Help With Connection Testing Please (NAT Reflection Issues)

fnx
Posts: 51
Joined: Tue Feb 10, 2015 11:26 pm

Help With Connection Testing Please (NAT Reflection Issues)

Post by fnx » Fri Mar 03, 2017 9:59 am

So after a few months of down time I have finally decided to sit down and try and figure out my pfSense NAT Reflection issues which I ran into a while back over here. (viewtopic.php?f=14&t=21166

I would greatly appreciate it if someone could try and connect to my server at elysium.sytes.net and let me know if they are able to make it to the actual map server.
Server is currently 03Mar2017 ver 30170204_1

cszark
Posts: 8
Joined: Wed Feb 22, 2017 9:10 pm

Re: Help With Connection Testing Please (NAT Reflection Issu

Post by cszark » Fri Mar 03, 2017 2:18 pm

Yes, I am able to connect, but I notice in my logs that it says:
[03/03/17 11:15:06] Failed to locate main hairpin hack address!

I am not sure if this is contributing to your problem. My guess it is.

fnx
Posts: 51
Joined: Tue Feb 10, 2015 11:26 pm

Re: Help With Connection Testing Please (NAT Reflection Issu

Post by fnx » Fri Mar 03, 2017 2:20 pm

Thanks for trying!
You need to take --hairpin out of your config as my system is remote from yours.
If you can, please try again ^_^

cszark
Posts: 8
Joined: Wed Feb 22, 2017 9:10 pm

Re: Help With Connection Testing Please (NAT Reflection Issu

Post by cszark » Fri Mar 03, 2017 2:23 pm

My second attempt to connect, I did not get that error.
Are you setup to login using your public IP address?

fnx
Posts: 51
Joined: Tue Feb 10, 2015 11:26 pm

Re: Help With Connection Testing Please (NAT Reflection Issu

Post by fnx » Fri Mar 03, 2017 2:29 pm

Yes zone_setting.sql is set to public IP 75.xxx.xx.148 for all zones which is then fowarded to the server (which we are able to get to the login server at least)
I'm 99% sure something changed in a pfSense update a while back... But I've been yet able to figure exactly what and was hoping that is was simply a --hairpin / NAT issue.
Looks like I need to dig deeper

cszark
Posts: 8
Joined: Wed Feb 22, 2017 9:10 pm

Re: Help With Connection Testing Please (NAT Reflection Issu

Post by cszark » Fri Mar 03, 2017 2:31 pm

I so also run Pfsense and host a public ffxi server, if you wanted to compare settings.

fnx
Posts: 51
Joined: Tue Feb 10, 2015 11:26 pm

Re: Help With Connection Testing Please (NAT Reflection Issu

Post by fnx » Fri Mar 03, 2017 2:32 pm

That would be great!
I won't have time tonight but I will print screen my NAT / Firewall and anything else I can think of as soon as I can!

User avatar
whasf
Site Admin
Posts: 1312
Joined: Thu Jul 19, 2012 9:11 pm

Re: Help With Connection Testing Please (NAT Reflection Issu

Post by whasf » Sat Mar 04, 2017 5:32 pm

Attached is how I have my pfSense set up for the oldschool server. I have a virtual IP set up as well (using CARP because ATT UVerse DSL suuuuucks)

let me know If you need some help, I could teamview in and take a look. Come in IRC
Attachments
dsp_pfsense.png
Oldschool pfSense
-- Whasf

fnx
Posts: 51
Joined: Tue Feb 10, 2015 11:26 pm

Re: Help With Connection Testing Please (NAT Reflection Issu

Post by fnx » Mon Mar 06, 2017 10:20 am

It looks like pfSense is not the issue.
We have confirmed that people outside my network (internet) can connect, make a character and run around the game world with no issues

I have pulled the server off the split (10.0.0.0) network and placed it inside my home (172.16.1.0) network updating the conf and zone setting to match the new IP and I am still running into the same issue. I've reinstalled clients (win7&10), following the wiki to the 'T' and still unable to get passed the login server with or without --hairpin.

I've also tried
Disable firewall on both clients and server
Uninstall antivirus on both clients and server

I'm honestly at a complete loss as I can't think of a single reason that this is still happening.

cszark
Posts: 8
Joined: Wed Feb 22, 2017 9:10 pm

Re: Help With Connection Testing Please (NAT Reflection Issu

Post by cszark » Mon Mar 06, 2017 6:51 pm

I don't have experience working with Windows/darkstar server setups.

Post Reply