From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Thomas Stian Bergheim" Subject: iptables multiple clients internal network warcraft3 Date: Sun, 11 May 2003 15:24:28 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <000001c317c0$a94de540$0200a8c0@knighthawk> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01C317D1.6CD6B540" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0001_01C317D1.6CD6B540 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi! I'm playing warcraft behind a firewall (iptables) which runs on redhat8. It works fine for me, but other clients on my internal network (192.168.0.x) can't join me. I guess this is because the packets they reply with have a different source adress. So the solution should be fairly simple using iptables.. But I've tried many things, with no luck... My server has two eths, one for the dsl connection, the other one for the local network. Anyone got a working setup with this or anything? Thanks, -- Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/ ------=_NextPart_000_0001_01C317D1.6CD6B540 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi!

I'm playing warcraft behind a firewall (iptables) which runs on redhat8.

It works fine for me, = but other clients on my internal network (192.168.0.x) can't join = me.

I guess this is = because the packets they reply with have a different source adress. So the solution should be fairly simple using iptables..

But I've tried many = things, with no luck...

My server has two = eths, one for the dsl connection, the other one for = the local network.

Anyone got a working = setup with this or anything?

Thanks<= font size=3D2 face=3DArial>,

Using M2, Opera's revolutionary e-mail client: = http://www.opera.com/m2/

------=_NextPart_000_0001_01C317D1.6CD6B540-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: "P.Italiaander" Subject: Re: iptables multiple clients internal network warcraft3 Date: Mon, 12 May 2003 01:06:53 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200305120106.53047.pc-secure@home.nl> References: <000001c317c0$a94de540$0200a8c0@knighthawk> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <000001c317c0$a94de540$0200a8c0@knighthawk> Content-Disposition: inline Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org Op zondag 11 mei 2003 15:24, schreef Thomas Stian Bergheim: > Hi! > > I'm playing warcraft behind a firewall (iptables) which runs on redhat8. > > It works fine for me, but other clients on my internal network > (192.168.0.x) can't join me. > I guess this is because the packets they reply with have a different > source adress. So the solution should be fairly simple using iptables.. > But I've tried many things, with no luck... > > My server has two eths, one for the dsl connection, the other one for > the local network. > > Anyone got a working setup with this or anything? > > Thanks, The clue is, use Nat It's possible ,I did it with Counterstrike 3 games at the same time was max. You have to use Nat or Masquerading . The limit of 3 was because the Counterstrike server won't let me connect with more then 3 games, since we use Nat or Masq, the game-server sees 3 connections from the same IP number. loading game 4 was denied. The firewall/router himself knows how to deal with the different IP's. - make sure you authorize tcp/udp ports above 1024: outbound I don't have specific rules for you , I have @home broadband , but this is what your looking for. Pascal From mboxrd@z Thu Jan 1 00:00:00 1970 From: Myles Uyema Subject: Re: iptables multiple clients internal network warcraft3 Date: Sun, 11 May 2003 20:27:37 -0700 (PDT) Sender: netfilter-admin@lists.netfilter.org Message-ID: References: <000001c317c0$a94de540$0200a8c0@knighthawk> Mime-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="-1463805952-604524489-1052710057=:8400" Return-path: In-Reply-To: <000001c317c0$a94de540$0200a8c0@knighthawk> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: