This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Just wanna make sure I didn't leave a hole

Hey!
Just got my second Astaro installed, had my first one years ago. I know have a ton more appliances to contend with. My first project is to get COD:Black Ops up and running.

After researching and not finding the solution I decided to run the Live Log and opened ports as needed. I finally got it working and have uploaded JPG's of my changes.

Could someone tell me if I have left a gaping hole in my security?

My concern is one of the filters. Any->SteamGroup->External Address

Thanks!

This thread was automatically locked due to age.

0 BarryG over 14 years ago

Hi, your first PacketFilter rule should have 'speed-PC' in the DEST field.

Otherwise looks OK.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 EricH over 14 years ago in reply to BarryG

Cool,
Made the change and the game play is good. I still see a lot of drop packets, but I haven't yet tested all of Steam's functionality or COD for that matter.

If possible I will do a write up on this as a "How To" for the average dude and submit it to the KB.
Cancel
Vote Up 0 Vote Down

Cancel
0 EricH over 14 years ago in reply to EricH

Can I create an "availability group" with all machines running steam on my internal network, and point steam traffic to the group?

I have only one machine with steam otherwise I would try it out.

Next onto the NAS, Wii, and PS3
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 14 years ago

I don't think that would work.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 AngeloC over 14 years ago

AFAIK, you dont need to forward internal services from the outside to accomodate steam. I never have. All communication is initiated outgoing and then the replies are handled by the statefullness of the packet filter. As long as your outgoing ports are allowed (say by internal network->any=allow for a very broad example) then it all works fine.

If you are running a personal server or something from home, then you'll need to do some incoming rules...
Cancel
Vote Up 0 Vote Down

Cancel
0 EricH over 14 years ago in reply to AngeloC

Good to know, thanks!
Cancel
Vote Up 0 Vote Down

Cancel