HLDS and iptables

[Indig0]

I've installed HLDS on a dedicated machine running CentOS 6 and opened all ports in this list using similar commands to these of course changing udp to tcp where necessary:

iptables -A INPUT -p udp -m udp --sport 27000:27030 --dport 1025:65355 -j ACCEPT
iptables -A INPUT -p udp -m udp --sport 4380 --dport 1025:65355 -j ACCEPT

Server connects to master and VAC servers, however nobody can connect to the server and it's not listed in favorites list (100% that ip/port is right).

If I turn off iptables it works as expected. I'm not an expert of using them so maybe I'm setting something wrong? For many other reasons I cannot leave iptables off.

Thanks!

[Broetchen]

According to this wiki and my own experiences you need to open 27015 udp/tcp only.

Also, you seem to have accidently swapped -sport and -dport in your INPUT rule. With those rules all clients connecting through port 27000 to 27030 on their side can connect to your server ports ranging from 1025 to 65355.

These are the INPUT rules that I use for my server:

iptables -A INPUT -p udp --dport 27015 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
iptables -A INPUT -p tcp --dport 27015 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT

That way UDP and TCP connections from anywhere going to any ip of the server at port 27015 are allowed.

[Indig0]

Hi, thanks for your reply, swaping source/destination ports was a good point but in my case that wasn't the cause of the problem.

Apparently default settings for my iptables (on CentOS 6) had REJECT rule at the end of the INPUT chain so when using iptables -A INPUT (which means append at the end of the chain) my rules were never reached as packets were rejected by the rule above. Solution was to use iptables -I INPUT <number of last rule (which is REJECT)>.

[Broetchen]

Got the order of my rules wrong once and didn't notice first, too. Glad you found the solution! :)

[Ltk]

Good lock!

[Bilbon89]

quoi

[Bilbon89]

il y a t il quelqu un

[Bilbon89]

[R@iMb0w]

nice =)

[Phobos #SMURF]

!

[Solo]

Originally posted by Indig0:

I've installed HLDS on a dedicated machine running CentOS 6 and opened all ports in this list using similar commands to these of course changing udp to tcp where necessary:

iptables -A INPUT -p udp -m udp --sport 27000:27030 --dport 1025:65355 -j ACCEPT
iptables -A INPUT -p udp -m udp --sport 4380 --dport 1025:65355 -j ACCEPT

Server connects to master and VAC servers, however nobody can connect to the server and it's not listed in favorites list (100% that ip/port is right).

If I turn off iptables it works as expected. I'm not an expert of using them so maybe I'm setting something wrong? For many other reasons I cannot leave iptables off.

Thanks!