port forwarding in firewall

handgrenade · 01-27-2002, 12:03 AM

yeah, i already read that post.....helpful, but doesnt solve my problem. wondering if anyone has had this problem themselves with a linksys router and MOHAA......

madrebel · 01-27-2002, 02:30 AM

what kinda firewall?

handgrenade · 01-27-2002, 02:33 AM

its a linksys router....the built-in firewall is Network Address translation (NAT), which restricts access to internal IP's from external sources, UNLESS the port the external user is accessing on has been forwarded.....thats why i need to know if im using the correct ports or not. any ideas?

ORDGordo · 01-27-2002, 03:20 AM

same problem here.
same router, same ports forwarded
same result.
an unconnected server.

ideas?

Hellbaby2065 · 01-27-2002, 03:24 AM

My advice would be to open a DMZ and use a software firewall. ZoneAlarm has given me trouble, but TinyFirewall may work better.

Hellbaby2065 · 01-27-2002, 03:27 AM

If all else fails, use port forwarding and give out your IP address to those who want to join the game. Also, there is a function on the forwarding page of my linksys router called "Port Triggering". You may want to set this up and see if it works.

Chrisc1730 · 01-27-2002, 03:28 AM

I have one but 5 port and im having some trouble too.

madrebel · 01-27-2002, 04:14 AM

sounds like youre getting a loop.

imagine if you will

@ = external
$ = router
% = server
# = you

@----->$--forwards to---%

packet comes in for port 12203 hits the nat box gets routed to the server

whats happening is

#----->$----%---->$----->%---etc

you, send a packet to the server on port 12203, it first hits the router the router send its to the server....the server then sends back the info destined for the client on port 12203....that packet hits the router and gets forwarded back to the server(since all traffic on those ports gets forwarded to the server). So instead of it getting back to the client it just loops.

Thats what sounds like is happening anyways.

btw, before you go thinking youre secure with that router. youre not. a packet filtering firewall(what you have) is the least secure of all firewalls.

DMZ the server and put a software firewall on it. You will have the same level of security doing it that way.

ReBel · 01-27-2002, 04:30 AM

I am using a LinkSys router also, and have been hosting just fine without using the DMZ feature.

Here's what I'm doing:
1.) Static IPs (DHCP disabled).
2.) Advanced, Filters - DISABLE SPI, ENABLE Block WAN Request, ENABLE Multicast Pass Thru, ENABLE IPSec Pass Thru.
3.) Advanced, Forwarding, Ports 12200 to 12220 (both UDP and TCP).

Thats it, hope this helps.

Quik · 01-27-2002, 04:32 AM

DHCP disabled in router or server PC? Disabling DHCP in router with a dynamic IP is not good.

------------------

handgrenade · 01-27-2002, 04:35 AM

thanks for the reply madrebel. I understand your logic, but would have to say that i use this method of port forwarding succesfully with several other games without trouble. also, my LAN pcs can connect to the game server fine, its just the internet players that cant see the host - because the port is not open as it should be....

I think it must be the fact that EA has tied the MP game so closely to gamespy - im assuming that there are other ports/protocols involved that might be messing things up due to gamespy. Im going to try that 'all seeing eye' app and see if my server is visible on that sucker....

also, I know my server isnt secure just cause its behind a packet filtering firewall, but im running windows 2000 server on a domain with IPsec, password protection, account lockout, intrusion detection, etc.....im pretty locked down, bro. BUT, before you say, well, thats youre problem...its not. i host games all the time without problems.

madrebel · 01-27-2002, 04:53 AM

sux to be you heh

uhmm i know from the first retail version of this game there was port "funkiness". port 12203 wouldnt bind from the command line server. so it wouldnt surprise me at all if they did something to mess up your setup.

btw im impressed someone in the windows world that understands security kudos to you good sir knight

ReBel · 01-27-2002, 07:54 AM

Quik - I don't know what your network setup is, but disabling DHCP in the router is no big deal. Just disable it, and asssign a static IP under TCP/IP in your computer(s).
If you are using the default IP router scheme, the router will be 192.168.1.1 - just make your computer(s) something like 192.168.1.5, 192.168.1.6, etc.

Hellbaby2065 · 01-27-2002, 08:02 AM

You don't need to turn off DHCP at the router to assign yourself a static IP address.

Just set up your comp with a compatible IP, such as 192.168.1.4 ,
and your router will still recognize it with DHCP on, as it would assign a similar address anyway.

handgrenade · 01-27-2002, 10:26 AM

ive been hosting games for quite a while on my linksys 4 port router. normally, i just forward the ports necessary to the dedicated server and the game is visible from the internet no problem. But MOHAA is given me (and others I know) many problems with this. I have forwarded ports 12201-12210 (udp and tcp) to my server. its NOT visible on the internet or gamespy. I even forwarded ALL the ports listed on page 14 of the installation manual. still no deal. The only way i can get it to work is by placing the server IP address in the DMZ. then its visible to the internet, but its wide open, and that makes me nervous....

anybody out there had similar troubles. If so, what have you tried? any ideas?

-HG