First, create two services in the Definition admin section, say WinMX_TCP_6699 and WinMX_UDP_6257. The dport should be TCP 6699 and UDP 6257, respectively. Then create a service group and add these two services to it. Then go to Packet Filter to add a rule: Source Any, Service { WinMX }, To Server (whatever you need), Action Allow.
This should allow the WinMX traffic in. You also need the necessary rules for outbound traffic if you don't have that set up. You may already have a general rule to allow any traffic from your local network out.
Thanks I have tried but it seems not to work. I see that the persons come in tail, try to load but then they go in Time out. You have of the councils. Thanks
Your mainproblem is that the other user may use other Ports than the Standardport. In this case Astaro will block the Traffic, because it's a Firewall not a Softwarerouter. That means:
MX-User with IP-External Port 3000 (for example) will connect to your IP-External-NIC Port 6699 and he can't because Astaro will block it.
Make:
Networks: MX-Machine IP 192.168.0.33 (for example) Services: MX Fire tcp/udp 1:65535 1:65535 MX client tcp/udp 1:65535 6257:6699 NAT/Masquerading: MX Any -> *** your external Interface*** / MX Fire None MX-Machine / MX client Rules: Any MX Fire MX-Machine Allow
This will open ALL Ports but route them to the specified 6257-6699 on your target Machine, it's a little risky because all your Ports will show up as closed not as stealth but it should work.