Check your ports

How it works

Each region tries a TCP connection to each port, waiting up to three seconds, and lets go as soon as it's made. Open: something accepted it. Closed: the address answered with a refusal, so it's reachable but nothing listens there. Filtered: no answer at all, usually a firewall dropping it. Unreachable: a router said there's no way there. Only your own address is ever tried, never one you type, and it goes only to the site's own servers and isn't stored. Behind carrier-grade NAT you share an address, so ports will look filtered. From a terminal: curl ipq.sh/port/22,443; curl -4 or -6 picks the address family.