SuSE Dedicated CSS LAN Server + Firewall enabled

[nitr8]

Hello

I got a question to all the experienced Linux users around here. I'm planning to setup up a CSS Server for a LAN party, everything is working so far - connecting to the CSS-Gameserver is possible with and without the firewall enabled.

But Steam in Windows makes trouble, because if i activate the firewall, Steam won't show the LAN server in it's LAN servers list anymore but connecting and playing is possible.

If i deactivate the firewall, i can see the server in the Steam's LAN server list. It's curious.

I got the same problem with HLSW, but if i enter the IP in the LAN list manually, it finds the server automatically. Refreshing the server list with firewall activated, doesn't make my server appear. But it appears, if i deactivate the firewall.

Background: I want to have the firewall enabled at the LAN party. But how do i configure the firewall to make the server possible to be seen in the Steam's LAN server list?

Anybody of you knows what to do?

Thanks for your help

Sincerely, nitr8.

[cryotek]

Since its only for a LAN party i don't see why you would need a firewall, is the firewall on the windows client server/ or within the router or on the server itself?

[nitr8]

cryotek Wrote:Since its only for a LAN party i don't see why you would need a firewall, is the firewall on the windows client server/ or within the router or on the server itself?

it's on the server itself.

[cryotek]

Hmm, looks like you'll have to set an iptables (assuming you are using iptables, i belive it should be like this...

/usr/sbin/ipmasqadm autofw -A -v -r udp 27015 27015 -h 192.168.1.4
/sbin/ipchains -A input -p udp -s $ANY 27015 -j ACCEPT

change the ip of course.

[nitr8]

is it somehow possible to remore the iptables, once i've set it?

[cryotek]

Yeah, remove it from your kernel, and remove it from any init scripts. I don't know how suse's init system works, so you'll have to refer to SuSe support for that.

[nitr8]

cryotek Wrote:Hmm, looks like you'll have to set an iptables (assuming you are using iptables, i belive it should be like this...

/usr/sbin/ipmasqadm autofw -A -v -r udp 27015 27015 -h 192.168.1.4
/sbin/ipchains -A input -p udp -s $ANY 27015 -j ACCEPT

change the ip of course.

looks like SuSE 9.3 doesn't provide ipmasqadm, also ipchains is missing.

Both packets are not installed on my machine.

I think i need to do it with iptables/netfilter.

But how?

[get]

use YaST to disable any firewall