Hosting on Qwest DSL 1

[PortalUser]

Hello all, this is my first time on the forums, and i definintly don't know as much about networking as most of you, but i have a problem.

a few months ago, my family got Qwest DSL. Its been working great, but the problem is that it does not allow people outside of the local network (outside of the router) to access it. This mostly presents problems when trying to host multiplayer games and allow friends to get files out of shared files. They are able to ping me, yet they cannot access me. I've gotten some advice from a couple of my friends, it is vague at best. Something about setting up a DMZ, how to do this, i have absolutely no idea. I am using a Cisco 678 router on a second phone line, the router is connected to a switch, which is in turn connected to another switch, which is connected to my PC. I have a unused Cisco 678 router, btw, if there is any way to use this to host. I have all of the router package, and can if neccesary connect to the router that we are currently using with the management cable. Again, i don't know much about networking, i've only just scratched the surface on figuring out the router. But any help would be appreciated.

-Scott Pack, AKA Portal/PortalUser

 

[smah]

I just looked through the Cisco manual online and it doesn't look promising.

FYI, as you may be aware, DMZ stands demilitarized zone which in terms of computers basically puts a computer in this zone completely open to the internet, as if the router weren't there. This isn't very secure, but is a fairly common thing to do when playing some online games. Different games need certain 'ports' to be open on your computer (through the router). An alternative to putting the computer in the DMZ, is to use the router to forward the correct ports for the game to the appropriate computer. This is more secure, because only the neccessary ports are opened to the internet instead of every port (the whole computer).

Anyway, this model seems to be quite limited on what ports can be opened. You can open the Webserver port (80), the FTP port (21) and a couple of others. Unfortunately, these probably won't be the ones needed for your game.

 

[PortalUser]

Thanks for the input Smah.

Security really isn't an issue for me. I can be pretty secure when i want to, i've got a couple firewall programs and stuff, but even if i do get a virus or such, Reformatting isn't a big deal for me. I don't really do any work that is not backed up on a Different Hard Drive. You said that the outlook was "not promising." Does this mean that it is not possible to set it up as a DMZ host, or just that it is not possible/difficut to open specific ports as the game needs. Again, i have another router, is there any way i can use that to connect with all ports open?

 

[smah]

I didn't see anything about DMZ for this router. If I was familiar with this router (instead of just reading the online info), I would say it's definately not possible. But I'm not familiar with this router, so it's possible there's some capability not mentioned on the Cisco website. Wait for a second opinion, TheOldMan386 may have some knowledge about this router. In the meantime, you may find some interesting stuff by visting

http://www.google.com

and search for cisco 678 gamename. If I'm right you'll find others in the same boat.

I just re-read some of the Cisco info and part of what I said was wrong. The web port and ftp (tftp actually) was not for forwarding ports to an internal computer, it is for router management.

 

[PortalUser]

Thanks again,
Quick question...I know Google is the Search engine to use, i mean, seriously, what self-respecting web-user doesnt? And i know to search for Cisco, but why search for gamename?

 

[smah]

Sorry, poor explanation on my part. By gamename, I meant the name of the game that you are trying to get working. There are thousands of newgroups, bulliten boards, and forums out there. Most of the multiplayer games are very popular and many have their own (maybe unofficial) discussion boards. I'd be willing to bet that you aren't the first person with this router and this issue for this game. You may find a solution already worked out or you may find that it's not possible with this router.

 

[PortalUser]

Ah, i should have figured that out, lol

 

[smah]

Well, I just did some searching myself and it seems that I was wrong before. Either it's not clear in the online manual or I didn't read far enough. You can do port forwarding with this router. Here's some generic references:

http://www.seanet.com/help/dsl/qwest/portmapping.shtml

http://www.u.arizona.edu/~trw/games/example.htm

http://www.visi.com/support/dsl/nat.html

http://www.dslreports.com/forum/remark,3176543~root=ilec,uswest~mode=flat?r=246

http://www.aros.net/help/DSL/Html/network.shtml

You'll need to forward whatever ports you games & services require. You'll also probably want to assign a static ip address on your computer.

