Open Port Checker?

Bob.Dig

My ISP is sometimes doing DS-Lite instead of DS. When I recognize this, I can manually initiate an IP-"Change" and I have my DS back.
But how can I recognize this easily and automatically? Is there maybe an builtin-solution for that in PfSense (via VPN-Client for example)?
Any help is appreciated, maybe a third-party webservice or a Windows-Tool?

Bob.Dig

So I found Diagnostics Test Port, this works flawlessly. But is there an easy solution for automation and informing me, if it fails?

chpalmer

@Bob-Dig said in Open Port Checker?:

DS-Lite

Can you explain what "DS" is and how it affects your internet connection? Im coming up short on Google.

Are you talking inbound ports? Their are desktop applications out there that will ping an outbound source and alert you when those pings fail after a time. But you would have to have someone with that outside your network to alert you for inbound.

Inboard ports on Pfsense can be built as static. Are you trying to use Upnp? Need more info!! :)

https://youtu.be/7MlJs7VFbnM

Bob.Dig

@chpalmer Dual Stack lite.

Basically I want to know If I am still accessible from the outside in an automated fashion and get informed if not. The last thing seems to be the hard part, because I am not able to write a script ore something. So I wish there would be an app for that.

Also I was able to test it with ps.

chpalmer

Who is your ISP? If your testing from your premises you are still only testing outbound. Is there a difference in your results when their change happens?

I would suspect when you initiate traffic and opened a state to the outside server that your results would be skew'd.

I have a counterpart in Chicago that hits my server here from his location and I get an email if it is down for an hour.. Is this what your after?

chpalmer

Reading up now.. https://en.wikipedia.org/wiki/IPv6_transition_mechanism

https://www.grc.com/x/ne.dll?bh0bkyd2 something like this but automatic?

Bob.Dig

@chpalmer said in Open Port Checker?:

I have a counterpart in Chicago that hits my server here from his location and I get an email if it is down for an hour.. Is this what your after?

Sounds good. I can use the vpn-client on pfSense to get a connection from the "outside" (nordVPN). If I get ds-lite, my server shouldn't be reachable anymore but there is a server with the "right" IP, but it is not mine. So the test should be port specific with an rather unusual port.

Bob.Dig

Maybe there is an rather "easy" solution, NAT Loopback I was told. I run a service on a different machine and try connect to it using the DDNS-Address, where no split-DNS is used. If I can connect, the server should also be reachable from the outside. If I can't connect I am probably on DS-Lite. In my case, client and server are jabber IM, so it is running anyway and that would help me, if this really "works" as intended.