<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.5pt;
font-family:Consolas;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:Consolas;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoPlainText>Sorry about this.. formatting problems again... </p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Hi All… <o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>I have set up a grid in my home, and trying to let a
friend connect. <o:p></o:p></p>
<p class=MsoPlainText>Having some problems… and I know it has to do with my
iptables… at least I think so… <o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>I have all 5 servers and one sim running on:<o:p></o:p></p>
<p class=MsoPlainText>192.168.1.181<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>I have the domain name grid.gridaverse.com pointed to my
external IP address:<o:p></o:p></p>
<p class=MsoPlainText>98.100.106.10<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>In my firewall script I have added the following rules
for forwarding:<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A INPUT -i $EXTIF -m state --state
NEW,ESTABLISHED,RELATED -p tcp -s $UNIVERSE -d $EXTIP --dport 8000:8006 -j
ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A INPUT -i $EXTIF -m state --state
NEW,ESTABLISHED,RELATED -p tcp -s $UNIVERSE -d $EXTIP --dport 8895 -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A INPUT -i $EXTIF -m state --state
NEW,ESTABLISHED,RELATED -p tcp -s $UNIVERSE -d $EXTIP --dport 9000:9001 -j
ACCEPT<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8002 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8002 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.181:8002<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8001 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8001 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.181:8001<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8000 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.181:8000<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8003 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8003 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.181:8003<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8004 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8004 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.181:8004<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8005 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8005 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.181:8005<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8006 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8006 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.181:8006<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8895 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8895 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.181:8895<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
9000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
9000 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.181:9000<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p udp --dport
9000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A PREROUTING -t nat -p udp -d $EXTIP --dport
9000 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.181:9000<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
9001 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
9001 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.181:9001<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p udp --dport
9001 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -A PREROUTING -t nat -p udp -d $EXTIP --dport
9001 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to 192.168.1.181:9001<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Also per the site
http://opensimulator.org/wiki/Network_Settings I added these:<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -t nat -A OUTPUT --dst 98.100.106.10 -p tcp
--dport 9000:9010 -j DNAT --to-destination 192.168.1.181<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -t nat -A OUTPUT --dst 98.100.106.10 -p udp
--dport 9000:9010 -j DNAT --to-destination 192.168.1.181<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -t nat -A PREROUTING --dst 98.100.106.10 -p tcp
--dport 9000:9010 -j DNAT --to-destination 192.168.1.181<o:p></o:p></p>
<p class=MsoPlainText>$IPTABLES -t nat -A PREROUTING --dst 98.100.106.10 -p udp
--dport 9000:9010 -j DNAT --to-destination 192.168.1.181<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>After that I did run the firewall script again… and I did
restart the network.<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Now I start up the 5 servers and not the sim.. and tested
it on shields up: https://www.grc.com/x/<o:p></o:p></p>
<p class=MsoPlainText>Results from scan of ports: 8000-8006, 8895, 9000<o:p></o:p></p>
<p class=MsoPlainText> 5 Ports Open<o:p></o:p></p>
<p class=MsoPlainText> 4 Ports Closed<o:p></o:p></p>
<p class=MsoPlainText> 0 Ports Stealth<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>So I believe the port forwarding is correct. Even though
some are closed, I believe that is because the sim is not running.<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>For the region/default.xml setting I placed in the:<o:p></o:p></p>
<p class=MsoPlainText>internal_ip_address="192.168.1.181" <o:p></o:p></p>
<p class=MsoPlainText>internal_ip_port="9000" <o:p></o:p></p>
<p class=MsoPlainText>allow_alternate_ports="false"<o:p></o:p></p>
<p class=MsoPlainText>external_host_name="98.100.106.10"<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Now, when I start up the sim, I get an ERROR:<o:p></o:p></p>
<p class=MsoPlainText>11:25:31 - [STARTUP]: Registration of region with grid
failed, aborting startup<o:p></o:p></p>
<p class=MsoPlainText>- System.Exception: Unable to connect to grid at
http://127.0.0.1:8001: The grid<o:p></o:p></p>
<p class=MsoPlainText> service could not contact the http url
http://98.100.106.10:9000/simstatus/ at<o:p></o:p></p>
<p class=MsoPlainText>your region. Please make sure this url is reachable by
the grid service<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Now, I have assumed that the rules I added from the site
http://opensimulator.org/wiki/Network_Settings were forwarding the traffic back
to my 181 box when something on the internal netorked called it on port 9000 to
the router, but that does not seem to be happening.<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>I have also tried adding a host entry in both my ubuntu
router, and windows server pointing grid.gridaverse.com to 192.168.1.181 and
tried replacieng my external host name to that domain name. <o:p></o:p></p>
<p class=MsoPlainText>I am able to start up the sim after that, and… someone
from the outside can login… but.. he never makes it to the sim.. just to the
handshake…<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>I believe if I added grids.gridaverse.com to my internal
DNS server it would fix this problem, but to be hostest… everytime I have looked
into doing something like that with BIND, I don't understand a damn thing I
read. But… then again.. shouldn't the entry in /etc/host compensate for that?<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Any help would be greatly apprecaited… I am passing on my
knowledge so helping me will help… well.. like the 20 people that read my
blog.. lol.. http://blog.skidzpartz.com <o:p></o:p></p>
<p class=MsoPlainText>Also if you have additional questions about the setup,
the last 3 blog entries documented it exactly.<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
</div>
</body>
</html>