How to unblock ports using nftables?

I want to set up a service on a port to be visible on LAN and on Internet, for example, quickserve on port 10000.
However, I cannot figure out how to do it.
I set up quickserver and it works locally, I unlock ports via firewall-config - I select ‘Public - Ports’ and add udp and tcp 10000. The port is also forwarded on router.
However, the service is still not accessible on LAN or on the Internet.
When I try to use any service that checks whether port is unlocked, I get ‘no route to host’ error.
Any idea what should I do?

By default we are using firewalld. If you are still running that you can easily open the ports that way.

Just add a service in the GUI with the ports you want open and then check the box for that service in your zone.

Just for a basic check, I hope your router itself is accessible / routable on the public internet and not behind a CGNAT.

dalto,
What GUI are you talking about, maybe I am missing something?
Here is a screeenshot of what I’ve tried:

Screenshot

flyingcakes,
I am not behind ISP NAT if that is what you mean. Even in that case, the service should still be available in LAN and I cannot access the service from android device connected to the same router.

I would start by temporarily stopping firewalld to find out if it is the problem or if it is something else.

If it is firewalld, then we can troubleshoot that further.

I have tried systemctl stop firewalld but still no access.

That means the issue is probably not related to the firewall or blocked ports on the local machine.

Either your software isn’t working the way you expect or there is an issue elsewhere on your network.

It shouldn’t be software issue because it worked before I started messing with the firewall on another port. Now it doesn’t work on all the ports.

If I do ss -antpl | grep 12 the output is:
LISTEN 0 5 0.0.0.0:12345 0.0.0.0:* users:(("python3",pid=339090,fd=3)) , so the software does listen on the port.

I want to host another application on the port but quickserve makes it a lot easier to test, so I am using it to check the ports. I do encounter the issue with other applications as well.

Is there a way to check what can interefere with ports if not a firewall?

The issue was weird misconfiguration on nftables that interefered with something even when I disabled the relevant services, resetting all the configs helped.

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.