Try changing the<br> internal_ip_address="192.168.1.181"<br><br>to<br><br>internal_ip_address="0.0.0.0"<br><div class="gmail_quote"><br>or<br><br>internal_ip_address="127.0.0.1"<br><br>And use an domain name for the external ip adres, it looks better.<br>
<br>and do not forget to edit the *.config.xml and the OpenSim.ini file to set the correct ip adressses there. <br><br>Looks like you have set it up for grid mode, but I think you still got grid = false in your opensim.ini<br>
<br><br>2009/3/23 Skidz Tweak <span dir="ltr"><<a href="mailto:skidz.tweak@gmail.com">skidz.tweak@gmail.com</a>></span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div link="blue" vlink="purple" lang="EN-US">
<div>
<p>My rules appeared to be all messed up in the last email
so trying again.</p><div><div></div><div class="h5">
<p><span style="color: black;"> </span></p>
<p>Hi All… </p>
<p> </p>
<p>I have set up a grid in my home, and trying to let a
friend connect. </p>
<p>Having some problems… and I know it has to do with my
iptables… at least I think so… </p>
<p> </p>
<p>I have all 5 servers and one sim running on:</p>
<p>192.168.1.181</p>
<p> </p>
<p>I have the domain name <a href="http://grid.gridaverse.com" target="_blank">grid.gridaverse.com</a> pointed to my
external IP address:</p>
<p>98.100.106.10</p>
<p> </p>
<p>In my firewall script I have added the following rules
for forwarding:</p>
<p>$IPTABLES -A INPUT -i $EXTIF -m state --state
NEW,ESTABLISHED,RELATED -p tcp -s $UNIVERSE -d $EXTIP --dport 8000:8006 -j
ACCEPT</p>
<p>$IPTABLES -A INPUT -i $EXTIF -m state --state
NEW,ESTABLISHED,RELATED -p tcp -s $UNIVERSE -d $EXTIP --dport 8895 -j ACCEPT</p>
<p>$IPTABLES -A INPUT -i $EXTIF -m state --state
NEW,ESTABLISHED,RELATED -p tcp -s $UNIVERSE -d $EXTIP --dport 9000:9001 -j
ACCEPT</p>
<p> </p>
<p>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8002 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT</p>
<p>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8002 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to <a href="http://192.168.1.181:8002" target="_blank">192.168.1.181:8002</a></p>
<p>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8001 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT</p>
<p>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8001 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to <a href="http://192.168.1.181:8001" target="_blank">192.168.1.181:8001</a></p>
<p>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT</p>
<p>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8000 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to <a href="http://192.168.1.181:8000" target="_blank">192.168.1.181:8000</a></p>
<p>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8003 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT</p>
<p>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8003 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to <a href="http://192.168.1.181:8003" target="_blank">192.168.1.181:8003</a></p>
<p>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8004 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT</p>
<p>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8004 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to <a href="http://192.168.1.181:8004" target="_blank">192.168.1.181:8004</a></p>
<p>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8005 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT</p>
<p>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8005 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to <a href="http://192.168.1.181:8005" target="_blank">192.168.1.181:8005</a></p>
<p>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8006 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT</p>
<p>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8006 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to <a href="http://192.168.1.181:8006" target="_blank">192.168.1.181:8006</a></p>
<p>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
8895 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT</p>
<p>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
8895 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to <a href="http://192.168.1.181:8895" target="_blank">192.168.1.181:8895</a></p>
<p>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
9000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT</p>
<p>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
9000 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to <a href="http://192.168.1.181:9000" target="_blank">192.168.1.181:9000</a></p>
<p>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p udp --dport
9000 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT</p>