 

[PortalUser]

Wow! This could really work! Since my IP given to me by the router is 10.0.0.5, wouldn't the way to open all ports to myself be "set nat entry add 10.0.0.5"? I'm not able to test it tonight, because the router is in my parents room. (yes, my parents, I'm only 16) and I don't think my dad would like me playing around with his PC at 11:00 at night, but hey. I'll try it out tommorow afternoon. This really looks like it could work. Couple questions though, how does the Router know which local IP the person trying to access wants, if they are all the same external IP address distributed by the NAT, wouldn't typing in the computer on the networks IP address just bring up every shared computer on the network? Or does it somehow know specifically which computer the potential-accesser wants? Also, if I mess something up, as in, seriously mess something up somehow, is there anyway to return to previous settings? My dad will kill me if the internet is gone for more than about 30 minnutes.

I'll probably be back tommorow morning, I have Certified Network Administration and Computer Science first thing. Thank you SO MUCH for the time and energy you've put into this research. I've spent many hours trying to find any idea of what to do, and i just am scratching the surface. Put it this way, i am discovering HyperTerminal for the first time, LOL. One thing is for sure, you're on my helpful/expert list, thanks again!

 

[PortalUser]

I forgot another question, on the Static IP, does that mean that I have to lease a Static IP from Qwest, or do I just need to have a static local IP, IE '10.0.0.5' By the way, this thread doesn't go under the "lazy students posting homework" catorgory that I just noticed. The Network class I am taking is still learning how to reformat a computer (which I have been doing since i was 12-13), install a network client program, and finding the differences between hubs and switches. Too bad all of my classes aren't that easy!

 

[smah]

Yes, the command you typed above, would forward all ports to your computer, but don't do this. Even though you're not worried about reformatting, by doing this your are open to much more than viri. If a trojan program were placed onto your computer, you could unwittingly be part of the next big DDOS attack that could bring down the internet and you would never know. A hacker that could easily do this, wouldn't send you a note saying 'I've hacked your computer, you better reformat'. In addition, if someone can get into your computer, they can get to the rest of the computers on the network through yours.
It would be much better, to only forward the ports that are needed for your game and nothing more. If you must do this, as soon as you're done remove all forwarding with "set nat entry del all".

The 10.0.0.5 IP address has probably been assigned to your computer by the router. When you forward a port to this address it only goes to the computer with that IP address. Every computer on your local network will have a different IP address in the same subnet - 10.0.0.XXX The reason you might want to assign a static IP address to your compueter is because if the router is acting as a DHCP server, it is assigning the address to the computers on the lan - and it's possible, that it will assign you a different address next time, and another computer on the lan will get 10.0.0.5

Also, get dad's permission before modifying any of the router settings.

 

[LinuxPenguin]

Still need help? Email me at monk24@bellsouth.net

 

[PortalUser]

How would I find out which ports are required for the game, is there a utility I can run to find them, or do I just need to find them on the net?

 

[smah]

You may be able to find them on the net. Also, check the game manufacturer's web site - it's probably a FAQ. What's the game?

 

[PortalUser]

not just games, file-sharing as well. Mostly WarCraft III, Jedi Knight II, Star Trek Armada 2, Unreal Tournament, and Unreal Tournament 2003. Do you know if most games use common ports?

 

[PortalUser]

I've gotten to the point where people outside of the network can access a Username/Password screen. I've had them try everything there. I've made an account they have tried, the guest user, even my own user (with a changed password of course). But no matter what, they can't get through. I've done a little reading on it, and only found the suggestion of turning on simple file sharing, which was already enabled.

 

[smah]

Unreal Tournament seems to use 7777 according to my search. This was the only one I searched for. Most games will use different ports. Do a search for some of the others with the word 'port' or maybe 'open port'.

How are you planning to share files? - using windows file sharing on the internet is very dangerous. I won't tell you what port to open to do that.

What username and password are they being asked for? A windows user or the router admin.

When you get done opening ports, run the shields up test at

https://grc.com/x/ne.dll?bh0bkyd2

and all the tests at

http://www.pcflank.com/