WAN looks like CGNAT
Compare the router WAN IPv4 with the public IPv4.
Live connection diagnosis
Home Server Remote Access Test
Find where the inbound path breaks without treating every failed connection as the same problem.
Home server reachability diagnosis
Confirm the service works locally, test one public TCP port, and use router WAN IPv4 evidence if the external path fails.
Detected public IPChecking…
IP version—
Network—
The public IP shown here is detected from this browser request. External probes are restricted to that same public IP.
Use one evidence chain for any self-hosted TCP service
The same path applies to a web app, SSH endpoint, media service or custom server: local service → public TCP reachability → WAN/public-IP comparison → forwarding/firewall/binding. Keep administration interfaces behind a VPN or overlay whenever possible.
Narrow the failure after the first probe
Use the next test that matches the evidence instead of repeating the same port check.
WAN address is private
Check for another router or ISP gateway upstream.
Forward is still failing
Walk through listener, forwarding destination, firewall and binding.
Prefer private remote access
Use overlay-specific troubleshooting instead of exposing an admin service.