If your ISP uses CGNAT (common with mobile broadband, Starlink, or cheap home internet), you cannot receive inbound connections. Solutions:
Even if you disable third-party antivirus, the Windows Firewall can still block the necessary ports for the handshake. -6023 parsec error