IPTABLES, MASQ & Red Faction

Tekime · 07-24-2002, 01:46 PM

I'm trying to get a dedicated RF server running on my LAN. I'm having a REALLY hard time finding any help on how to construct my IPTABLES rules to allow my server to be seen, and also to show up on the master list.

The server is running on 192.168.0.4, and I need to have the server show up on my external interface. Any help at all would be awesome, even a HOWTO on general rules for game server would help me out.

I'm running Red Hat 7.2, kernel 2.4 on my Linux gateway, using MASQ to translate connections to/from my LAN.

Thanks a lot

neo77777 · 07-24-2002, 02:48 PM

try stronger firewall from http://www.tldp.org/HOWTO/IP-Masquer...-examples.html
just read through it, and configure it to reflect your system.

Tekime · 07-24-2002, 03:00 PM

Thanks neo, I'll check that out. You think this will allow me to run a server from inside my LAN then? I can play fine -- it's the serve I need

Thanks again!

turnip · 07-24-2002, 03:32 PM

What ports does the server use? All you need is to forward them into the LAN and prolly allow pings to show in the master server list.

Tekime · 07-24-2002, 03:44 PM

I think port 7755, I'm just not sure about the rule... I still haven't mastered iptables and I haven't found much hunting on google...

Thanks, I'll keep reading up

turnip · 07-24-2002, 04:49 PM

iptables -t nat -A PREROUTING -p tcp -i $EXTIF --dport 7755 -j DNAT --to 192.168..

iptables -t nat -A PREROUTING -p udp -i $EXTIF --dport 7755 -j DNAT --to 192.168..

Just replace extif with the interface on your machine, ppp0 for dsl or eth0 for cable.

Tekime · 07-25-2002, 08:20 AM

Awesome! Thanks so much turnip

I'll try these rules out tonight; might sound simple to you but I just haven't been able to get the correct rules down

Hopefully RF plays nice...

Thanks again

bbenz3 · 08-20-2003, 12:56 PM

I don't like to set it to use the port 7755 b/c it can cause problems with other servers running on port 7755. So I use a randomly high number and these are the two lines needed to make it work.

iptables -I FORWARD -i eth1 -o eth0 -p udp --dport xxxx -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

iptables -t nat -I PREROUTING -p udp --dport xxxxx -j DNAT --to 192.168.168.yyy

where xxxxx is the port number you want to use
and yyy is the IP of the system you want to run the server on

eth1 is the external NIC in your router and eth0 is your internal NIC

You don't need to enable the tcp on these ports as many games these days don't use tcp but rather use udp.