Firewall Ports

[bobmook]

I tried a search but found TOO much actually for it to be useful so here goes. I'f i'm understanding the various configuration files correctly I need to redirect all traffic on ports 7995-7999 and port 5999 to my internal server address from my router. Just a quick yea or nay would suffice and I'd appreciate it. I'm 99% sure I'm correct but I've made some big mistakes being 99% sure about things.

[mattmeck]

and 9000 too i think.

[voetsek]

i had the following

5900-5999 TCP/UDP
7900-7999 TCP/UDP
9000 TCP/UDP

and i never got it working.

[Eglin]

The official eq faq indicates that tcp and udp packets may be sent/recieved on _any_ port >1024. If all you really wanted was a "yea or nay," then I think this counts as a "nay."

[voetsek]

i have everything below 1024 blocked, and anything extra i dont want available, i filted on the firewall and left the rest open.

[bobmook]

Well what I'm probably going to have to do is set up a DMZ. I host for some folks and I can't really open up security risks for them (thus my timidity in opening any ports at all) I'm using a cisco 2514 w/ 2 ethernet inputs and the cisco firewall package on a 1500/1500 dsl line, so setting up a DMZ may be more of a challenge than getting my server (Which is tested and working) online. BTW my server building experience is an interesting little tale which I wiill post next, those who aren't interested may want to avoid it.

[bobmook]

and here's the story of my server.
I was cleaning my basement (which is where all the computer magic happens around here) and I started to notice various leftovers from clients who'd left things behind and/or things from my PC upgrades. At first I was thinking "man there's some decent stuff here" then I found the AMD 2000+ and the gigabyte of ddr ram. At that point I thought "Holy shit I can build a server out of old parts!"
Here's what I ended up with.
AMD Athlon 2000+
1 gig ram
soyo kt 333 dragon ultra MB (w/ onboard raid)
40 gig mirrored array
I can't wait till I can bring it online.

[mattmeck]

The official eq faq indicates that tcp and udp packets may be sent/recieved on _any_ port >1024

but this isnt official EQ......just forward the ports
5900-5999 TCP/UDP
7900-7999 TCP/UDP
9000 TCP/UDP


rember if you are running more or less zones this will change some of them, and you will run the server just fine.

[Eglin]

His first post didn't specify a server-only config.

If security-sesitive services are run on the same lan as the to-be eqemu box, you'd better be firewalling traffic between the various internal servers, too.