Clients joining a host on a private LAN behind a NAT

Clients joining a host on a private LAN behind a NAT

[Thomas Stian Bergheim]

[-- Attachment #1: Type: text/plain, Size: 441 bytes --]

Hi,
 
I've asked this question before and got a few replies, nothing that made
it work, though.
 
I am behind a nat-firewall, and I want to be able to host a warcraft3
game (this works), and have other clients on my internal network join my
game. Right now they will see the game, but can't join it (which is
understandable).
 
I've tried a few starcraft-scripts, without much luck..
 
I'm using iptables. Any ideas?
 
Thanks,
 
 - Thomas
 

[-- Attachment #2: Type: text/html, Size: 5574 bytes --]

Re: Clients joining a host on a private LAN behind a NAT

[Daniel Chemko]

[-- Attachment #1: Type: text/plain, Size: 821 bytes --]

Not sure about WarIII, but some games need online auth before they can 
connect to the game. Is the game started in Internet or LAN mode?

When you say you can host the game, does that mean people from the 
internet can join, or does it mean that you can start the server program?

Thomas Stian Bergheim wrote:

> Hi,
>
>  
>
> I've asked this question before and got a few replies, nothing that 
> made it work, though.
>
>  
>
> I am behind a nat-firewall, and I want to be able to host a warcraft3 
> game (this works), and have other clients on my internal network join 
> my game. Right now they will see the game, but can't join it (which is 
> understandable).
>
>  
>
> I've tried a few starcraft-scripts, without much luck..
>
>  
>
> I'm using iptables. Any ideas?
>
>  
>
> Thanks,
>
>  
>
>  - Thomas
>
>  
>

[-- Attachment #2: Type: text/html, Size: 5642 bytes --]

RE: Clients joining a host on a private LAN behind a NAT

[Daniel Chemko]

[-- Attachment #1: Type: text/plain, Size: 2784 bytes --]

What you're internal LAN guys are trying to do is connect to the Internet game over the internet, so it is going through the firewall, then trying to get into the firewall back the way it came. If War 3 has a direct connect to server ip feature, try that. I forget the sane way to perform what I call a 'gateway loopback' on NATed firewalls.

 

-----Original Message-----
From: Thomas Stian Bergheim [mailto:bjartebe@eunet.no] 
Sent: Friday, September 26, 2003 7:44 AM
To: Daniel Chemko
Subject: SV: Clients joining a host on a private LAN behind a NAT

 

I'll try to explain better.

It's not really only related to war3 as far as I know, but it's the only game we have more than 1 cdkey so we can try.

 

You log on to battle.net, host a game, and then other players join your game. People from the internet can join, people from the lan cannot.

 

Here's the rule I use:

iptables -A PREROUTING -t nat -p tcp --dport 5000 -j DNAT --to 192.168.0.2:5000

iptables -A PREROUTING -t nat -p udp --dport 5000 -j DNAT --to 192.168.0.2:5000

 

... for making other people on the internet join games I host.

 

When someone on my LAN tries to join my game, this is what happens:

192.168.0.3 is on battle.net, sees the game that 192.168.0.2 hosted, tries to join, iptables sees that 3 is trying to join ext.ip, and rewrites the rule. Computer 3 sends a request to computer2, computer3 sends a reply to computer2, but computer2 never sendt a request to computer3, but the external ip, so the packet is dropped.

 

Atleast this is what I think is going on, I haven't been able to fix it though :/

 

 

 - Thomas 

 

-----Opprinnelig melding-----
Fra: netfilter-admin@lists.netfilter.org [mailto:netfilter-admin@lists.netfilter.org] På vegne av Daniel Chemko
Sendt: 26. september 2003 05:27
Til: Thomas Stian Bergheim
Kopi: netfilter@lists.netfilter.org
Emne: Re: Clients joining a host on a private LAN behind a NAT

 

Not sure about WarIII, but some games need online auth before they can connect to the game. Is the game started in Internet or LAN mode?

When you say you can host the game, does that mean people from the internet can join, or does it mean that you can start the server program?

Thomas Stian Bergheim wrote:



Hi,

 

I've asked this question before and got a few replies, nothing that made it work, though.

 

I am behind a nat-firewall, and I want to be able to host a warcraft3 game (this works), and have other clients on my internal network join my game. Right now they will see the game, but can't join it (which is understandable).

 

I've tried a few starcraft-scripts, without much luck..

 

I'm using iptables. Any ideas?

 

Thanks,

 

 - Thomas

 


[-- Attachment #2: Type: text/html, Size: 11620 bytes --]