Hey fellow friends on the internet. I am struggling hard with some networking issues on my end with setting up NPM and Cloudflare and could use some much appreciated help.

 

I have NPM installed and running, Cloudflare is active and looking at my IP address. However, for the life of me I can not get a LetsEncrypt Cert nor can i do the simple troubleshooting tasks outlined in here to verify that I have an open port 80. This includes using my mobile device to try to pull up my ip address and doing testing: http://unraid.yourdomain.com/.well-known/acme-challenge/ address while not on WIFI.

 

Setup:

Spectrum Internet - Residential /Dynamic DNS - Yes there information states it does not close port 80 or 443 off to the world. https://www.spectrum.net/support/internet/blocked-ports

Ubiquity UDM-Pro

Unraid 6.12.15

 

Currently I have port 80 open to the world (yes i know sketchy at best), and 443 open only to cloudflare based on their IP list Here. I am forwarding those ports to their respected port in Unraid which is what NPM is supposed to be listening to. I know port forwarding is working on Plex since i have that just being port forwarded not currently through NPM and it is working outside my house just fine.

 

I will take any suggestions that you have for me to hopefully get this working. See pictures below of the networking interfaces:

 

Cloudflare: - I do have a custom cert from cloudflare and saved on NPM.

 

UDM-Pro

Port Forward:

 

Firewall Rules:

Yes I realize that Port 80 Allow is off right now in the picture because I'm not leaving it on while testing.

 

Shields Up Report:

I would expect 80 to be open with 443 closed only to Cloudflare

 

Unraid NPM Container:

 

Thank you so much.

-Neo

I only see https/ssh allowed and https blocked. If nginx is terminating SSL I seem to recall it has to also see http. You're forwarding but not letting it through the firewall. Also verify the ports you're forwarding to are right. They seem to be - do they work direct?

I hope this helps, here are the firewall rules for allow/block. As far as I understand it, in Unifi it runs top down, so you need Allow before the block to let the traffic move in the system.

 

So it should be Allow 80 and 443 from cloudflare, then allow 80 from anyone, then block 80, 443 and 22 from everyone as long as it doesnt conflict with the first two rules. Now I have removed the 80 from this block before and still no luck. 

 

 

 

 

 

 

For anyone that stumbles across this and is just as confused as I was. I finally found the issue. For some reason the only change I ended up having to make was moving my Unraid GUI ports off of 80 and 443 then everything worked magically. Now I am on an IPV4 IP address so not sure why I had to do this as it states in the support page that only IPV6 is required to change ports.

 

If anyone has a reasoning for why. It would be great input to me for my own understanding!

 

Cheers, Neo