybe because their NOC put me on dynamic public IP when they processed my bridge mode request). I was able to port forward 443, and some other higher ports (VSOL+ Unifi setup). I did not test 80 or other <1000 ports. Airtel fired me as a customer this week, so I can no longer do this. (Last mile connection issue, local techs decided not worth repairing the cable, and called it technically not feasible).