Page 1 of 2
Help With Connection Testing Please (NAT Reflection Issues)
Posted: Fri Mar 03, 2017 9:59 am
by fnx
So after a few months of down time I have finally decided to sit down and try and figure out my pfSense NAT Reflection issues which I ran into a while back over here. (
viewtopic.php?f=14&t=21166
I would greatly appreciate it if someone could try and connect to my server at elysium.sytes.net and let me know if they are able to make it to the actual map server.
Server is currently 03Mar2017 ver 30170204_1
Re: Help With Connection Testing Please (NAT Reflection Issu
Posted: Fri Mar 03, 2017 2:18 pm
by cszark
Yes, I am able to connect, but I notice in my logs that it says:
[03/03/17 11:15:06] Failed to locate main hairpin hack address!
I am not sure if this is contributing to your problem. My guess it is.
Re: Help With Connection Testing Please (NAT Reflection Issu
Posted: Fri Mar 03, 2017 2:20 pm
by fnx
Thanks for trying!
You need to take --hairpin out of your config as my system is remote from yours.
If you can, please try again ^_^
Re: Help With Connection Testing Please (NAT Reflection Issu
Posted: Fri Mar 03, 2017 2:23 pm
by cszark
My second attempt to connect, I did not get that error.
Are you setup to login using your public IP address?
Re: Help With Connection Testing Please (NAT Reflection Issu
Posted: Fri Mar 03, 2017 2:29 pm
by fnx
Yes zone_setting.sql is set to public IP 75.xxx.xx.148 for all zones which is then fowarded to the server (which we are able to get to the login server at least)
I'm 99% sure something changed in a pfSense update a while back... But I've been yet able to figure exactly what and was hoping that is was simply a --hairpin / NAT issue.
Looks like I need to dig deeper
Re: Help With Connection Testing Please (NAT Reflection Issu
Posted: Fri Mar 03, 2017 2:31 pm
by cszark
I so also run Pfsense and host a public ffxi server, if you wanted to compare settings.
Re: Help With Connection Testing Please (NAT Reflection Issu
Posted: Fri Mar 03, 2017 2:32 pm
by fnx
That would be great!
I won't have time tonight but I will print screen my NAT / Firewall and anything else I can think of as soon as I can!
Re: Help With Connection Testing Please (NAT Reflection Issu
Posted: Sat Mar 04, 2017 5:32 pm
by whasf
Attached is how I have my pfSense set up for the oldschool server. I have a virtual IP set up as well (using CARP because ATT UVerse DSL suuuuucks)
let me know If you need some help, I could teamview in and take a look. Come in IRC
Re: Help With Connection Testing Please (NAT Reflection Issu
Posted: Mon Mar 06, 2017 10:20 am
by fnx
It looks like pfSense is not the issue.
We have confirmed that people outside my network (internet) can connect, make a character and run around the game world with no issues
I have pulled the server off the split (10.0.0.0) network and placed it inside my home (172.16.1.0) network updating the conf and zone setting to match the new IP and I am still running into the same issue. I've reinstalled clients (win7&10), following the wiki to the 'T' and still unable to get passed the login server with or without --hairpin.
I've also tried
Disable firewall on both clients and server
Uninstall antivirus on both clients and server
I'm honestly at a complete loss as I can't think of a single reason that this is still happening.
Re: Help With Connection Testing Please (NAT Reflection Issu
Posted: Mon Mar 06, 2017 6:51 pm
by cszark
I don't have experience working with Windows/darkstar server setups.