Port Forwarding Not Working

Hi,
Can I state from the outset that I live in a block of flats where we have access to only one ISP, Hyperoptic. Because of this I am stuck with this garbage ISP and cannot move to a better one.
I am configuring port forwarding on hyperoptic ZXHN H298N router. I am running openSUSE leap 15.1 on my machine with apache web server. Port 80 is open on my machine and the firewall has been configured to allow data into port 80. The machine has been tested and the apache server is listening on port 80.
For the router I have (i) used Application -> Port Forwarding ( Application List ) to make port mapping (WAN start and end port - 8080, MAP start and end port - 80). I linked application with relevant LAN device's IPV4 address. The LAN device had also been placed in demilitarized zone and router's Firewall was set to low. Yet when I used online port checker tools the router's port was found to be blocked.
I also used (ii) Application -> NatLoop and Port Forwarding to perform port mapping. That still did not work.
One thing I noticed is that on the router's WAN side IPv4 Gateway is shown as 100.64.217.193 while the public address on internet is shown as IPv4 188.214.13.240. This means traffic is going via ISP router. There is nothing more that can be done on my side. If anything needs to be done it has to be done on ISP side, e.g. enable DMZ for my router on ISP router or open ports via ISP router.
This is the rubbish I received from Hyperoptic when I contacted them:

I am sending to you the port forwarding manual for your model of the router attached. Sadly, as port forwarding is used for the set up of third party devices which we cannot troubleshoot and assist with, as out technical support agents are simply not trained for third party equipment, the manual is what I can offer as help.
For port forwarding you will be needing a static IP address which costs £5 per month as an add-on to your plan. Please let me know if you wish this to be added and I will gladly assist.

The numbskull doesn't even realize that you don't need a static address for port forwarding. Can anyone suggest where to go from here? All suggestions will be greatly appreciated.

It might be worth asking in their specific forum on here ...

https://forums.thinkbroadband.com/hyperoptic.html

Read up on Carrier Grade NAT on IPv4.

Try and see if you can use IPv6.

Not HO�s fault, the internet is out of IPv4.

In reply to a post by raydona:

The numbskull doesn't even realize that you don't need a static address for port forwarding. Can anyone suggest where to go from here? All suggestions will be greatly appreciated.

100.64.217.193 is a Bogon IP address, so looks like using CG-NAT.

CG-Nat is a pain to behind. You do not have control of port forwarding at point of CG-Nat. You are one in few probably thousands of customers using the same IP, in this case all using 188.214.13.240.

Wikipedia CG-Nat

To get away from issus of CG-Nat you will have to pay HO for you own IP. Or pay VPN provider for same thing ie Cyberghost dedicated ip vpn. I say you be better of paying HO

The numbskull is correct.

What others have pointed out is that Hyperoptic for IPv4 uses CGNAT which is fine for most consumers.

To switch off CGNAT you need to pay for the static IP address option.

In reply to a post by MrSaffron:

To switch off CGNAT you need to pay for the static IP address option.

Of course the proper direction is to use IPv6.

Edited by jchamier (Tue 03-Mar-20 09:58:05)

In reply to a post by jchamier:

Read up on Carrier Grade NAT on IPv4.

Try and see if you can use IPv6.

Not HO�s fault, the internet is out of IPv4.

It is not obvious on the Hyperoptic website that you don't get a public IP address. How many other ISPs use CG NAT? (Mobile phone companies apart.)

They could of course reduce their charge for a plublic IP address

Hey there,

Thank you for your query. We would like to assist as much as possible even though we are not able to complete the port forwarding process on your behalf.

First of all, because we're globally running out of IPv4 addresses, we started using Carrier Grade Nat (CGN) which allows for more efficient use of our IPv4 address range. This means that your public IP address is shared among several other users making your IP address private instead of public. There are, however, some applications that may be affected by this such as online gaming, VPNs, P2P applications and hosting at homes which require a public IP address to work. We provide a static and public IP address. These are £5 per month because of these IP's are rare and we have to cover the cost of renting the IP for you and the cost of maintenance. We are rolling our IPv6 for this reason, and you most likely already have one on your account. You can try port forwarding with IPv6 as well, however, the majority of the UK does not use IPv6 so it might not be successful for what you need the port forwarding for.

As for the port forwarding process, you would not be able to open port 80 on the router as it's reserved by us for Hypertext Transfer Protocol (HTTP). The same goes for port 443.

The guide itself should provide all the steps on how to open the ports but the process will not work without a public IP address.

We hope this helps. We're always here if you have any further questions.

An IPv6 only public website is not going to be that visible though.

Its a problem that almost everyone is going to hit. The older UK ISPs have been lucky for a long time, this luck will eventually run out.