Problem with hosting a server

[Ragequits]

Problem: My Server does not appear in the master list, nor can anybody connect via IP.

 

 

I already opened the port 10308 on my router and my system's firewall. I checked three or four times if I really checked the 'public server' box. The direct connection via IP probably doesn't work because the server does not have my systems IP. Instead it sets up on some strange IP I do not recognize (maybe router IP).

 

I don't now what else could be broken or what I'm still doing wrong. Could somebody enlighten me? :smartass:

[Wrecking Crew]

Check to see if there is a dialog box behind DCS that asks if you want this program to have Internet access. Also check to make sure the time setting on your server is correct.

[Ragequits]

There is no box and I checked, DCS does have permission for internet access in the firewall. What exactly do you mean with time setting?

[Coug4r]

The system (windows) time, if it's off by weeks/months it won't show up either.

 

You opened port 10308. UDP? TCP? Both?

[Ragequits]

I hosted the server on my main system I always use so the windows clock is in sync with the real clock.

 

I opened both UDP and TCP protocols in the router.

[Coug4r]

That's fine, check if they're open from outside (can do both TCP and UDP). If you check UDP maybe it's good to have your server up.

 

https://pentest-tools.com/network-vulnerability-scanning/tcp-port-scanner-online-nmap

Edited September 30, 2016 by Coug4r

[Ragequits]

Okay did the test. Seems to be open if I interpret these results right.

TCP:

Host is up.

 

PORT STATE SERVICE

10308/tcp filtered unknown

 

 

Nmap done: 1 IP address (1 host up) scanned in 0.42 seconds

Raw packets sent: 2 (88B) | Rcvd: 0 (0B)

 

 

UDP:

Host is up.

 

PORT STATE SERVICE

10308/udp open|filtered unknown

 

 

Nmap done: 1 IP address (1 host up) scanned in 0.29 seconds

Raw packets sent: 1 (28B) | Rcvd: 190 (10.640KB)

 

 

But I had to use the 'don't ping host' option otherwise the connection attempt got blocked.

[Coug4r]

I get this on a TCP scan, should report open:

 

PORT STATE SERVICE

10308/tcp open unknown

 

 

Nmap done: 1 IP address (1 host up) scanned in 0.21 seconds

Raw packets sent: 5 (196B) | Rcvd: 4 (292B)

[Ragequits]

And your scan says you also received data and with my scan the website did not receive any data on the TCP protocol.

I guess I will have to double check router and firewall settings....must be something wrong there even though I have no clue what. :music_whistling:

[Coug4r]

Yup, something is blocking the TCP data. A 2nd router perhaps? Are you using a 3rd party firewall? If so, check the logs (and maybe disable the windows firewall service).

 

Actually, it should be your 1st (talking to the world) router because if the port would be open it would (or should) be detected as open.

Edited September 30, 2016 by Coug4r

[Ragequits]

I'm not directly connected to the router that is connected to the outside word. But the router I'm connected to just acts as a normal repeater to get a better wlan connection where my PC is. As far as I remember it does not have any extra settings in terms of ports as it just relays the 1st routers signal.

I'm using Norton 360 Premiere as a 3rd party firewall but I made in Norton and the windows settings a special rule for port 10308. I guess next try would be turning them off and then check the logs.

If that does not help I will have to dive into the router settings.

[Coug4r]

I think you should focus on the 1st router, if you open a TCP port on that one it should already be reported as open and it isn't. Some routers need port triggering, maybe try a trigger for that port.

[discwalker]

A lot easier to test router and firewalls mechanism via a local http server like Apache.

You can check your "external" IP in the routers webpage. hopefully you got not a Private Address: https://en.wikipedia.org/wiki/IP_address#Private_addresses

 

I bind a static local IP to my DCS machine. And I use PortForwarding: bind the routers external port to a LAN PC's port (using NetworkAddressTranslation)

Edited September 30, 2016 by discwalker
d

[Ragequits]

I also use port forwarding but without a static IP. Every now and then I get a new IP address from the router. But it is set up so that the router always nows what my PC is (the router has my MAC saved) and it should always forward it to the IP I currently have.

My PC's IP address is a private address, but this should not be the problem since the router is set up to forward every outside signal to my PC.

[Wrecking Crew]

I suspect that second router. Can you try a temp connection directly to the 1st router, or replace the second router with a switch?

[Coug4r]

And maybe check with your ISP if they allow (TCP) port forwarding to that port.

[BitMaster]

Are you double NATed ?

 

 

Is the OP behind a doube-NAT setup..OR...One Router and another one really ONLY acting as a REPEATER in true repeater mode and not in Network Address Translation mode NAT. Those are 2 totally different network topologies !

