Standard Port Forwarding not working

[Bondy86]

EE Full Gig broadband using a EE Smart Hub Wifi 7 router
Followed the User Guide and a YouTube video but CANNOT get port forwarding to work.

https://youtu.be/LJ3X3dD3DFU?t=648

I can 100% access those devices via my LAN on those ports and they work 100%
Cannot access them via my WAN IP address on those ports.
PortChecker shows the ports are closed.

However when I put the server into a DMZ (DO NOT RECOMMEND) I can then access the ports from my WAN which must mean the Router/Firewall is not working correctly.

Please can someone recommend a fix for me.
Kind regards,

[Bondy86]

As I only had this installed today I was able to reconnect back to my old Vodafone broadband that is still up but not sure how long for.

And as you can see below, VERY SIMPLE port mapping and my Jellyfin server works 100% from my WAN IP

BTW its only TCP that needs to be open so ignore the TCP/UDP

Why doesn't it work for the EE Router with the same configuration of port forwarding.

[bobpullen]

Is it the 7 Plus or the 7 Pro hub you have?

Not exactly the same but I am hosting both Home Assistant and a Plex media server on my LAN without any port forwarding issues (currently using a 7 Pro) 🤔

Presumably your servers are on the same local IP they were when connected to the Voda hub? What machines are they? Windows or something else? If Windows, have you ensured that the network connection hasn't reverted to 'public'?

[Bondy86]

Its a 7 Plus, spoke to support they are apparently going to push out a firmware update that should take place by midnight.

Home Assistant OS is running on bare metal, not sure if Linux has similar Public/Private/Domain firewall zones.
Same LAN IP, same ports as before.
The very second I put the server into the DMZ it starts working BUT opens up SMB, NetBIOS and a host of other ports to the internet... which is very bad.

I'll see what happens tonight and if they upgrade the firmware.

[tnj]

With Home Assistant you will be using insecure http:// Port 8123 on your LAN but I assume you will be using something similar to NGINX Home Assistant SSL proxy and a Dynamic DNS (DynDNS or DDNS) service with Let's Encrypt support so the remote access is https:// and if you are it will be Port 443 that you want to open.

The SSL on Home Assistant takes a bit of setting up or alternatively you can use the Home Assistant NabuCasa Cloud where you do not have to open up any ports but that is chargeable.