Why lock down those ports to specific master server or update server
IPs? That really ties your hands if a server goes down or Valve decides
to change an IP address.
Master server traffic is UDP, but I think downloading updates is done
over TCP. I have iptables rules on my game servers to allow the
following in and drop everything else:
TCP 27015 (for rcon)
UDP 1200
UDP 27000-27015
ICMP echo-request
ICMP echo-reply
ICMP destination-unreachable
ICMP time-exceeded
TCP ESTABLISHED/RELATED
UDP ESTABLISHED/RELATED
I don't block any outgoing traffic on these servers. This setup works
very well for me and I never seem to have any connectivity problems.
- Dave
Daniel Nilsson wrote:
> Im in progress of securing my debian box with some well formatted lines
> of rules. What i would like to do is the following.
>
> 1. Block everything in and out
> 2. Allow needed things in and out.
>
> Atm im allowing udp connections to my server for my clients. Tcp
> connection is only allowed if the source is correct. (for the stats and
> some more)
>
> But i have some problems. Update will not work, neither connection to
> the master server.
>
> So the question is what ip´s does those update/masterservers have?
> And what ports do i need to open up so my server can be updated and
> connect to the master/update server?
> vac server ip?
> And also are those ip´s tcp or udp?
> More ip´s i need to open up against?
>
>
> //Daniel
>
>
> __________ Information from ESET NOD32 Antivirus, version of virus signature
> database 4706 (20091221) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>
>
>
> _______________________________________________
> To unsubscribe, edit your list preferences, or view the list archives, please
> visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds_linux
>
--
Dave Parker
Utica College
Integrated Information Technology Services
(315) 792-3229
Registered Linux User #408177
_______________________________________________
To unsubscribe, edit your list preferences, or view the list archives, please
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds_linux
