PDA

View Full Version : Setting up CS server for my son and his buddies - Port forwarding in Windows 2K3


Mastiff
11-03-06, 11:22 AM
I'm gonna let my son play CS with his buddies by running the game in server mode (standard 1.6, non dedicated) on his computer, mostly like a LAN game. I can do port forwarding in the M0n0wall firewall without any problems (I have found a port range to set, TCP: 27030 to 27039 and UDP: 1200. 27000 to 27015), but that's only the outer range of defences. Next step is the server for my home network. I have two networks, one with direct Internet access and one with access through a Windows 2K3 server. And my son's on the second one. So what do I need to do on 2K3 to forward the ports that's been forwarded to it from the M0n0wall?

Thanks in advance!

Incesticide
11-03-06, 01:39 PM
You need to configure the settings in Routing and Remote Access. You are probably looking for something that says "Services and Ports." I've never setup 2k3 as a router though, and I don't plan to, so I can't walk you through the configuration. Perhaps someone who has more experience with this can help you more?

Mastiff
11-03-06, 01:45 PM
Thanks. There is a port setting, but I haven't been able to do anythingwith that since it's only miniports with PPTP and L2TP (VPN), and I can't add anything to it. There's something called Static Routes there as well, but hat has to be another thing since it hasn't got a ports setting, only Destination IP, Network mask and "Metric", whatever that is. I have tried to find it, and it's not my first time around 2K3, I justh haven't done anything like this before. :(

Incesticide
11-03-06, 01:48 PM
Wait, are you using ICS on your 2k3 server? Sounds like you are, otherwise there would be an entry for your NAT route.

edit: I think a worthwhile project would be to remove double NAT from your network. Leverage the strengths of both your m0nowall and your 2k3 server. I would suggest plugging everything into the same broadcast domain, then using m0n0wall for your routing and firewall, and your 2k3 server for DNS and DHCP. You could even take it a step further AND enable RRAS on your server and setup m0n0wall to forward ports in for VPN access, authenticated against AD :)

Mastiff
11-03-06, 02:27 PM
Thanks, but that's not possible. The line from the M0n0wall, outside my own server, is a shared Internet connection I manage between several houses in my area (wirelessly connected - I live out in the sticks...). And no, I use Routing and Remote Access, not ICS. So I agree, logically there should be something about NAT routing, but I'm probably just so stupid I can't find it...

Incesticide
11-03-06, 07:52 PM
http://www.microsoft.com/technet/community/columns/cableguy/cg0503.mspx

Don't beat up yourself, this one was pretty non-obvious. I couldn't even find a full description in my Full set of MCSE Training Books :O from microsoft press. Or at least they wanted you to set it up and play with it to find the specifics of the feature, which is fine, I just don't have a 2k3 server on hand to trash :)

Mastiff
11-04-06, 07:19 AM
I love you, and I want to have your children! Wait a minute, that may not be biologically possible... ;) Thank you very much! It works like a charm, at least I can access the CS server on my son's computer from the network outside of the Win 2K3 Server! :D I haven't tried it from the Internet yet, but I can't see that being a problem.

Incesticide
11-06-06, 03:01 PM
Sweet! I'm glad to know it worked. And hey, I'm sure we could find someone to splice our DNA and implant it in to a willing donor @_@. Anyway, good luck, I don't see why you would have any issues either. If you PM me your external IP address I can verify connectivity using nmap, if you want.

Mastiff
11-10-06, 10:44 AM
Well, I have one issue: I'm unable to add my server to the list of favourite servers on the computer of the other guy. I try to click "Add server", but nothing happens. Gotta look around the web and find out how. I don't want to mess with Gamespy Arcade or even install it on the computer, if I don't absolutely have to. Do you have any idea how to do this? I tried looking through the config files, but didn't find anything there.