Firewall Ports

bobmook · #1 12-30-2003, 07:14 AM

I tried a search but found TOO much actually for it to be useful so here goes. I'f i'm understanding the various configuration files correctly I need to redirect all traffic on ports 7995-7999 and port 5999 to my internal server address from my router. Just a quick yea or nay would suffice and I'd appreciate it. I'm 99% sure I'm correct but I've made some big mistakes being 99% sure about things.

#2 12-30-2003, 07:16 AM

and 9000 too i think.

voetsek · #3 12-31-2003, 01:11 AM

i had the following

5900-5999 TCP/UDP
7900-7999 TCP/UDP
9000 TCP/UDP

and i never got it working.

Eglin · #4 12-31-2003, 02:40 AM

The official eq faq indicates that tcp and udp packets may be sent/recieved on _any_ port >1024. If all you really wanted was a "yea or nay," then I think this counts as a "nay."

voetsek · #5 12-31-2003, 02:57 AM

i have everything below 1024 blocked, and anything extra i dont want available, i filted on the firewall and left the rest open.

bobmook · #6 12-31-2003, 08:41 AM

Well what I'm probably going to have to do is set up a DMZ. I host for some folks and I can't really open up security risks for them (thus my timidity in opening any ports at all) I'm using a cisco 2514 w/ 2 ethernet inputs and the cisco firewall package on a 1500/1500 dsl line, so setting up a DMZ may be more of a challenge than getting my server (Which is tested and working) online. BTW my server building experience is an interesting little tale which I wiill post next, those who aren't interested may want to avoid it.

bobmook · #7 12-31-2003, 08:50 AM

and here's the story of my server.
I was cleaning my basement (which is where all the computer magic happens around here) and I started to notice various leftovers from clients who'd left things behind and/or things from my PC upgrades. At first I was thinking "man there's some decent stuff here" then I found the AMD 2000+ and the gigabyte of ddr ram. At that point I thought "Holy shit I can build a server out of old parts!"
Here's what I ended up with.
AMD Athlon 2000+
1 gig ram
soyo kt 333 dragon ultra MB (w/ onboard raid)
40 gig mirrored array
I can't wait till I can bring it online.

#8 12-31-2003, 09:10 AM

Quote:

The official eq faq indicates that tcp and udp packets may be sent/recieved on _any_ port >1024

but this isnt official EQ......just forward the ports

Quote:

5900-5999 TCP/UDP
7900-7999 TCP/UDP
9000 TCP/UDP

rember if you are running more or less zones this will change some of them, and you will run the server just fine.

Eglin · #9 12-31-2003, 03:08 PM

His first post didn't specify a server-only config.

If security-sesitive services are run on the same lan as the to-be eqemu box, you'd better be firewalling traffic between the various internal servers, too.