I want to open some ports for my entire home network so my roommates can play one of their games. I have the ports open under NAT rules, but when i put the dst-nat to address 0.0.0.0 or 0.0.0.0/0, the traffic doesn’t seem to reach the machines…(or one machine is getting all of the traffic???)
Can someone help me with this? I have a home server that must use the same ports that their game does, so its necessary to have those ports open to all machines on the network… not just forwarded to a specific IP address.
is there a way to just open that port then and not forward? maybe in the filters use the Input / Accept filter chain?
I really want to avoid having to change ports for my home server as I have several clients running off it and it would be a pain to have to change them all over.
I’d really just like all traffic destined for port 5222 and 5223 to be “accepted” into the network and any machines can respond to it… is this possible?
do you only have a single external IP? You can only forward those ports to one machine if you only have 1 ip. You could forward them to multiple machines in round robin/random fashion, but I doubt that helps. How do you suppose the router would know which gaming machine the request on 5222 would be wanting to talk to on the inside?
This all runs from my house… and I have a single public IP (dynamic - but that doesn’t matter)
I have a home server that runs a few different services for myself and a few friends and clients (instant messaging, email, game servers… etc.)
My home server needs ports 5222 and 5223 TCP to go to it since this is the ports my instant messaging service listens on.
The problem is, my roommates also run a game that requires these ports to be open… otherwise they cannot connect.
Basically they go to connect to the game, the outbound connection gets established but then when the server responds the traffic gets forwarded over to my home server instead of back to their pc… essentially blocking them from running this game.
I would like to just allow ports 5222 and 5223 to be completely publically open if possible since it is a lot of trouble to change ports for my home server and all of the clients that look to it.
I’m not a routing pro unfortunately… so i’m not sure how to accomplish this using mikrotik. I thought i could just use NAT rules to dst-nat forward all traffic destined to ports 5222 and 5223 coming into my WAN port over to 0.0.0.0 or 0.0.0.0/0 (all addresses) but that did not work.
Hopefully this helps! Thanks again guys for the fast responses!
EDIT: Maybe i’m using the wrong terminology here and getting everyone off-track… i’m looking to accomplish this anyway possible… it does not just have to be done via NAT forwarding rules. Perhaps filters or something else??? Thanks again
EDIT EDIT: Didn’t notice that it was ChangeIp that was posting! I use your services for dynamic forwarding of addresses! Love it!
bummer. if you only have a single public IP you can only forward those ports to one machine or the other. However, is it possible to do some trickery with address-lists and somehow put their game servers in an address-list and use alternate dst-nat rules that are run on for those sources? If you can identify a netblock that the game servers use you could probabyl make it work.
I don’t say it’s impossible, but those fixed ports sound a little strange. Nowadays many ISPs have to use NAT to hide several customers behind single public IP address. And if they don’t, there’s NAT on some customer’s home router (like yours) for sure. In both cases, only one user behind the public IP address would be able to play the game if server really insisted on connecting to client’s fixed port. Such game would not work for half of all users.
