search

DefinedNet / mobile_nebula

Brings nebula to mobile devices (iOS, Android)
https://defined.net
125 stars 37 forks source link

Cannot connect to a host from Android. Using a computer works #84

Closed ktecho closed 1 year ago

ktecho commented 1 year ago

Hey,

I cannot connect to a host from my Android smartphone. Using a computer in the same network works fine. They both are using the same Lighthouse.

When I try connecting from the Android app, the Nebula app says "1 active tunnel" (the lighthouse), "1 pending tunnel" (the machine I'm trying to connect to.

Is there something I can try to see where the problem may be?

johnmaguire commented 1 year ago

Hi @ktecho - some tricky NAT situations can cause this behavior. Would you mind sharing the logs from the app?

My first suggestion would be to enable relay support on your Lighthouse and add the relay to your inaccessible host's configuration: https://www.defined.net/blog/announcing-relay-support-in-nebula/

ktecho commented 1 year ago

Those are the logs:

time="2022-11-11T15:22:15Z" level=info msg="Firewall rule added" firewallRule="map[caName: caSha: direction:outgoing endPort:0 groups:[] host:any ip: proto:0 startPort:0]"
time="2022-11-11T15:22:15Z" level=info msg="Firewall started" firewallHash=b6eef9a546df4160c507a1c6409465df04ecf536f4338191121437632002f187
time="2022-11-11T15:22:15Z" level=info msg="Main HostMap created" network=192.168.100.4/24 preferredRanges="[]"
time="2022-11-11T15:22:15Z" level=info msg="UDP hole punching enabled"
time="2022-11-11T15:22:15Z" level=info msg="Loaded send_recv_error config" sendRecvError=always
time="2022-11-11T15:22:15Z" level=info msg="Nebula interface is active" build= interface=android network=192.168.100.4/24 udpAddr="[::]:43746"
time="2022-11-11T15:22:15Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=2504984804 udpAddrs="[xx.xx.xx.xx:4242]" vpnIp=192.168.100.1
time="2022-11-11T15:22:15Z" level=info msg="Handshake message received" certName=lighthouse1 durationNs=32431885 fingerprint=beea27dacd49f5626dad1b36706084ca6b838d0ef8d07e3ba68b018aff58c543 handshake="map[stage:2 style:ix_psk0]" initiatorIndex=2504984804 issuer=90feb01a1862f60d1f8e8a50c083fa798a8db3a584b1d284e988285adb7a4633 remoteIndex=2504984804 responderIndex=3750617854 sentCachedPackets=1 udpAddr="xx.xx.xx.xx:4242" vpnIp=192.168.100.1
time="2022-11-11T15:22:35Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:35Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:35Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:36Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:36Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:37Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:38Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:39Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:41Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:42Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:44Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:46Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:47Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:50Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:52Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:54Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:56Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:22:59Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:02Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:04Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:07Z" level=info msg="Handshake timed out" durationNs=32825851054 handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1247270462 remoteIndex=0 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:35Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:35Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:35Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:36Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:36Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:37Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:38Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:39Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:41Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:42Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:44Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:45Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
time="2022-11-11T15:23:47Z" level=info msg="Handshake message sent" handshake="map[stage:1 style:ix_psk0]" initiatorIndex=182386635 udpAddrs="[[2a0c:5a81:a100:6b00::2df]:4242 [2a0c:5a81:a100:6b00:d00d:f4cb:147f:33ce]:4242 [fda3:dd65:fbcb::2df]:4242 [fda3:dd65:fbcb:0:e908:7881:c10e:e854]:4242 86.127.225.83:4242 192.168.1.176:4242]" vpnIp=192.168.100.3
nbrownus commented 1 year ago

Can you post the logs from the 192.168.100.3 as well

ktecho commented 1 year ago

@JohnMaguire I didn't know you could use relays in that way. I just set-it up and the connection is working.

As I have to send very little information from one node to the other, I think this is enough for me. Thanks!

ktecho commented 1 year ago

@nbrownus This are the logs. They're printed when I start the app. No new logs are added when the client is trying to connect.

