"unrestricted" APN on Vodacom - How does it work?

Vodacom "unrestricted" APN:

This is an APN option on Vodacom SIMs. It enables devices to get a publicly-accessible IP address (dynamic, not static). It also has no port blocking.

SIMs need to be specially provisioned for the unrestricted APN. After provisioning, the device APN needs to be updated to "unrestricted". Username and password must be left blank.

The danger of this APN is that it exposes your device to the greater internet and you can be exposed to attacks. But some devices do require open ports and publicly accessible SIM IP's. 

PS: The device will also still work on the normal public "internet" APN, if chosen on your device. 

UPDATE: Unrestricted APN on Vodacom can not be provisioned on new prepaid SIMs from early 2020. Please contact us for two alternative SIM options: 

- Vodacom Business Flexi SIM provisioned for the "unrestricted" APN
- Vodacom Business Flexi SIM on the Managed APN service. This is ideal for larger number of SIMs that also shares pooled data. It provides static IP's as well as custom data routing & firewalling options. 

This APN is offered by Vodacom under the following terms:
Vodacom “unrestricted” APN disclaimer: Should you use this APN on the Vodacom network, you understand and accept the risk that the provisioning by Vodacom (Pty) Ltd to you of its “unrestricted” APN may result in the unauthorized access and/or usage of your devices. You agree that neither Vodacom (Pty) Ltd nor any of it agents, service providers, contractors, directors, employees and servants shall be liable for any losses, costs, damages, expenses, (whether direct or indirect) claims and/or injuries (including but not limited to losses, costs, damages, expenses, claims and/or injuries incurred by you, or any other party, arising from the unauthorized access to and/or usage of your devices by any other person) incurred or sustained by you, or any other person, arising from Vodacom (Pty) Ltd providing you with its “unrestricted” APN, and you hereby indemnify and hold Vodacom (Pty) Ltd, its agents, service providers, contractors, directors, employees and servants harmless in regard thereto. Vodacom (Pty) Ltd does not offer or provide any warranty in regard to the functionality of the “unrestricted” APN, or that it will be fit for the purpose for which it is intended.

MTN does not off an "unrestricted" APN.

___________________________________

Unrestricted APN - The History 

"internet" APN - NAT'd IP with all incoming ports blocked, i.e. you can connect to any service with no blocking or shaping of any kind, but your PC can't accept incoming connections. This is out-and-out to protect users from port attacks and scanning.

The above APN blocks incoming ports but have no restriction on outgoing. You decide what to do with your data.

Some users, in addition, required unsolicited incoming connections and for this the "unrestricted" APN was created. This allows you to do things live web streaming, CCTV enablement, remote desktop support, etc. 

The danger of this APN is that it exposes your device to the greater internet and you can be attacked. But some people require the service. 

To summarise:

1) NO blocking, shaping, throttling or messing with outgoing ports, in any way. 

2) internet, vlive and internetvpn APN's will block all unsolicited incoming connections.

3) unrestricted apn allows all incoming ports, again NO blocking, shaping, throttling or messing with incoming ports, in any way, just like outgoing.

Source: Jannie van Zyl via MyBroadband