 

For the double NATed setup you will need to open and forward the ports TWICE and I should also mention that in that case your two LAN's do and must have different Networks ( 192.168.0.0/24 and 192.168.1.0/24 for example ). In that case you may also just place the 2nd Router as a DMZ/Exposed Host in the 1st routers config, as this would forward each and every protocol and port to the said IP of the 2nd internal router, making sure all packets hit that 2nd router.

 

From that 2nd router on you have to act like it was your one and only router, open the ports you need for the service you want to make available to world. In your case 10308 tcp & udp AT LEAST.

 

IF you have a setup that controls OUTBOUND traffic as well ( most software suites do this and may hinder you there ) you have to open a few more ports..aka..allow them to connect outbound.

Those ports IN ADDITION are:

 

HTTP http://www.digitalcombatsimulator.com:80

HTTPS http://www.digitalcombatsimulator.com:443

XMPP master.eagle.ru:5222

 

* you only need to work those ports if you have an instance controlling OUTBOUND connections.

 

 

 

Now let's look at scenario 2: Router + Repeater

This can be tricky as it is not as simple to solve as #1 because some functions may or may not work over repeater based connections. If you can connect to any one port opened it works, if you cannot connect to any port opened from outside your repeater connection may not be capable of doing that. You can test as stated above with Apache or a simple FTP server on port 20/21 or SSH on port 22. YOu have to check sourceforge and see what server is easiest to install for a test.

 

If NO SERVICE is started, say Apache web server, you will NOT be able to positively connect to that port ( 80 in that case for www server ). You will get a service not available and will not be able to tell between a closed port and a turned off service. That's why you have to have a service at that port running that you wanna test.

 

 

 

Anyway, having a server on a WLAN bridge is a bad idea 1st place, latency and dropped packets will likely occur and bandwidth and duplex are a thing to consider ( how many antennas do your devices have ?? ) if you want smooth data flow. I play as I said over a WLAN bridge and had to rework it many times and place devices at certain spots to achieve a good result for a client.

I wouldnt wanna run a server that way, for that I woud carry it downstairs where Gigabit is available and connect it wired.

[discwalker]

We are not sure of your ISP provide to you an external IP.

I suggest you to use PoweLine Adapters directly from your first router rather than using WiFi.

https://en.wikipedia.org/wiki/Power-line_communication

http://www.tp-link.com/en/products/list-18.html

Edited October 2, 2016 by discwalker
spelling

[BitMaster]

We are not sure of your ISP provide to you an external IP.

I suggest you to use PoweLine Adapters directly from your first router rather than using WiFi.

https://en.wikipedia.org/wiki/Power-line_communication

http://www.tp-link.com/en/products/list-18.html

 

Oh heck yes, if that machine is behind a carrier grade NAT he's lost from start on !!!

 

 

My ISP acted this way until I made them clear I wouldnt put up with it and got a public IPv4

 

reassigned. They ( my ISP ) now offers a true public IPv4 for 1,95€/month for their customers.

 

 

If you belong to Quix/Innexio/Bayern-DSL in Germany you may be NATed from ground up !

[TRITATUTTO]

Problem: My Server does not appear in the master list, nor can anybody connect via IP.

 

 

I already opened the port 10308 on my router and my system's firewall. I checked three or four times if I really checked the 'public server' box. The direct connection via IP probably doesn't work because the server does not have my systems IP. Instead it sets up on some strange IP I do not recognize (maybe router IP).

 

I don't now what else could be broken or what I'm still doing wrong. Could somebody enlighten me? :smartass:

 

 

 

 

try evolve 1.0 , i never had an issue when i host from my pc with my friends

https://www.evolvehq.com/download

Edited October 3, 2016 by TRITATUTTO

[Ragequits]

Thank you guys for all your input and sorry for my absence but I just don't have the time in the moment for a longer troubleshooting session.

 

Are you double NATed ?

 

 

Is the OP behind a doube-NAT setup..OR...One Router and another one really ONLY acting as a REPEATER in true repeater mode and not in Network Address Translation mode NAT. Those are 2 totally different network topologies !

 

For the double NATed setup you will need to open and forward the ports TWICE and I should also mention that in that case your two LAN's do and must have different Networks ( 192.168.0.0/24 and 192.168.1.0/24 for example ). In that case you may also just place the 2nd Router as a DMZ/Exposed Host in the 1st routers config, as this would forward each and every protocol and port to the said IP of the 2nd internal router, making sure all packets hit that 2nd router.