<p>$IPTABLES -A PREROUTING -t nat -p udp -d $EXTIP --dport
9000 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to <a href="http://192.168.1.181:9000" target="_blank">192.168.1.181:9000</a></p>
<p>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p tcp --dport
9001 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT</p>
<p>$IPTABLES -A PREROUTING -t nat -p tcp -d $EXTIP --dport
9001 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to <a href="http://192.168.1.181:9001" target="_blank">192.168.1.181:9001</a></p>
<p>$IPTABLES -A FORWARD -i $EXTIF -o $INTIF -p udp --dport
9001 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT</p>
<p>$IPTABLES -A PREROUTING -t nat -p udp -d $EXTIP --dport
9001 -m state --state NEW,ESTABLISHED,RELATED -j DNAT --to <a href="http://192.168.1.181:9001" target="_blank">192.168.1.181:9001</a></p>
<p> </p>
<p>Also per the site
<a href="http://opensimulator.org/wiki/Network_Settings" target="_blank">http://opensimulator.org/wiki/Network_Settings</a> I added these:</p>
<p>$IPTABLES -t nat -A OUTPUT --dst 98.100.106.10 -p tcp
--dport 9000:9010 -j DNAT --to-destination 192.168.1.181</p>
<p>$IPTABLES -t nat -A OUTPUT --dst 98.100.106.10 -p udp
--dport 9000:9010 -j DNAT --to-destination 192.168.1.181</p>
<p>$IPTABLES -t nat -A PREROUTING --dst 98.100.106.10 -p tcp
--dport 9000:9010 -j DNAT --to-destination 192.168.1.181</p>
<p>$IPTABLES -t nat -A PREROUTING --dst 98.100.106.10 -p udp
--dport 9000:9010 -j DNAT --to-destination 192.168.1.181</p>
<p> </p>
<p>After that I did run the firewall script again… and I did
restart the network.</p>
<p> </p>
<p>Now I start up the 5 servers and not the sim.. and tested
it on shields up: <a href="https://www.grc.com/x/" target="_blank">https://www.grc.com/x/</a></p>
<p>Results from scan of ports: 8000-8006, 8895, 9000</p>
<p> 5 Ports Open</p>
<p> 4 Ports Closed</p>
<p> 0 Ports Stealth</p>
<p> </p>
<p>So I believe the port forwarding is correct. Even though
some are closed, I believe that is because the sim is not running.</p>
<p> </p>
<p> </p>
<p> </p>
<p>For the region/default.xml setting I placed in the:</p>
<p>internal_ip_address="192.168.1.181" </p>
<p>internal_ip_port="9000" </p>
<p>allow_alternate_ports="false"</p>
<p>external_host_name="98.100.106.10"</p>
<p> </p>
<p>Now, when I start up the sim, I get an ERROR:</p>
<p>11:25:31 - [STARTUP]: Registration of region with grid
failed, aborting startup</p>
<p>- System.Exception: Unable to connect to grid at
<a href="http://127.0.0.1:8001" target="_blank">http://127.0.0.1:8001</a>: The grid</p>
<p> service could not contact the http url
<a href="http://98.100.106.10:9000/simstatus/" target="_blank">http://98.100.106.10:9000/simstatus/</a> at</p>
<p>your region. Please make sure this url is reachable by
the grid service</p>
<p> </p>
<p>Now, I have assumed that the rules I added from the site
<a href="http://opensimulator.org/wiki/Network_Settings" target="_blank">http://opensimulator.org/wiki/Network_Settings</a> were forwarding the traffic back
to my 181 box when something on the internal netorked called it on port 9000 to
the router, but that does not seem to be happening.</p>
<p> </p>
<p>I have also tried adding a host entry in both my ubuntu
router, and windows server pointing <a href="http://grid.gridaverse.com" target="_blank">grid.gridaverse.com</a> to 192.168.1.181 and
tried replacieng my external host name to that domain name. </p>
<p>I am able to start up the sim after that, and… someone
from the outside can login… but.. he never makes it to the sim.. just to the
handshake…</p>
<p> </p>
<p>I believe if I added <a href="http://grids.gridaverse.com" target="_blank">grids.gridaverse.com</a> to my internal
DNS server it would fix this problem, but to be hostest… everytime I have
looked into doing something like that with BIND, I don't understand a damn
thing I read. But… then again.. shouldn't the entry in /etc/host compensate for
that?</p>
<p> </p>
<p>Any help would be greatly apprecaited… I am passing on my
knowledge so helping me will help… well.. like the 20 people that read my
blog.. lol.. <a href="http://blog.skidzpartz.com" target="_blank">http://blog.skidzpartz.com</a> </p>
<p>Also if you have additional questions about the setup,
the last 3 blog entries documented it exactly.</p>
<p> </p>
<p> </p>
<p> </p>
<p> </p>
</div></div></div>
</div>
<br>_______________________________________________<br>
Opensim-users mailing list<br>
<a href="mailto:Opensim-users@lists.berlios.de">Opensim-users@lists.berlios.de</a><br>
<a href="https://lists.berlios.de/mailman/listinfo/opensim-users" target="_blank">https://lists.berlios.de/mailman/listinfo/opensim-users</a><br>
<br></blockquote></div><br>