FreeBSD ipf/ipnat box Warcraft 3 routing probleem

[Verwijderd]

Ik run FreeBSD 4.7 RELEASE en ik wil Warcraft 3 games hosten.
Alles lukt verder maar een custom game maken en dat andere mij joinen dat lukt dus niet.
Ik heb een ipf/ipnat setup op m'n box.
Ik ben nog niet super thuis in de FreeBSD wereld maar ik ben er toch al een paar dagen mee bezig vandaar deze topic.

Blizzard geeft zelf deze informatie:
Warcraft III:
Allow port 6112 TCP out and allow established sessions in
Allow port 6112 TCP in (hosting custom games)
Allow port 6113-6119 TCP out and in (hosting custom games if you’ve changed the default port in the Options/Gameplay screen)

Maar toch kom ik er zelf niet uit.

Mijn ipf.rules ziet er zo uit:

block in quick on ed0 from 192.168.0.0/16 to any
block in quick on ed0 from 172.16.0.0/12 to any
block in quick on ed0 from 127.0.0.0/8 to any
block in quick on ed0 from 10.0.0.0/8 to any
block in quick on ed0 from 169.254.0.0/16 to any
block in quick on ed0 from 192.0.2.0/24 to any
block in quick on ed0 from 204.152.64.0/23 to any
block in quick on ed0 from 224.0.0.0/3 to any
block in quick on ed0 from 255.255.255.255/32 to any
block in quick on ed0 from 0.0.0.0/32 to any
block out quick on ed0 from any to 192.168.0.0/16
block out quick on ed0 from any to 172.16.0.0/12
block out quick on ed0 from any to 127.0.0.0/8
block out quick on ed0 from any to 10.0.0.0/8
block out quick on ed0 from any to 169.254.0.0/16
block out quick on ed0 from any to 192.0.2.0/24
block out quick on ed0 from any to 204.152.64.0/23
block out quick on ed0 from any to 224.0.0.0/3
block out quick on ed0 from any to 255.255.255.255/32
block out quick on ed0 from any to 0.0.0.0/32

# drop any IP packets with options set in them
block in quick all with ipopts
block in quick all with frag
block in quick all with short
block return-rst in quick proto tcp all flags FUP

# This host only runs sshd. no other services plus ftpd
pass in quick on ed0 proto tcp from any to any port = 22 flags S keep state
pass in quick on ed0 proto tcp from any to any port = 21 flags S keep state


# open ports for wc3
pass in quick on ed0 proto tcp from any to any port 6110 >< 6120
pass out quick on ed0 proto tcp from any to any port 6110 >< 6120

# To receive traceroute replies
pass in quick on ed0 proto icmp from any to any icmp-type timex keep state
pass in quick on ed0 proto icmp from any to any icmp-type echorep

# Outbound traffic from our own IPs is allowed
# Could be made more strict for icmp
pass out quick on ed0 proto tcp/udp from 212.238.193.97/32 to any
pass out quick on ed0 proto tcp/udp from 212.238.193.97/24 to any
pass out quick on ed0 proto icmp from 212.238.193.97/32 to any
pass out quick on ed0 proto icmp from 192.168.1.0/24 to any

# Block and log all remaining traffic coming into the firewall
block return-rst in log quick on ed0 proto tcp from any to any
block return-icmp-as-dest(port-unr) in log quick on ed0 proto udp from any to any
block in log quick on ed0 all

#################################################################
# Inside Interface
#################################################################
#----------------------------------------------------------------
# Allow out all TCP. UDP. and ICMP traffic & keep state
#----------------------------------------------------------------
pass out quick on rl0 proto tcp from any to any
pass out quick on rl0 proto udp from any to any
pass out quick on rl0 proto icmp from any to any

#----------------------------------------------------------------
# Allow in all TCP. UDP. and ICMP traffic & keep state
#----------------------------------------------------------------
pass in quick on rl0 proto tcp from any to any
pass in quick on rl0 proto udp from any to any
pass in quick on rl0 proto icmp from any to any

Mijn ipnat.rules ziet er zo uit:

map ed0 from 192.168.1.1 port = 6112 to any -> 0/32 portmap tcp 6110:6120
map ed0 from 192.168.1.1 to any port = 6112 -> 0/32 portmap tcp 6110:6120
rdr ed0 EXTERNIP/32 port 6110-6120 -> 192.168.1.2 port 6112 tcp/udp
rdr ed0 EXTERNIP/32 port 6210-6220 -> 192.168.1.3 port 6212 tcp/udp
map ed0 192.168.1.1/24 -> 0/32 proxy port ftp ftp/tcp
map ed0 192.168.1.1/24 -> 0/32 portmap tcp/udp auto
map ed0 192.168.1.1/24 -> 0/32

Ik hoop dat iemand ziet wat ik fout doe of hoe het anders moet.

Graag uw hulp

[Verwijderd]

Fixed!

[Predator]

en de oplossing was ?

(handig voor de search namelijk)

[ Voor 47% gewijzigd door Predator op 29-11-2002 13:13 ]