 

From that 2nd router on you have to act like it was your one and only router, open the ports you need for the service you want to make available to world. In your case 10308 tcp & udp AT LEAST.

 

IF you have a setup that controls OUTBOUND traffic as well ( most software suites do this and may hinder you there ) you have to open a few more ports..aka..allow them to connect outbound.

Those ports IN ADDITION are:

 

HTTP http://www.digitalcombatsimulator.com:80

HTTPS http://www.digitalcombatsimulator.com:443

XMPP master.eagle.ru:5222

 

* you only need to work those ports if you have an instance controlling OUTBOUND connections.

 

 

 

Now let's look at scenario 2: Router + Repeater

This can be tricky as it is not as simple to solve as #1 because some functions may or may not work over repeater based connections. If you can connect to any one port opened it works, if you cannot connect to any port opened from outside your repeater connection may not be capable of doing that. You can test as stated above with Apache or a simple FTP server on port 20/21 or SSH on port 22. YOu have to check sourceforge and see what server is easiest to install for a test.

 

If NO SERVICE is started, say Apache web server, you will NOT be able to positively connect to that port ( 80 in that case for www server ). You will get a service not available and will not be able to tell between a closed port and a turned off service. That's why you have to have a service at that port running that you wanna test.

 

 

 

Anyway, having a server on a WLAN bridge is a bad idea 1st place, latency and dropped packets will likely occur and bandwidth and duplex are a thing to consider ( how many antennas do your devices have ?? ) if you want smooth data flow. I play as I said over a WLAN bridge and had to rework it many times and place devices at certain spots to achieve a good result for a client.

I wouldnt wanna run a server that way, for that I woud carry it downstairs where Gigabit is available and connect it wired.

 

Yeah sounds like I a lot of trouble with my set up. But ping is no problem at least when I'm the client. Usually I have a ping around 30 when playning online games.

But back to the core problem: To make things simpler I just connected the PC directly to the first router via WLAN. The connection is still good enough for testing purposes but I still couldn't not connect to port 10308 TCP (according to the site that was posted here, I still have to set this apache thing up. On their website you only get the binaries you have to compile first so again no time in the moment).

But it might very well be that I also have to open the ports you mentioned (80,443,5222). The security settings on the router are at maximum.

And my ISP is Kabel Deutschland by the way, still have to check with them if everything else is checked.

 

We are not sure of your ISP provide to you an external IP.

I suggest you to use PoweLine Adapters directly from your first router rather than using WiFi.

https://en.wikipedia.org/wiki/Power-line_communication

http://www.tp-link.com/en/products/list-18.html

 

We have some of those (but from fitzbox) lying around here somewhere, but connecting via wifi to the 1st router should to the trick

 

try evolve 1.0 , i never had an issue when i host from my pc with my friends

https://www.evolvehq.com/download

 

What exactly do you use this for with DCS? Do you use their virtual LAN? Similar to Hamachi?

Edited October 5, 2016 by Ragequits

[TRITATUTTO]

What exactly do you use this for with DCS? Do you use their virtual LAN? Similar to Hamachi?

 

yep

 

Download Evolve

 

register on site

 

open the client

 

send friend request to your friends

 

make a party and invite friends

 

when everybody are in party evolve , launch DCS , go in MP , launch the mission and BOOM SHAKALAKA !

 

if you wanna a help call me in teamspeak

Edited October 5, 2016 by TRITATUTTO

[Coug4r]

You need 1 port and 2 protocols and that's it. Have you tried opening port 80 on the first router and check if it's reported open from that site?

[BitMaster]

You need 1 port and 2 protocols and that's it. Have you tried opening port 80 on the first router and check if it's reported open from that site?

 

 

That may not be the full truth as stated above. DCS needs to speak to several services and register and thus needs to be able to communicate OUTBOUND on more than 10308 tcp+udp.

 

If the OP has a firewall feature somewhere in the chain that blocks OUTBOUND traffic for any reason than it is important to allow the other 3 ports as well, where 2 of them, 80 & 443 are used for http & https and should be allowed by default or the OP coudnt serve the net.

Port 5222 instead is not a commonly used Port and thus might be blocked as it is used in chat messengers or various kind and others ( as you see also DCS uses it ). If 5222 is blocked you cant register and wont appear in the online server list.

 

 

**edit...ahhh SHOOOT...gotcha...disregard above...you refered top the test service ( apache afair )...true then. My bad for not reading up closely beforehand

Edited October 6, 2016 by BitMaster

[BitMaster]

As a KD-Kunde you should have a Fritz!Box 6360 or 6390 iirc ?? It is fairly easy to PortFW on any FB model.

 

Please specify your involved network devices to make things easier ;)