wow ports iptables

[jason51]

when i open the ports 3724(tcp) and 8085 (tcp) a port check says PORTS CLOSED

 

the Authserver and Worldserver are running

how can i open the ports?

[StormByte]

You can use my config (which is working) for iptables:

# ALLOW WORLD OF WARCRAFT SERVERS
# Authserver
iptables -A INPUT -p tcp --dport 3724 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -p tcp --sport 3724 -m state --state ESTABLISHED -j ACCEPT

# server 1
iptables -A INPUT -p tcp --dport 8085 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -p tcp --sport 8085 -m state --state ESTABLISHED -j ACCEPT

# server 2
iptables -A INPUT -p tcp --dport 8086 -m state --state NEW,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -p tcp --sport 8086 -m state --state ESTABLISHED -j ACCEPT

[StormByte]

After that, be sure to save the rules so in a reboot it is already done (in gentoo for example it is /etc/init.d/iptables save).

Also I suggest to set the default policy to DROP, it is harder to configure, but way more secure. With:

iptables -P INPUT DROP

iptables -P OUTPUT DROP

Those two lines will drop all packets not matched by any rule (EVEN the output packets)

EDIT: I posted the iptables rules as it is mentioned in the topic. This will only open the ports, but not do NAT.

If you use a router, you should redirect also the ports to the machine running TC

Edited August 9, 2015 by StormByte

[jason51]

what i use is a dedicated server

it says PORTS ARE CLOSED

[jason51]

the rules are saved and are in the reboot

 

the Auth and World are running under the linux program screen

Edited August 9, 2015 by jason51

[StormByte]

With a dedicated server, you should be able to log in via ssh, and do the commands I put before. If you are using any GUI to configure it, it is unknown for me and I can't help with that.

But I suggest login via SSH, a dedicated server requires some linux knowledge

[jason51]

i do the commands via ssh but still CLOSED

[StormByte]

They should be opened, unless your provider puts a firewall on top of yours. What is the output of iptables -L ?

I suggest sending them an email in case they have some sort of port filtering

[jason51]

all other ports are open

only 3724 and 8085 still closed

i tried this in a virtual maschine and there are the same problem with iptables. without iptables it works

[StormByte]

It is working for me, sorry I can't help you further

[jason51]

i have the rules added wrong in the iptables

 

i have a reject all section in my iptables

Edited August 9, 2015 by jason51

[StormByte]

You don't need a reject all rule, and that is also not good, as if this rule is before any other, all will be rejected despite further rules.

To set reject all, it is better to change the policy, as I stated before, with -P command.

Also, I suggest you to delete all rules and redo them from scratch