Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    WAN clients can connect but LAN cannot connect to a game server using WPEPro

    Firewalling
    3
    13
    4384
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cheeky
      last edited by

      Here's my problem:
      I have a game server in my internal LAN, NATted under latest pfsense (ADSL, WAN/LAN setup).
      I'm using WPEPro in my game server to convert LAN IP to WAN IP (to facilitate login) in order for my external clients to login.
      If WPEPro is enabled, WAN users can connect to my server but LAN cannot.
      If WPEPro is disabled, WAN users cannot connect to my servers but LAN users can.
      But if i use a basic Linksys BEFSR41 router intead of pfsense, all clients (LAN & WAN) can connect whenever WPEPro is enabled.
      I running out of ideas why is it like this, but i definitely want to use pfsense as my firewall than the Linksys.
      Please help.
      Thank you.

      1 Reply Last reply Reply Quote 0
      • GruensFroeschliG
        GruensFroeschli
        last edited by

        Which Game?
        What does WPEPro do?
        You could try to:
        Point your WAN-address to your internal server address (on the DNS-forwarder config page)

        We do what we must, because we can.

        Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

        1 Reply Last reply Reply Quote 0
        • C
          cheeky
          last edited by

          Which Game?
          -RAN Online

          What does WPEPro do?
          -WPEPro changes the returned packet info (LAN IP to a WAN IP and vice versa) if client connects using WAN address so that it can communicate successfully to the client software

          You could try to:
          Point your WAN-address to your internal server address (on the DNS-forwarder config page)
          -how do i do this please?

          Thanks for the reply.

          1 Reply Last reply Reply Quote 0
          • GruensFroeschliG
            GruensFroeschli
            last edited by

            Did you even try ??? ???

            hint:

            (on the DNS-forwarder config page)

            We do what we must, because we can.

            Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

            1 Reply Last reply Reply Quote 0
            • C
              cheeky
              last edited by

              I tried adding this entry at the DNS forwarder config:

              halang   5x.69.xx.109   192.168.1.153   CheekyRAN

              Is it right? Sorry, noob here.

              Problem still exist.

              1 Reply Last reply Reply Quote 0
              • GruensFroeschliG
                GruensFroeschli
                last edited by

                the first and the second field build together the address.

                ie: psymia.mine.nu is the address under which my server is reachable
                –>
                Host: psymia
                Domain: mine.nu
                IP: 10.0.0.10

                We do what we must, because we can.

                Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                1 Reply Last reply Reply Quote 0
                • C
                  cheeky
                  last edited by

                  Followed your advice in the DNS forwarder, same problem exists.
                  LAN clients still cannot connect to the game server but WAN clients can.
                  Here's the link of the procedure that i used to setup WPEPro for my server, hope this can explain more my problem.

                  http://forum.ragezone.com/f248/guide-server-connection-failed-totally-solved-people-behind-router-359401/

                  Thanks in advance.

                  1 Reply Last reply Reply Quote 0
                  • GruensFroeschliG
                    GruensFroeschli
                    last edited by

                    Is there some documentation on what WPEPro really does?
                    Because from what you describe (and what i saw following your link) it seems as if it rewrites all packages your server sends.
                    I'm not really sure how that even works in the first place…

                    We do what we must, because we can.

                    Asking questions the smart way: http://www.catb.org/esr/faqs/smart-questions.html

                    1 Reply Last reply Reply Quote 0
                    • H
                      hoba
                      last edited by

                      Do the LAN-Users try to access that server by it's public IP or private IP?

                      1 Reply Last reply Reply Quote 0
                      • C
                        cheeky
                        last edited by

                        @hoba

                        LAN clients access the server via its private IP, ie 192.168.1.153.

                        while WAN clients access the server via the Public IP, ie 58.6x.15x.1x9. passing thru the NATted firewall.

                        If i disable the WPEPro, LAN clients can connect but WAN now cannot connect.

                        What intrigues me is that if a basic router such Linksys BEFSR41 (1WAN port, 4 LAN port) is used, LAN and WAN clients both can connect using WPEPRO.

                        1 Reply Last reply Reply Quote 0
                        • C
                          cheeky
                          last edited by

                          Here is also the documentation of WPEPro:

                          http://wpepro.net/

                          Thanks again for your time helping me solve this problem.

                          1 Reply Last reply Reply Quote 0
                          • H
                            hoba
                            last edited by

                            That doesn't make sense at all. pfSense is not sitting between the LAN-Clients and your Server. It absolutely can't block or restrict anything between a LAN-client and a server at LAN. You have a problem with that server not with pfSense imo.

                            1 Reply Last reply Reply Quote 0
                            • C
                              cheeky
                              last edited by

                              My game server is running fine, replacing pfsense with a basic router that have 4 LAN ports readily solves the problem. But if under pfsense, problem exists.
                              But i still want to use pfsense because i want to filter some WAN IP's trying to connect to my server without my authorization. Such features is not present in many commercial routers available.
                              Any other suggestions please, to resolve my problem? Do you know of any routers that can block specific public IP adresses from connecting to a game server. Thank you very much.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post