Disable advanced security

@XfinityPaula​

I am using my own modem and a separate router. I have already configured Port Forwarding on my router for Port 5000 (TCP) and Port 8123 (TCP), pointing to my internal server at 192.168.0.94.

My local firewall (Fedora 43) is confirmed open for these ports. However, all external 'Port Checker' tools show these ports as 'Filtered' or 'Stealth' at my public IP (4.126.175.102). Since the block is not on my hardware, I need you to verify if there is a provisioning block or a CMTS-level filter on my account preventing inbound traffic on these ports.

Thank you for sharing your experience with the trouble you are having with the ports. Unfortunately this may be something that our security team would need to assist with, however I am only showing that they would assist when having issues with accessing websites with a Xfinity Gateway. Is this a configuration that was recently set up of has it been in place and working properly until recently? 

@user_jp82yr wrote;​

​However, all external 'Port Checker' tools show these ports as 'Filtered' or 'Stealth' at my public IP (4.126.175.102).

FWIW, that's not your Comcast-assigned "public IP" address. It is assigned to the Level 3 Telecommunications Company backbone router provider network.

I am using a passthrough configuration, and that is the IP currently assigned to my gateway; I need the 'Advanced Security' block lifted so traffic can reach my local Fedora 43 server.

user_jp82yr Advanced security is not applied to the network it is dependent on having a compatible leased gateway. 

Did you recently set up the port forwarding on the network or is this a configuration you have had in place, and you recently started to have the issue with traffic no reaching the ports?