Trials of Atlantis does not work via NAT router

[Guest]

Archived from groups: alt.games.dark-age-of-camelot (More info?)

Hi

I have a bad problem:
I use a Linux NAT router for my connection to the internet. So my route
is:
Win 98 --- Router --- DSL modem --- Internet

The point is:
I can login to the system but after loading the game I get no response
by the game server to the windos client.

The connection is built up to a login server which will guide thru the
login process. Then a connection to 193.252.123.134 on port 10622 will
be established. The connection holds for about 2 minutes then
193.252.123.134 closes the connection while nothing happened in the
game (connection to the internet is still up and running).

All ports on all protocols are widely open (all chains have policy
ACCEPT) and I also tried a direct port forwarding from ppp0 to the
client computer. Of course network address translation (NAT) is
activated (I could not connect to the internet out of the local net
without NAT).

This is the last part of a log made by iptraf:
hauke@athene:/tmp$ grep 134 camelot-log.txt
Tue Apr 20 00:16:24 2004; TCP; eth1; 48 bytes; from 192.168.1.15:1031 to
193.252.123.134:10622; first packet (SYN)
Tue Apr 20 00:16:24 2004; TCP; eth1; 48 bytes; from
193.252.123.134:10622 to 192.168.1.15:1031; first packet (SYN)
Tue Apr 20 00:43:10 2004; TCP; eth1; 48 bytes; from 192.168.1.15:1030 to
193.252.123.134:10622; first packet (SYN)
Tue Apr 20 00:46:05 2004; TCP; eth1; 40 bytes; from 192.168.1.15:1030 to
193.252.123.134:10622; Connection reset; 1 packets, 40 bytes; opposite
direction 0 packets, 0 bytes
hauke@athene:/tmp$


Former versions of DAoC work perfectly except ToA

Btw:
Default policy is DROP but I changed it while trying to connect

Client system is:
Win 98 SE
Trials of Atlantis installed fresh from CD (german version)

Router system is
Linux 2.4
Debian GNU/Linux "Woody"

Any hints appreciated

Kind regards,
Hauke Zuehl
--
> Sitze ich vor einer Winkiste bekomm ich hier die Kriese.
Ja, Windows ist wie Sackhuepfen ohne Beine.
----
diskless und valencia im Heise-Forum

 

[Guest]

Archived from groups: alt.games.dark-age-of-camelot (More info?)

Hauke Joachim Zuehl wrote:

> Hi
>
> I have a bad problem:
> I use a Linux NAT router for my connection to the internet. So my route
> is:
> Win 98 --- Router --- DSL modem --- Internet
>


Looks a bit like my config, another reason to wait with ToA.....


Besides I have no level 50 characters yet, and what I understood is that
ToA is mainly focused on high level characters.

Nils

 

[Guest]

Archived from groups: alt.games.dark-age-of-camelot (More info?)

In article <c66hee$8m5gh$1@ID-91342.news.uni-berlin.de>, Hauke Joachim Zuehl wrote:
> I have a bad problem:
> I use a Linux NAT router for my connection to the internet. So my route
> is:
> Win 98 --- Router --- DSL modem --- Internet

My config is:

WinXP --- Linux box --- DSL modem --- internet

and it works fine. Here's how I've got things set up (the DSL modem is on
eth1, and my LAN is on eth0):

iptables -F
iptables -A FORWARD -i eth1 -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth0 -o eth1 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
iptables -N block
iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A block -m state --state NEW -p tcp --dport 22 -j ACCEPT
iptables -A block -m state --state NEW -p tcp --dport 80 -j ACCEPT
iptables -A block -m state --state NEW -p tcp --dport 443 -j ACCEPT
iptables -A block -m state --state NEW -i ! eth1 -j ACCEPT
iptables -A block -p tcp --dport 113 -j REJECT
iptables -A block -j DROP
iptables -A INPUT -j block
iptables -A FORWARD -j block
echo 1 > /proc/sys/net/ipv4/ip_forward


--
--Tim Smith

 

[Guest]

Archived from groups: alt.games.dark-age-of-camelot (More info?)

Nils Zonneveld wrote:

>
>
> Looks a bit like my config, another reason to wait with ToA.....

Well, I heard that ToA works fine even with a local router system

> Besides I have no level 50 characters yet, and what I understood is that
> ToA is mainly focused on high level characters.

Hehe
Sorry, I don't know anything about that )
I am just the local system administrator. The gamer is my fiancee *g*.

> Nils

Regards,
Hauke
--
> Sitze ich vor einer Winkiste bekomm ich hier die Kriese.
Ja, Windows ist wie Sackhuepfen ohne Beine.
----
diskless und valencia im Heise-Forum

 

[Guest]

Archived from groups: alt.games.dark-age-of-camelot (More info?)

Tim Smith wrote:


> My config is:
>
> WinXP --- Linux box --- DSL modem --- internet

Hmmm....same here. Except we have Win98 running....strange...

>
> and it works fine. Here's how I've got things set up (the DSL modem is on
> eth1, and my LAN is on eth0):

Yes, we have it the other round. eth0 is DSL and eth1 is LAN.

> [list of rules]

Well, I took the built-in "firewall" shipped with Woody. The strange thing is
that older versions of DAoC work fine with our system. So I think there is a
little bug in the german version of ToA.

Here are my rules of FORWARD an *ROUTING chains / tables:
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpt:webcache
ACCEPT all -- 192.168.1.0/24 1.1.1.0/24
ACCEPT all -- 1.1.1.0/24 192.168.1.0/24
ACCEPT all -- 1.1.1.0/24 anywhere
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED
ACCEPT all -- 192.168.1.0/24 anywhere
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED
LOG all -- anywhere 1.1.1.0/24 LOG level warning
DROP all -- anywhere 1.1.1.0/24
LOG all -- anywhere 192.168.1.0/24 LOG level warning
DROP all -- anywhere 192.168.1.0/24
LOG all -- anywhere anywhere LOG level warning
REJECT all -- anywhere anywhere reject-with
icmp-port-unreachable

Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT udp -- anywhere anywhere udp
spts:1024:65353 dpt:7777 to:192.168.1.14:7777
DNAT tcp -- anywhere anywhere tcp
spts:1024:65535 dpt:webcache to:192.168.1.14:8080
REDIRECT tcp -- fuchur.meding-zuehl.net anywhere tcp dpt:www
redir ports 3128
REDIRECT tcp -- helios.meding-zuehl.net anywhere tcp dpt:www
redir ports 3128
REDIRECT tcp -- helena.meding-zuehl.net anywhere tcp dpt:www
redir ports 3128
REDIRECT tcp -- hera.meding-zuehl.net anywhere tcp dpt:www
redir ports 3128
REDIRECT tcp -- devil.meding-zuehl.net anywhere tcp dpt:www
redir ports 3128
REDIRECT tcp -- 192.168.1.117 anywhere tcp dpt:www redir
ports 3128

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 1.1.1.0/24 anywhere
MASQUERADE all -- 192.168.1.0/24 anywhere


The wierd thing is that even with policies changed to ACCEPT for all chains
and only activating masquerading in POSTROUTING the game does not work.

Btw:
Which game server do you use (ip address)? Maybe it is a problem of the
server?

Regards,
Hauke
--
> Sitze ich vor einer Winkiste bekomm ich hier die Kriese.
Ja, Windows ist wie Sackhuepfen ohne Beine.
----
diskless und valencia im Heise-Forum