Bitcoin Forum

Bitcoin Client Software and Version Number: Bitcoin Core RPC client version v24.0.1
Operating System: Raspbian GNU/Linux 9 (stretch)
System Hardware Specs: ARMv7 Processor rev 4 (v7l), 1GB RAM and 1 Tb free hard drive space.
Description of Problem: My node is up and running but is not reacheable from the internet. I use to test it

This is the output of a nmap scan of my raspberry in my LAN:

I recently ask to my ISP to get me out from CGNAT and now my public ipv4 in my router config is the same as the one whatsmyip.org shows me. I also added a port forwarding rule in my router config:

But my node is still not reacheable.

Is your node fully synced yet?

No, its at 27% yet. I thought it wouldnt accept transactions until is fully synced but it would be reacheable. If thats not the case thanks for your reply! This was driving me crazy :S

How are you trying to reach it? I think you should be able to reach it from a ping request locally or from a hard coded connection from a device on your network but not over the Internet or externally yet (changing once it syncs).

You could test if it's a router issue by trying to connect it over tor.

When you're node is in the initial block download stage, it won't accept certain RPC calls until the verification is finished, but I don't think that's the problem. Why is your node listening on 192.168.1.138 only? You need to make it listen to 0.0.0.0.

I'm trying to reach it by using this tool https://bitnodes.io/#join-the-network.

My raspberry LAN IP is 192.168.1.138 and I used nmap to check if bitcoind is listening on 8333 port. I don't understand how to make it listen to 0.0.0.0, what do you mean?

0.0.0.0 is a special network address that causes a program to listen on all the network interfaces in the system.

Try running Bitcoin Core again using the options -listen=1 -bind=0.0.0.0 , if that doesn't work, then try testing your SSH port to see if you can connect to it from outside the internet. I see it is listening on the local network (interface), but is it also listening on your internet-connected interface (that is, whatever IP address your ISP gave you).

Use nmap for your public and not private IP and see what happens.

I'm not sure if if this will work for Raspbian, but on my Centos server I had to configure the firewall to fix the same issue that you have right now. The command was the next one:


That way the port will be open to the public.

And about your ISP I think you only need to configure your modem in DMZ, that way anyone outside the LAN will be able to connect to the server.

CentOS doesn't have a firewall enabled on installation, but firewalld blocks all incoming traffic by default - on all distributions. So it is something that OP should look into as well.

<while we are at the topic of firewalls, somebody should make a firewall that monitors port 8333 for malicious traffic utilizing patched security vulnerabilities.>

The nmap report on my public ip says:

But in my router control panel the firewall is configured this way:
https://i.ibb.co/J7nYXTW/image.png

And I added this manual rule (UPnP IGd is enabled):
https://i.ibb.co/hWsGpNx/image.png

What is the brand and model of your router? It seems as though it is still blocking all of your public ports, considering the SSH port is also filtered from your public IP.

Sagemcom F@st 5657