[solved] IPTables

[mzracer360]

I asked this in the General forums, but since it turned out to be a Linux problem I thought Id ask here in the Linux specific forums. I can't seem to RCON into my server.

Here is my router setup, It doesn't have a lot of rows for ports so I put some together.


I also have my IPTables setup like so:
iptables -A TRUSTED -i eth0 -p tcp -m tcp --sport 27015 -j ACCEPT

I am using Ubuntu 6.10 LAMP Server.

[mrsako]

first of all why do you ned 2700 to 27039 open?

first thing you should try to fix this is open ALL ports and rcon to it. if it works with all ports open then you know its a firewall issue. if it doesnt work you know its a software issue.

also on the console use this command and copy and paste the output

iptables -L -v -n

it will show you the current setup of your iptables configuration. for some reason whatever IP tables UI your using may not be applying the rules correctly.

[Hollanda]

Do you have just a router or also a modem?

In the first case you have to open up more ports (use the search).

Second you need to double forward the ports.

Also you need to open up the ports in the firewall of the server.

[mzracer360]

I must be confused about the ports. Everyone tells me I need all ports open.

The ports I found that I need are:
Steam Main UDP UDP 27000 27015
Steam Main TCP TCP 27020 27039
Steam Dedicated Server HLDS, SRCDS UDP 27015 27015
Steam Dedicated Server HLTV UDP 27020 27020
Steam SRCDS Rcon TCP 27015 27015

Doesn't having 27000 to 27039 Both TCP and UDP cover all of those? To me it looks like it. Steam Main UDP from 27000 to 27015 is part of 27000 to 27039, so it Steam Main TCP 27020 to 27039. As mentioned before, my router settings doesn't give me a lot of space for ports so I combined all the necessary ports. Also, this is the same setup i had when I had my server on a Windows PC. RCON worked fine with that server.

I have a Linksys Wireless G Router (not using wireless connection for this setup though), a Netgear Gigabyte Switch and a D-Link Cable Modem.

iptables -L -v -n shows this:

Code:

Chain INPUT (policy ACCEPT 498K packets, 93M bytes)
pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:27015

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 482K packets, 59M bytes)
pkts bytes target     prot opt in     out     source               destination

[Hollanda]

If the modem is also a router you have to double forward ports.

[mrsako]

mzracer360 Wrote:I must be confused about the ports. Everyone tells me I need all ports open.

The ports I found that I need are:
Steam Main UDP UDP 27000 27015
Steam Main TCP TCP 27020 27039
Steam Dedicated Server HLDS, SRCDS UDP 27015 27015
Steam Dedicated Server HLTV UDP 27020 27020
Steam SRCDS Rcon TCP 27015 27015

Doesn't having 27000 to 27039 Both TCP and UDP cover all of those? To me it looks like it. Steam Main UDP from 27000 to 27015 is part of 27000 to 27039, so it Steam Main TCP 27020 to 27039. As mentioned before, my router settings doesn't give me a lot of space for ports so I combined all the necessary ports. Also, this is the same setup i had when I had my server on a Windows PC. RCON worked fine with that server.

I have a Linksys Wireless G Router (not using wireless connection for this setup though), a Netgear Gigabyte Switch and a D-Link Cable Modem.

iptables -L -v -n shows this:

Code:

Chain INPUT (policy ACCEPT 498K packets, 93M bytes)
pkts bytes target     prot opt in     out     source               destination
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:27015

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target     prot opt in     out     source               destination

Chain OUTPUT (policy ACCEPT 482K packets, 59M bytes)
pkts bytes target     prot opt in     out     source               destination

that output is showing that the configuration isn't being applied correctly.

also you want to open just the ports you need, dont open extra ones or else your prone to be abducted by aliens

[Enemy1]

You only need 1 incoming port - your gameport ex. 27015
This port must be forwarded to your servers ip.
The other ports is only outgoing, thouse can be blocked, but on some routers they all open.

[Battle-Hosting.com]

I set mine this way and Rcon works a treat

Code:

iptables -A INPUT -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT --dport 27015

iptables -A INPUT -p udp -m state --state NEW,ESTABLISHED -j ACCEPT --dport 27015

Hope that helps