firewalling the dedicated server

[Aimak]

Hi there.

Today I decided to play with the firewall that protects my Unreal server. And now a small question pops up: What ports shoul I open exclusively for the server? Is it necessary TCP and UDP or only UDP ports?

For sure I know few ports:
TCP 6668 for irc reporter
TCP 7777 server quering?
UDP 7778 <-- not sure of this

Is all that enough? Is all that correct? or :withstupid:

Thanx

[Azazel]

If you are running webadmin you need to open that port (which is +1000 whatever your game port is)

If you have selected 7777 as your game port (this is the default) then your server will want to listen to UDP ports 7777, 7778, 7779, 7780, and 7781.
If you want NGStats then you will need to open UDP port 9999.
If you want your server to talk to the Master Browser then open UDP port 27900.

Hope this helps

[Bry]

Originally Posted by Azazel

If you are running webadmin you need to open that port (which is +1000 whatever your game port is)

If you have selected 7777 as your game port (this is the default) then your server will want to listen to UDP ports 7777, 7778, 7779, 7780, and 7781.
If you want NGStats then you will need to open UDP port 9999.
If you want your server to talk to the Master Browser then open UDP port 27900.

Hope this helps

webadmin port is not necessarily +1000 it can be any port number at all that isnt in use

[Aimak]

well, at the end I set up the firewall so UCC can use any port I/O

it seems UCC uses some others UDP ports, but i have to play around more.

thanx all for pointing me the good direction

[WebSlinger]

Which IRC Reporter are you using?
(shameless plug in sig)

[Swedix]

Correct me if I'm wrong here, but afaik, webadmin use port 80 as default.
You can change it in your ini and that might be a good idea if you plan to use it outside a lan, i.e. via internet.

What type of firewall are you using?

/me high-fives Webby

[WebSlinger]

[:spam:]

Originally Posted by Swedix

/me high-fives Webby

WHOAH! Hi Swed!
[:spam:/]

yup 80 is default.

[Azazel]

Originally Posted by WebSlinger

Which IRC Reporter are you using?
(shameless plug in sig)

lmao @ WebSlinger nice 1

[Aimak]

Originally Posted by WebSlinger

Which IRC Reporter are you using?
(shameless plug in sig)

The IRC reporter I use is UT Reporter for several months. The only complain is that it gets kicked out of the IRC server for flood excess, in certain moments. Perhaps this cannot be resolved

The firewall I'm using is Tiny Personal Firewall 2.0, this a the free version With it, I got recently aware how my computer is been scanned several times per second. Most of the scanned ports are 7777 and 7778. Everytime is look at the logs I need a drink to forget what I see :gulp: :gulp: :gulp:

[Swedix]

I'm not used to Tiny Firewall, I use ZoneAlarm myself.
But can't you just allow UT to act as a server? Or must you specify the ports it's allowed to use?

[Aimak]

If you wanna stop all incoming connections thighly you must set up a detailed list of firewalling rules. This means you have to permit traffic only thru some ports, and close the rest. In my case, I not only stop incoming connections, also I stop outgoing ones.

A standard rule is to allow a program to listen any port, and use any port. This is the default rule made automaticaly by firewall programs. Dont know Zone well, but Tiny allows you to set the rules by hand. I find this very powerful.

[Azazel]

What you say is correct Swedix & Aimak for software firewalls, for hardware firewalls you have to implicitly specify which ports as it won't tell you which ones (unless you check the logs)

[The_Undertaker]

Aimak, i dunno if your already aware of this, but since a couple of days, there's a new version of a IRC Reporter (MvReporter 1.1) which should fix the excess flood problem now completely, according to the fix list.

I dunno if this is the same progr. as the 1 you mentioned, but you can get it here

[Aimak]

Originally Posted by The_Undertaker

Aimak, i dunno if your already aware of this, but since a couple of days, there's a new version of a IRC Reporter (MvReporter 1.1) which should fix the excess flood problem now completely, according to the fix list.

I dunno if this is the same progr. as the 1 you mentioned, but you can get it here

thanx m8, i didnt know about that irc reporter. Works great

The chanllenge is now to set up a nice firewall for my linux ut server. Here i cannot use the Tiny so im afraid i have to mess with iptables. If anyone knows something about firewalling in Linux, my eyes are fully open to read any suggestion.

Thanx everybuddy

[WebSlinger]

FYI that reporter is extended on our code. Mav did a great job with it at a time when Fury and I weren't able to develop.