INFO[0000] Firewall rule added                           firewallRule="map[caName: caSha: direction:outgoing endPort:0 groups:[] host:any ip: proto:0 startPort:0]"
INFO[0000] Firewall rule added                           firewallRule="map[caName: caSha: direction:incoming endPort:0 groups:[] host:any ip: proto:1 startPort:0]"
INFO[0000] Firewall rule added                           firewallRule="map[caName: caSha: direction:incoming endPort:0 groups:[any] host: ip: proto:0 startPort:0]"
INFO[0000] Firewall rule added                           firewallRule="map[caName: caSha: direction:incoming endPort:22 groups:[any] host: ip: proto:6 startPort:22]"
INFO[0000] Firewall started                              firewallHash=acbbf59ec6f247d7b28dfb022b4e357255acc04497ad852b7f5a271444a53e8c
INFO[0000] Main HostMap created                          network=192.168.100.3/24 preferredRanges="[]"
INFO[0000] UDP hole punching enabled
INFO[0000] Loaded send_recv_error config                 sendRecvError=always
INFO[0000] Nebula interface is active                    build=1.6.1 interface=nebula1 network=192.168.100.3/24 udpAddr="0.0.0.0:4242"
INFO[0000] Handshake message sent                        handshake="map[stage:1 style:ix_psk0]" initiatorIndex=1708415127 udpAddrs="[xx.xx.xx.xx:4242]" vpnIp=192.168.100.1
INFO[0000] Handshake message received                    certName=lighthouse1 durationNs=34377806 fingerprint=beea27dacd49f5626dad1b36706084ca6b838d0ef8d07e3ba68b018aff58c543 handshake="map[stage:2 style:ix_psk0]" initiatorIndex=1708415127 issuer=90feb01a1862f60d1f8e8a50c083fa798a8db3a584b1d284e988285adb7a4633 remoteIndex=1708415127 responderIndex=3028085300 sentCachedPackets=1 udpAddr="xx.xx.xx.xx:4242" vpnIp=192.168.100.1
INFO[0003] Handshake message received                    certName=xps-13 fingerprint=1be0090f7632bbb7d9566af7dfe09540037333b7ce18fa30ab7b8117fc37fad6 handshake="map[stage:1 style:ix_psk0]" initiatorIndex=3242654983 issuer=90feb01a1862f60d1f8e8a50c083fa798a8db3a584b1d284e988285adb7a4633 remoteIndex=0 responderIndex=0 udpAddr="192.168.1.175:4242" vpnIp=192.168.100.2
INFO[0003] Handshake message sent                        certName=xps-13 fingerprint=1be0090f7632bbb7d9566af7dfe09540037333b7ce18fa30ab7b8117fc37fad6 handshake="map[stage:2 style:ix_psk0]" initiatorIndex=3242654983 issuer=90feb01a1862f60d1f8e8a50c083fa798a8db3a584b1d284e988285adb7a4633 remoteIndex=0 responderIndex=1095553402 sentCachedPackets=0 udpAddr="192.168.1.175:4242" vpnIp=192.168.100.2
ktecho commented 1 year ago

@nbrownus as I said, I can connect to 192.168.100.3 from a computer in the same lan network where the smartphone is.

johnmaguire commented 1 year ago

@ktecho So there is probably one of two things happening here: either you are in a double-NAT type situation where hole punching doesn't work (punchy, which looks to be enabled on both hosts) or there is a firewall rule on the network 192.168.100.3 is on which is preventing inbound access from the mobile phone.

In the former case, relays are your best option for achieving connectivity. If it is simply a firewall rule however you may be able to achieve direct connectivity by allowing inbound access on IPv6 port 4242.

ktecho commented 1 year ago

I don't think there is any rule. It's a freshly installed OpenWRT without any tinkering with firewalls or rules.

But yes, it may be the former: my ISP is very very cheap. I've heard that they share one public IP between several customers. I don't know if this has anything to do with the double-NAT you mentioned... but anyways... it works flawlessly using the relay.

Thanks to both of you!

nbrownus commented 1 year ago

I see 192.168.100.4 is trying to use ipv6 but 192.168.100.3 is only listening on ipv4, changing it's listen.host to [::] will benefit you here.

In any case, relays are a really good thing to have configured. Glad it's working!

ktecho commented 1 year ago

Good catch! I've changed it so it listens on [::] but it doesn't work without the relay.