Topic: IPTables for hosting a NWN Gameserver

[Paul]

I've spent a few hours reading all the posts regarding IPTables and how to host a gameserver on the e-smith box itself, including the How-To's, but I"m still pretty stumped.

I understand that the Esmith 5.6 server will not forward UDP packets, you have to just open the ports.  I've also read you should create a fragment and expand it from a template, but I don't get that at all.

I am trying to run a Neverwinter Nights server on my E-smith 5.6 box.

The ports according to the NWN website that need to be open are:
    *  Source port: 5121-5300
    * Destination port: 5120-5129

I've used the port opening RPM and opened all the ports one by one.  
Clients couldn't see the server or connect when running on the E-smith server.

Then I tried to host the NWN server on a seperate box running Red Hat 8, believing those ports weren't open.  Clients couldn't see the server or connect.

That didn't work (and then I deleted them one by one from the server manager - ugh).

Then what I did is run from a command prompt for the ports that need to be opened:

iptables -A INPUT -p udp --dport 5121:5300 -j ACCEPT

However, clients still cannot see the game or connect.

Running the command: iptables -L shows:

ACCEPT     udp  --  anywhere             anywhere           udp dpt:5120
ACCEPT     udp  --  anywhere             anywhere           udp dpt:6500
ACCEPT     udp  --  anywhere             anywhere           udp dpt:27900
ACCEPT     udp  --  anywhere             anywhere           udp dpt:28900
ACCEPT     udp  --  anywhere             anywhere           udp dpts:5121:5300
 Which are the ports that need to be open per http://nwn.bioware.com/support/techfaq.html .

Is iptables being logged in var/log?  If so, which file or directory?  I was thinking maybe I could look at the log to see if it was dropping and/or denying requests on port 5121.

Any or all advice is appreciated.

Thanks.

Paul

[Jon Blakely]

Paul,

Presumably you have an ADSL modem/router. If it includes a nat firewall you will also have to open the ports on the router.

Jon

[Paul]

Unfortunately, I have a DOCSIS cable modem that doesn't do NAT/Routing with Roadrunner.

I used to run a Jedi Knight II server (Quake 3 engine) on a Red Hat 7.3 box behind an SME 5.5 server using the port forwarding RPM as well, with no issues, which is one reason why I'm so stumped.  

[Jon Blakely]

Paul, by the way I just tested adding a range of ports in the port opening page

e.g TCP
      2000:3000

and guess what, it works.

Jon