Firewall configuration problem | Project Zomboid | Page 1

lean crypt Jul 21, 2023, 3:09 PM

#

We are also seeing Raknet packets only when the firewall is disabled

#

(I'm helping to setup the serv)

#

We suspect steam to be contacting the server on a unknown port that is unfortunately blocked because we don't know it

limber adder Jul 21, 2023, 4:58 PM

#

So the server works without firewall, but does not without it?

#

How is the server installed exactly?

lean crypt Jul 21, 2023, 5:12 PM

#

limber adder So the server works without firewall, but does not without it?

Exactly

lean crypt Jul 21, 2023, 5:12 PM

#

limber adder How is the server installed exactly?

@stuck basin should be able to provide this information

stuck basin Jul 21, 2023, 10:19 PM

#

Hello beard, for now it work without firewall but we are stuck on "getting serv info" the moment we enable the firewall. The server is host with a VPS running debian 11. I follow the steps of this tutoriel : https://pzwiki.net/wiki/Dedicated_server

Dedicated server

limber adder Jul 21, 2023, 10:31 PM

#

stuck basin Hello beard, for now it work without firewall but we are stuck on "getting serv ...

Hm, and what is the specific firewall you enable? UFW? Or is it a VPS specific firewall?

#

I have an Ubuntu server and I only have 16261 and 16262 open through UFW, nothing else and it works fine

stuck basin Jul 21, 2023, 10:38 PM

#

We are now using the VPS firewall; we were previously using iptables, but since we are currently experiencing a DDoS attack, we wanted to strengthen security.

limber adder Jul 21, 2023, 10:51 PM

#

I see, I am not exactly sure what to suggest in that case as it would mean there might be a problem with the VPS firewall?

#

Arent the logs in Wireshark all outgoing ones?

#

You should generally not block any outgoing traffic as far as I am aware

lean crypt Jul 21, 2023, 11:03 PM

#

Outgoing traffic isn't blocked (we have everything accepted)

#

And the capture comes from a client, we were looking at the used ports

#

But we would like to know, do you have any idea of how Raknet and CLASSIC-STUN are used in PZ ?

#

Because we only see the client using them when the firewall is disabled

#

And the fact is, the ports used for these protocols seem pretty random

#

=================================

#

I didn't mention that but that's really important -> This is a connection issue, the already connected players stay connected

#

We found this post talking about it https://theindiestone.com/forums/index.php?/profile/66135-silltop/

#

Raknet seems to be the network library used by PZ

#

And classic stun, a NAT traversal protocol

limber adder Jul 22, 2023, 8:55 AM

#

lean crypt But we would like to know, do you have any idea of how Raknet and CLASSIC-STUN a...

I do not, though as mentioned, only 16261 and 16262 are necessary. If your VPS blocks any extra traffic then that would be a VPS issue

#

I will ask the devs about the Raknet though

lean crypt Jul 22, 2023, 12:56 PM

#

We've just seen steam is indeed contacting our server

#

But the port seems random and that's exactly our issue

stuck basin Jul 22, 2023, 1:01 PM

#

limber adder Jul 22, 2023, 1:22 PM

#

CLASSIC STUN is supposedly just for routing traffic behind private routers

#

Meaning there is a problem with your firewall setup most likely, that is all I can say about it. The server itself is fine

lean crypt Jul 22, 2023, 1:32 PM

#

Another solution would be to forward the traffic to cloudflare but in order to do this we should be able to input an hostname instead of an ip for a serv

#

Like that

#

Is this possible ? In 2020 it was discussed but apparently devs didn't want to implement it

#

Ok so steam doesn't broadcast any url

limber adder Jul 22, 2023, 1:41 PM

#

The connection will go through, but the server will not be queried

#

Meaning it will always show as offline

stuck basin Jul 22, 2023, 2:13 PM

#

we will contact the VPS support, thanx for all you anwsers beard

#Firewall configuration problem