Firewall, router config doobrey

[RichardWhitely]

stolen from elsewhere:

Briefly, you need to open TCP ports 6667, 28910, 29900, 29901, 29920 and UDP ports 6500, 27900, 27901, 29910, and forward UDP port 6112 to your machine if you want to host.

iptables config:

Code Select Expand

# Create chain for Internet traffic
/sbin/iptables -N INET-IN
# Accept/forward existing connections
/sbin/iptables -A INET-IN -m state --state ESTABLISHED,RELATED -j ACCEPT
# Accept all the new connections from secure devices
/sbin/iptables -A INET-IN -m state --state NEW -i ! ppp0 -j ACCEPT

# Your other rules here...

# Gamespy
/sbin/iptables -A INET-IN -p tcp -m tcp --dport 6667 --tcp-flags SYN,RST,ACK SYN -j ACCEPT
/sbin/iptables -A INET-IN -p tcp -m tcp --dport 28910 --tcp-flags SYN,RST,ACK SYN -j ACCEPT
/sbin/iptables -A INET-IN -p tcp -m tcp --dport 29900 --tcp-flags SYN,RST,ACK SYN -j ACCEPT
/sbin/iptables -A INET-IN -p tcp -m tcp --dport 29901 --tcp-flags SYN,RST,ACK SYN -j ACCEPT
/sbin/iptables -A INET-IN -p tcp -m tcp --dport 29920 --tcp-flags SYN,RST,ACK SYN -j ACCEPT
/sbin/iptables -A INET-IN -p udp -m udp --dport 6500 -j ACCEPT
/sbin/iptables -A INET-IN -p udp -m udp --dport 27900 -j ACCEPT
/sbin/iptables -A INET-IN -p udp -m udp --dport 27901 -j ACCEPT
/sbin/iptables -A INET-IN -p udp -m udp --dport 29910 -j ACCEPT

# Warhammer 40K: Dawn of War host
/sbin/iptables -t nat -A PREROUTING -i ppp0 -p udp --dport 6112 -j DNAT --to-dest 10.10.10.10
/sbin/iptables -A FORWARD -i ppp0 -p udp --dport 6112 -d 10.10.10.10 -j ACCEPT

"ppp0" is the Internet connection.
"-A INET-IN" means to add the rule to the chain INET-IN, the one I use to process Internet traffic. Rename it to the chain you use, or remove it if you are using the default chain.
"10.10.10.10" is the IP of the hosting machine

[Undergrid]

Ok, I think thats direct play or something, but why does the 6667 ring alarm bells in my head....?   Hrm.....

[|fury|]

it'll be the ingame chat probably..

[ricsi]

I'm almost positive you are right UG. Ill check on my config tonight.

[RichardWhitely]

6667, 28910, 29900, 29901, 29920 are all used to get the gamespy client within dawn of war working without any issues.

Dawn of war itself only uses 6112.

[|fury|]

6667 is for IRC hence why i'm assuming it's for the in-game chat