7 ms·

They still support opening up ports, it’s just randomized instead of dedicated like uPnP.

by asynchronous 3y ago

nabogh 3y ago
Oh really? Could you elaborate or point me in the direction of more information on this please?
- asynchronous 3y ago
  https://mullvad.net/en/account/wireguard-config https://mullvad.net/en/account/wireguard-config In the wireguard config section of their tutorials, there’s a spot to put a custom port - it’s really unclear from the docs but this allows you to expose out a service within the higher limits of the port ranges, and only on dedicated servers. Really hard to find but they call this “city ports” over global ports because you have to set them up beforehand.
  - Hakkin 3y ago
    The "custom port" option in the config creator just sets the endpoint port to use for Wireguard. It has nothing to do with port forwarding.
internet-mat 3y ago
This isn’t true, Mullvad completely disabled port forwarding earlier this year. See: https://mullvad.net/en/blog/2023/5/29/removing-the-support-for-forwarded-ports/ https://mullvad.net/en/blog/2023/5/29/removing-the-support-f...
- asynchronous 3y ago
  I’m confused, the blog post backs up what you say but I can still set custom ports within my account page… And I’m currently running a service that needs to advertise out on a port to work from Mullvad.
  - fruitreunion1 3y ago
    I don't want to revoke a key to test but I'm pretty sure that just sets the port in the Endpoint part of the WireGuard config file. (the port you use to connect, for if the regular one is blocked). Are you sure your service behind Mullvad is accepting incoming connections?
  - piaste 3y ago
    Is it a torrent client, by any chance? Those can still work without port forwarding, if the swarm member you're sharing data with (regardless of direction) has an open port on their side. Try creating a new torrent with some random file, seeding it from a Mullvad device and downloading it from a different Mullvad device. That should only work if you have port forwarding set up (or if you're not actually going through Mullvad - you will see that by the peer IP in the torrent client).
  - electroly 3y ago
    That custom port on the WireGuard config page is not the place where you'd configure port forwarding; that's not what that is. They had a separate port forwarding page for configuring city ports which is now gone. But you say you have it working. My guess is that you're just misremembering where the configuration is, and that Mullvad hasn't removed existing port forwards yet like they said they would.

They still support opening up ports, it’s just randomized instead of dedicated like uPnP.

nabogh 3y ago

Oh really? Could you elaborate or point me in the direction of more information on this please?

asynchronous 3y ago
https://mullvad.net/en/account/wireguard-config https://mullvad.net/en/account/wireguard-config In the wireguard config section of their tutorials, there’s a spot to put a custom port - it’s really unclear from the docs but this allows you to expose out a service within the higher limits of the port ranges, and only on dedicated servers. Really hard to find but they call this “city ports” over global ports because you have to set them up beforehand.
- Hakkin 3y ago
  The "custom port" option in the config creator just sets the endpoint port to use for Wireguard. It has nothing to do with port forwarding.

internet-mat 3y ago

This isn’t true, Mullvad completely disabled port forwarding earlier this year. See: https://mullvad.net/en/blog/2023/5/29/removing-the-support-for-forwarded-ports/ https://mullvad.net/en/blog/2023/5/29/removing-the-support-f...

asynchronous 3y ago
I’m confused, the blog post backs up what you say but I can still set custom ports within my account page… And I’m currently running a service that needs to advertise out on a port to work from Mullvad.
- fruitreunion1 3y ago
  I don't want to revoke a key to test but I'm pretty sure that just sets the port in the Endpoint part of the WireGuard config file. (the port you use to connect, for if the regular one is blocked). Are you sure your service behind Mullvad is accepting incoming connections?
- piaste 3y ago
  Is it a torrent client, by any chance? Those can still work without port forwarding, if the swarm member you're sharing data with (regardless of direction) has an open port on their side. Try creating a new torrent with some random file, seeding it from a Mullvad device and downloading it from a different Mullvad device. That should only work if you have port forwarding set up (or if you're not actually going through Mullvad - you will see that by the peer IP in the torrent client).
- electroly 3y ago
  That custom port on the WireGuard config page is not the place where you'd configure port forwarding; that's not what that is. They had a separate port forwarding page for configuring city ports which is now gone. But you say you have it working. My guess is that you're just misremembering where the configuration is, and that Mullvad hasn't removed existing port forwards yet like they said they would.