Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 2 subscribers
  • Views 2112 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall problem for gaming

kernel_wall
Hello all,

i have a little problem here, i try to play to a game battlefield BC2 i allowed ports as required and even more following my firewall live log.

2011:10:30-15:06:24 R-HOME01 ulogd[5265]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="37" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="159.153.235.12" proto="6" length="206" tos="0x00" prec="0x00" ttl="127" srcport="49450" dstport="18395" tcpflags="ACK PSH" 
2011:10:30-15:06:30 R-HOME01 ulogd[5265]: id="2021" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped (GEOIP)" action="drop" fwrule="60019" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="213.8.254.177" proto="1" length="32" tos="0x00" prec="0x00" ttl="254" type="8" code="0" 
2011:10:30-15:06:34 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="159.153.235.26" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="49455" dstport="9946" tcpflags="SYN" 
2011:10:30-15:06:34 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:06:35 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:06:37 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:06:37 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="159.153.235.26" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="49455" dstport="9946" tcpflags="SYN" 
2011:10:30-15:06:38 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:06:39 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:06:40 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:06:41 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:06:56 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:06:57 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:06:58 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:06:58 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:07:00 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:07:01 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:07:02 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:07:04 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:07:05 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="46.249.40.252" proto="17" length="52" tos="0x00" prec="0x00" ttl="127" srcport="10000" dstport="19567" 
2011:10:30-15:07:05 R-HOME01 ulogd[5265]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="37" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="159.153.235.12" proto="6" length="117" tos="0x00" prec="0x00" ttl="127" srcport="49449" dstport="18390" tcpflags="ACK PSH" 
2011:10:30-15:07:05 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="159.153.235.26" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="49456" dstport="9946" tcpflags="SYN" 
2011:10:30-15:07:08 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="159.153.235.26" proto="6" length="52" tos="0x00" prec="0x00" ttl="127" srcport="49456" dstport="9946" tcpflags="SYN" 
2011:10:30-15:07:14 R-HOME01 ulogd[5265]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="eth1" outitf="eth0" srcmac="90:e6:ba:25:26:65" dstmac="0:10:f3:14:7d:77" srcip="192.168.5.50" dstip="159.153.235.26" proto="6" length="48" tos="0x00" prec="0x00" ttl="127" srcport="49456" dstport="9946" tcpflags="SYN" 


my firewall is as in attach .... and still getting the dropped packet [:@]

as i found on internet there is no need of NAT rules .... if that can help i can provide the full extract of the log file


This thread was automatically locked due to age.
  • 0
    Hi, do you have Masquerading setup for your LAN to the EXT interface?

    Barry
  • 0
    Near the top, you have "Packet dropped (GEOIP)" action="drop".  After that, there are drops of outbound traffic for ports 9946 and 19567 - neither of which appears to be in your BFBC2 group.

    Cheers - Bob
  • 0 in reply to BAlfson
    Thx for you answers !!!

    Bob: i'm more speaking about the port 10000 and some port in the TCP range i created .... the other drops are parts of th elog but not of my problem. i will try to post a more accurate log today

    Barry: Yes i have a masquerading rule between internal and external.

    cheers
    Flo
  • 0 in reply to kernel_wall
    Hey

    so tonight i tried it again in order to give you a complete and clear log report and it went OK i don't know why but no errors no packet dropped.... this is really strange. 

    like it took time to apply my changes .... 

    anyway problem solved thx all for you answers
  • 0 in reply to kernel_wall
    Hey

    so tonight i tried it again in order to give you a complete and clear log report and it went OK i don't know why but no errors no packet dropped.... this is really strange. 

    like it took time to apply my changes .... 

    anyway problem solved thx all for you answers


    Dear Kernel_wall!
    i see the error the same you, can you share what acction you took to resolve this error?
    thank you!