Trials of Atlantis does not work via NAT router

In article <c66hee$8m5gh$1@ID-91342.news.uni-berlin.de>, Hauke Joachim Zuehl wrote:
> I have a bad problem:
> I use a Linux NAT router for my connection to the internet. So my route
> is:
> Win 98 --- Router --- DSL modem --- Internet

My config is:

WinXP --- Linux box --- DSL modem --- internet

and it works fine. Here's how I've got things set up (the DSL modem is on
eth1, and my LAN is on eth0):

iptables -F
iptables -A FORWARD -i eth1 -o eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i eth0 -o eth1 -j ACCEPT
iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
iptables -N block
iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A block -m state --state NEW -p tcp --dport 22 -j ACCEPT
iptables -A block -m state --state NEW -p tcp --dport 80 -j ACCEPT
iptables -A block -m state --state NEW -p tcp --dport 443 -j ACCEPT
iptables -A block -m state --state NEW -i ! eth1 -j ACCEPT
iptables -A block -p tcp --dport 113 -j REJECT
iptables -A block -j DROP
iptables -A INPUT -j block
iptables -A FORWARD -j block
echo 1 > /proc/sys/net/ipv4/ip_forward


--
--Tim Smith
 >> Stay informed about: Trials of Atlantis does not work via NAT router 

Nils Zonneveld wrote:

>
>
> Looks a bit like my config, another reason to wait with ToA.....

Well, I heard that ToA works fine even with a local router system

> Besides I have no level 50 characters yet, and what I understood is that
> ToA is mainly focused on high level characters.

Hehe
Sorry, I don't know anything about that )
I am just the local system administrator. The gamer is my fiancee *g*.

> Nils

Regards,
Hauke
--
> Sitze ich vor einer Winkiste bekomm ich hier die Kriese.
Ja, Windows ist wie Sackhuepfen ohne Beine.
----
diskless und valencia im Heise-Forum
 >> Stay informed about: Trials of Atlantis does not work via NAT router 

Tim Smith wrote:


> My config is:
>
> WinXP --- Linux box --- DSL modem --- internet

Hmmm....same here. Except we have Win98 running....strange...

>
> and it works fine. Here's how I've got things set up (the DSL modem is on
> eth1, and my LAN is on eth0):

Yes, we have it the other round. eth0 is DSL and eth1 is LAN.

> [list of rules]

Well, I took the built-in "firewall" shipped with Woody. The strange thing is
that older versions of DAoC work fine with our system. So I think there is a
little bug in the german version of ToA.

Here are my rules of FORWARD an *ROUTING chains / tables:
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere tcp dpt:webcache
ACCEPT all -- 192.168.1.0/24 1.1.1.0/24
ACCEPT all -- 1.1.1.0/24 192.168.1.0/24
ACCEPT all -- 1.1.1.0/24 anywhere
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED
ACCEPT all -- 192.168.1.0/24 anywhere
ACCEPT all -- anywhere anywhere state
RELATED,ESTABLISHED
LOG all -- anywhere 1.1.1.0/24 LOG level warning
DROP all -- anywhere 1.1.1.0/24
LOG all -- anywhere 192.168.1.0/24 LOG level warning
DROP all -- anywhere 192.168.1.0/24
LOG all -- anywhere anywhere LOG level warning
REJECT all -- anywhere anywhere reject-with
icmp-port-unreachable

Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT udp -- anywhere anywhere udp
spts:1024:65353 dpt:7777 to:192.168.1.14:7777
DNAT tcp -- anywhere anywhere tcp
spts:1024:65535 dpt:webcache to:192.168.1.14:8080
REDIRECT tcp -- fuchur.meding-zuehl.net anywhere tcp dpt:www
redir ports 3128
REDIRECT tcp -- helios.meding-zuehl.net anywhere tcp dpt:www
redir ports 3128
REDIRECT tcp -- helena.meding-zuehl.net anywhere tcp dpt:www
redir ports 3128
REDIRECT tcp -- hera.meding-zuehl.net anywhere tcp dpt:www
redir ports 3128
REDIRECT tcp -- devil.meding-zuehl.net anywhere tcp dpt:www
redir ports 3128
REDIRECT tcp -- 192.168.1.117 anywhere tcp dpt:www redir
ports 3128

Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- 1.1.1.0/24 anywhere
MASQUERADE all -- 192.168.1.0/24 anywhere


The wierd thing is that even with policies changed to ACCEPT for all chains
and only activating masquerading in POSTROUTING the game does not work.

Btw:
Which game server do you use (ip address)? Maybe it is a problem of the
server?

Regards,
Hauke
--
> Sitze ich vor einer Winkiste bekomm ich hier die Kriese.
Ja, Windows ist wie Sackhuepfen ohne Beine.
----
diskless und valencia im Heise-Forum
 >> Stay informed about: Trials of Atlantis does not work via NAT router