Firewall 10.3.3 server port opening

[Anonymous]

I am trying to open port 19813 (4d server) to my LAN. I tried setting up things in the advanced tab of the firewall but i can not figure out apple new gui.

I keep getting the message

Apr 30 11:46:42 server kernel: ipfw: 65000 Deny TCP 10.0.1.20:49231 10.0.1.201:19813 in via en0

Any help would be appreciated

Thanks

Joe

[Anonymous]

So… you are wanting to allow TCP traffic on port 19813 from the external network (the internet) through your firewall and onto your lan?

It should be as simple as going to the advanced tab, clicking the plus icon and filling out the form as follows:

Action: Allow
Protocol: TCP
Service: other
Source: any
port: 19813
Destination: instead of any, choose 10-net or whatever your realm is called, or put in the IP address or range of addresses on your private network.
port: 19813 if you want it to remain the same.
Interface: in

You may need to add one just likethis for an ‘out’ interface, but probably not.

If you want to actually forward that port to one specific machine on your private network, you’ll need to edit /etc/nat/natd.conf.apple and add a redirect statement. The syntax for taking any incoming traffic on port 19813 and directing it to 10.0.1.23:19813 on your network would be:

redirect_port tcp 10.0.1.23:19813 19813

You’ll need to lock the file so it doesn’t get eaten next time natd starts (or so i’m told). do that by using: sudo chflags uchg natd.conf.apple.

To change the file in the future, do sudo chflags nouchg natd.conf.apple.

I hope this helps. I just learned to do this myself. If i’m completely misunderstanding what you want to do… boy is my face red.

cheers

[Anonymous]

Not sure if you fixed this already but I was having the same issues. If you look closely at the log entry it shows the outside IP coming in on port 49231 and not 19813. Since your entry is probably setup to allow only 19813 IN to the server only on port 19813, that is the issue. When you setup the rule leave the first port (the source port) blank. This will allow any ports into port 19813.

That fixed it for me.

Christian

[Author]

Posts