Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 21 May 2001 17:41:10 -0700
From:      "vipor" <vipor_1@hotmail.com>
To:        <freebsd-questions@freebsd.org>
Subject:   I need help with ipfw
Message-ID:  <OE24vNpqY1Yf1U8AVIB000059f2@hotmail.com>

next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.

------=_NextPart_000_000D_01C0E21D.391859C0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hello,

I have a freebsd 4.3 stable running natd with IPFW.
natd_interface=3D"ed0"

# Outside interface
oif=3D"ed0"

# Inside interface
iif=3D"xl0"

I would like to know how to set up my ipfw to allow  in or out  going =
tcp or
udp packets !!!
I am trying to play some online games at msn gaming zone --->
http://zone.msn.com


but  my lan computers are unable to do this.So I looked  udp /
tcp ports that should be  open
but i am unable to get  it to   work !!! here is all of the info that i
have.

######################################################################
#
# This article describes the ports required to play games with other =
players
on the MSN
# Gaming Zone through a firewall, proxy server, Network Address =
Translation
(NAT),
# or Internet Connection Sharing (ICS).
# MORE INFORMATION
# To play games on the MSN Gaming Zone through a network firewall or =
proxy
server,
# the following requirements must be met:
# Your network administrator must configure the firewall or proxy server =
to
allow the
# games to pass information through the proxy server or firewall.
# The following TCP ports on the firewall must be open:

6667
 28800 - 29000

Connection
Initial TCP Connection
47624 Outbound
47624 Inbound
Subsequent TCP Inbound
2300-2400
Subsequent TCP Outbound
2300-2400
Subsequent UDP Inbound
2300-2400
Subsequent UDP Outbound
2300-2400

######################################################
#
#THIS IS WHAT I HAVE TRIED BUT IT DOES NOT WORK...8-(
# TCP RULES

        ${fwcmd} add pass tcp from any 6667 to any 6667
        ${fwcmd} add pass tcp from any 2300-2400 to any  2300-2400
        ${fwcmd} add pass tcp from any 47624 to any 47624
        ${fwcmd} add pass tcp from any 28800-29000 to any 28800-29000
# TCP RULES

        ${fwcmd} add pass tcp from any 6667 to any 6667
        ${fwcmd} add pass tcp from any 2300-2400 to any  2300-2400
        ${fwcmd} add pass tcp from any 47624 to any 47624
        ${fwcmd} add pass tcp from any 28800-29000 to any 28800-2900

I am open to any suggestions!!!!!!
and if you need any  more info just ask and i will try to get it..
Thanks for taking the time to read this 8-)

laters
VIPOR
vipor_1@hotmail.com

------=_NextPart_000_000D_01C0E21D.391859C0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 5.50.4522.1800" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV>Hello,<BR><BR>I have a freebsd 4.3 stable running natd with=20
IPFW.<BR>natd_interface=3D"ed0"<BR><BR># Outside =
interface<BR>oif=3D"ed0"<BR><BR>#=20
Inside interface<BR>iif=3D"xl0"<BR><BR>I would like to know how to set =
up my ipfw=20
to allow&nbsp; in or out&nbsp; going tcp or<BR>udp packets !!!<BR>I am =
trying to=20
play some online games at msn gaming zone ---&gt;<BR><A=20
href=3D"http://zone.msn.com">http://zone.msn.com</A><BR><BR><BR>but&nbsp;=
 my lan=20
computers are unable to do this.So I looked&nbsp; udp /<BR>tcp ports =
that should=20
be&nbsp; open<BR>but i am unable to get&nbsp; it to&nbsp;&nbsp; work !!! =
here is=20
all of the info that=20
i<BR>have.<BR><BR>#######################################################=
###############<BR>#<BR>#=20
This article describes the ports required to play games with other =
players<BR>on=20
the MSN<BR># Gaming Zone through a firewall, proxy server, Network =
Address=20
Translation<BR>(NAT),<BR># or Internet Connection Sharing (ICS).<BR># =
MORE=20
INFORMATION<BR># To play games on the MSN Gaming Zone through a network =
firewall=20
or proxy<BR>server,<BR># the following requirements must be met:<BR># =
Your=20
network administrator must configure the firewall or proxy server =
to<BR>allow=20
the<BR># games to pass information through the proxy server or =
firewall.<BR>#=20
The following TCP ports on the firewall must be =
open:<BR><BR>6667<BR>&nbsp;28800=20
- 29000<BR><BR>Connection<BR>Initial TCP Connection<BR>47624 =
Outbound<BR>47624=20
Inbound<BR>Subsequent TCP Inbound<BR>2300-2400<BR>Subsequent TCP=20
Outbound<BR>2300-2400<BR>Subsequent UDP =
Inbound<BR>2300-2400<BR>Subsequent UDP=20
Outbound<BR>2300-2400<BR><BR>############################################=
##########<BR>#<BR>#THIS=20
IS WHAT I HAVE TRIED BUT IT DOES NOT WORK...8-(<BR># TCP=20
RULES<BR><BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ${fwcmd} add =
pass tcp=20
from any 6667 to any 6667<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
${fwcmd}=20
add pass tcp from any 2300-2400 to any&nbsp;=20
2300-2400<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ${fwcmd} add =
pass tcp=20
from any 47624 to any =
47624<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
${fwcmd} add pass tcp from any 28800-29000 to any 28800-29000<BR># TCP=20
RULES<BR><BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ${fwcmd} add =
pass tcp=20
from any 6667 to any 6667<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
${fwcmd}=20
add pass tcp from any 2300-2400 to any&nbsp;=20
2300-2400<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ${fwcmd} add =
pass tcp=20
from any 47624 to any =
47624<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
${fwcmd} add pass tcp from any 28800-29000 to any 28800-2900<BR><BR>I am =
open to=20
any suggestions!!!!!!<BR>and if you need any&nbsp; more info just ask =
and i will=20
try to get it..<BR>Thanks for taking the time to read this=20
8-)<BR><BR>laters<BR>VIPOR</DIV>
<DIV><A=20
href=3D"mailto:vipor_1@hotmail.com">vipor_1@hotmail.com</A></DIV></BODY><=
/HTML>

------=_NextPart_000_000D_01C0E21D.391859C0--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?OE24vNpqY1Yf1U8AVIB000059f2>