How do you experience hosting a session behind a router (with NAT funcationallity)?

[wbplomp]

Hi,

Several people I know (inluding me) seem to have troube to hosting a session behind a router with NAT functionality? We all have configured the nessecary settings (like port forwarding, network address translation or application sharing), but it does not seem to work. It only works when the public IP Address is bound to the local host.

What is your experience? (if you got it to work, share how you fixed it)

Boudewijn

[EPHeliGuy]

Are you sure you're in the right forum? We usually limit our posts to Helicopters.

[Pinecone]

This is about hosting Phoenix sessions, and it is posted in the Phoenix section, so what't the problem?

[WJackson]

Try enabling QOS ,, thats what did the trick for me.

[jlr]

I'm afraid the answer is going to depend more on the specific router/firewall than anything else. Since your able to get it work by binding the external address to a specific internal node, it sounds like something in the router configuration. Have you checked for firmware updates for your routher?

--Jeff

[brgsstm]

If you have UPNP enabled disable it. Usually does the trick. :thumbup:

Tom

[dkpodder]

Any other suggestions, still can't get it right....

[MrRoth]

According to Phoneix website

Phoenix Ports
Phoenix uses UDP ports 9000 - 9005 to communicate online. You will need to open or forward this range of ports to your local IP address. After this has been accomplished, you may need to reset/reboot your router to make the changes take effect. You mnay also need to reboot your computer.

I have just open those ports on my D-Link DIR-655 and it works for me.

[dkpodder]

Still no-go.

Tried allmost everything.

I've setup a sniffer program, and I can see the network packages reach my pc, but it still doesn't work. Tried with two friends, if the one created the session, it worked, but not when the two other of us did.

[MrRoth]

Have you tried to setup a DMZ?

[dkpodder]

Yes, tried dmz zone, tried uninstalling software firewall, tried disabling hardware firewall

[MrRoth]

Sound weird! What router do you have? Is your ISP allowing to open all ports?

[dkpodder]

My ISP (tdc.dk) allows all ports, except port 25 (incomming and outgoing) and port 119 (outgoing not allowed)

Router/firewall is a ZyWall2 Plus

[MrRoth]

Ok...

Try another router and se if that helps...

Other than that I dont know. Have tried it on D-link 4300 gaming router and DIR-655.
Works like a charm...

[widower]

If DMZ didn't work, then I question if it's a NAT problem. You could try connecting your pc directly to the internet just for a test. That would totally rule out NAT.

Do you have any software firewalls running?

[dkpodder]

Interesting piont, windower.

No software firewall, tried with and without windows firewall enabled. Tried using a new router and dmz, all without success.

Then I connected directly and got my public ip locally, and it worked right away....

Any suggestions on how to make it work behind NAT ?

[DebianDog]

You may have to do some port forwarding

[widower]

You may have to do some port forwarding

If he's really using dmz, then all ports are open so forwarding would do nothing.

Your test of sitting outside of the nat proves that if you have software firewall or something else weird trying to protect your ports, is not causing a problem. It also proves that your ISP isn't trying to do some weird filtering. Sometimes they look for server traffic and shut it down.

I'd be interested in seeing your network settings using the command 'ipconfig /all'. Both when in dmz, and when no nat is involved. Also, would like to see the wan settings and dmz settings in your router. BUT, don't post this publicly. If you send them to me, I could try running a few pings, etc from my end while you are in dmz.

Sorry I don't have phoenix to test with. Only realflight.

[DebianDog]

He would have to BE the DMZ. If you are talking about at the router (being in DMZ mode) then I suppose yes but that is a but dangerous and I would not suggest that... running Windows at least. ;)

Some home routers refer to a DMZ host. A home router DMZ host is a host on the internal network that has all ports exposed, except those ports forwarded otherwise. By definition this is not a true DMZ, since it provides no security between the host and the internal network. That is, the DMZ host is able to connect to hosts on the internal network, but hosts in a real DMZ are prevented from doing so by the firewall that sits between them

[widower]

that is a but dangerous

LOL. Very dangerous.

What do you mean by 'BE'?

[dkpodder]

I'll send You the ip-settings, when I change to the other router (simpler interface, weaker protection than the ZyWall)

Port forwarding (UDP 9000-9005) tried several times, without success.

[widower]

Hey, why don't you also try shieldsUp at www.grc.com

It will be able to validate that the ports are really open. You can specify the ports that phonix uses and see if grc.com can communicate with those ports on you computer.

[LockMD]

Hey, why don't you also try shieldsUp at www.grc.com (http://www.grc.com)

It will be able to validate that the ports are really open. You can specify the ports that phonix uses and see if grc.com can communicate with those ports on you computer.



No matter what I change in my router setting the only results I can get are stealth or closed, never open :confused:

any ideas?

[LockMD]

Problem solved replaced d-link router!!!


I cant say for d-link in general but seems the lower end models STINK!