Thomas Stian Bergheim Cc: netfilter@lists.netfilter.org This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. ---1463805952-604524489-1052710057=:8400 Content-Type: TEXT/PLAIN; charset=US-ASCII Hi Thomas, please try out this script. I've tested it so far with Starcraft, two computers joining the same game. Let me know how things go. On Sun, 11 May 2003, Thomas Stian Bergheim wrote: Hi! I'm playing warcraft behind a firewall (iptables) which runs on redhat8. It works fine for me, but other clients on my internal network (192.168.0.x) can't join me. I guess this is because the packets they reply with have a different source adress. So the solution should be fairly simple using iptables.. But I've tried many things, with no luck... My server has two eths, one for the dsl connection, the other one for the local network. Anyone got a working setup with this or anything? Thanks, ---1463805952-604524489-1052710057=:8400 Content-Type: TEXT/plain; name="starcraft-iptables.txt" Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: starcraft IPtables script Content-Disposition: attachment; filename="starcraft-iptables.txt" IyEvYmluL2Jhc2gNCiMgV3JpdHRlbiBieSBNeWxlcyBVeWVtYTsga2hpc2Fu dGggYXQgdXllbWEgZDB0IG5ldA0KIw0KIyBUaGlzIGlzIGEgc2NyaXB0IHRv IGFsbG93IFN0YXJjcmFmdCBnYW1lcyB0byBiZSBob3N0ZWQgYmVoaW5kDQoj IGEgTGludXggSVBUYWJsZXMgZmlyZXdhbGwuDQojIFRlc3RlZCB3aXRoIFN0 YXJjcmFmdCBhbmQgMiBtYWNoaW5lcyBiZWhpbmQgdGhlIGZpcmV3YWxsLg0K IyBUaGlzIG1heSB3b3JrIGZvciBvdGhlciBCYXR0bGUuTmV0IFJUUyBnYW1l cyBhcyB3ZWxsLi4uIFlNTVYNCg0KIyBNeSBJbnRlcm5ldCBJUCBhZGRyZXNz DQpDQUJMRUlQPTEyLjkzLjMzLjU4DQoNCiMgTXkgUFJJVkFURSBMQU4gTmV0 d29yaw0KIyBUaGlzIHNjcmlwdCBhc3N1bWVzIENsYXNzIEMgbmV0d29yaw0K UFJJVkxBTj0xOTIuMTY4LjUNCg0KIyBCYXR0bGUuTmV0IHBvcnQgdXN1YWxs eSA2MTEyDQpCTkVUUE9SVD02MTEyDQoNCiMgRW50ZXIgdGhlIGxhc3QgZG90 dGVkIHF1YWQgSVAgYWRkcmVzcyBvZiBlYWNoIFBDDQojIFdlJ3JlIGFzc3Vt aW5nIGFsbCB0aGUgUENzIGFyZSBpbiBhIENsYXNzIEMgcHJpdmF0ZSBMQU4N CiMgQWxzbywgaWYgeW91IGhhdmUgbW9yZSB0aGFuIDcgUENzLCB3aHkgZG8g eW91IHdhbnQgdG8gZ2V0IG9uIEJhdHRsZS5uZXQ/DQojIFNvIGlmIG15IElQ IGFkZHJlc3MgaXMgMTkyLjE2OC41LjUsIFBDMT01DQpQQzE9NQ0KUEMyPTk4 DQpQQzM9DQpQQzQ9DQpQQzU9DQpQQzY9DQpQQzc9DQpQQzg9DQoNCmV4cG9y dCBDQUJMRUlQIFBSSVZMQU4NCmV4cG9ydCBQQzEgUEMyIFBDMyBQQzQgUEM1 IFBDNiBQQzcgUEM4DQoNCmNhc2UgIiQxIiBpbg0KICAgc3RhcnQpDQogICAg ICBpcHRhYmxlcyAtdCBuYXQgLUYgU0MtT1VUIHx8IGlwdGFibGVzIC10IG5h dCAtTiBTQy1PVVQNCiAgICAgIGlwdGFibGVzIC10IG5hdCAtRiBTQy1JTiB8 fCBpcHRhYmxlcyAtdCBuYXQgLU4gU0MtSU4NCg0KICAgICAgaXB0YWJsZXMg LXQgbmF0IC1JIFBPU1RST1VUSU5HIC1wIHVkcCAtcyAke1BSSVZMQU59LjAv MjQgLS1zcG9ydCAkQk5FVFBPUlQgLWogU0MtT1VUDQoNCiAgICAgIGZvciBp IGluICRQQzEgJFBDMiAkUEMzICRQQzQgJFBDNSAkUEM2ICRQQzcgJFBDOA0K ICAgICAgICAgZG8NCiAgICAgICAgICAgIGlmIFsgJGkgLWd0IDAgXSA7IHRo ZW4NCiAgICAgICAgICAgICAgIGlwdGFibGVzIC10IG5hdCAtSSBTQy1PVVQg LXMgJHtQUklWTEFOfS4ke2l9IC1wIHVkcCAtaiBTTkFUIC0tdG8gJHtDQUJM RUlQfTokKCg5MDAwKyRpKSkNCiAgICAgICAgICAgICAgIGlwdGFibGVzIC10 IG5hdCAtSSBQUkVST1VUSU5HIC1wIHVkcCAtLWRwb3J0ICQoKDkwMDArJGkp KSAtaiBTQy1JTg0KCSAgICAgICBpcHRhYmxlcyAtdCBuYXQgLUkgU0MtSU4g LWQgJHtDQUJMRUlQfSAtcCB1ZHAgLS1kcG9ydCAkKCg5MDAwKyRpKSkgLWog RE5BVCAtLXRvICR7UFJJVkxBTn0uJHtpfToke0JORVRQT1JUfQ0KICAgICAg ICAgICAgZmkNCgkgZG9uZQ0KICAgICAgOzsNCg0KICAgc3RvcCkNCiAgICAg IGlwdGFibGVzIC10IG5hdCAtRiBTQy1PVVQgfHwgZXhpdCAwDQogICAgICBp cHRhYmxlcyAtdCBuYXQgLUYgU0MtSU4gfHwgZXhpdCAwDQogICAgICBpcHRh YmxlcyAtdCBuYXQgLUQgUE9TVFJPVVRJTkcgLXAgdWRwIC1zICR7UFJJVkxB Tn0uMC8yNCAtLXNwb3J0ICRCTkVUUE9SVCAtaiBTQy1PVVQNCg0KICAgICAg Zm9yIGkgaW4gJFBDMSAkUEMyICRQQzMgJFBDNCAkUEM1ICRQQzYgJFBDNyAk UEM4DQogICAgICAgICBkbw0KICAgICAgICAgICAgaWYgWyAkaSAtZ3QgMCBd IDsgdGhlbg0KICAgICAgICAgICAgICAgaXB0YWJsZXMgLXQgbmF0IC1EIFBS RVJPVVRJTkcgLXAgdWRwIC0tZHBvcnQgJCgoOTAwMCskaSkpIC1qIFNDLUlO DQogICAgICAgICAgICBmaQ0KICAgICAgICAgZG9uZQ0KICAgICAgaXB0YWJs ZXMgLXQgbmF0IC1YIFNDLU9VVA0KICAgICAgaXB0YWJsZXMgLXQgbmF0IC1Y IFNDLUlODQogICAgICA7Ow0KDQogICAqKQ0KICAgICAgZWNobyAiVXNhZ2U6 ICQwIHtzdGFydHxzdG9wfSINCiAgICAgIDs7DQplc2FjDQo= ---1463805952-604524489-1052710057=:8400--