Connect Box UPC: CoD Game Server Port Forwarding (UDP 20500-20510, TCP/UDP 28960-28970) & DMZ Setup

Gentlemen, help, because I'm already fucking ... chak is shooting :P

I am just after contacting UPC, they told me to call the hotline in the chat, and they told me to search the hotline on the forums. Well, I'm looking ;)

I want to fire up a simple Call of Duty game server to play with my friends. The ports needed for this project are: UDP 20500-20510 and TCP / UDP 28960 (I have 28960 -28970 unlocked). In addition, I hooked up the No-IP service, once to remember the address when away from home, and two that the IP changes, rarely but still.

This is where the fun begins. I do not have any external router, I set everything on Arris from UPC, hardware version 8, software version 01.02.065.24.EURO.SIP.

I have DMZ turned on at the address 192.168.0.10, which is permanently assigned in Arris to the MAC of the network from my PC:





My ports are redirected (even with DMZ on, but I tried without DMZ as well):



DHCP Settings:



Firewall disabled:



Computer - Windows 10 Pro, firewall disabled:



Additionally, redirections are made in the rules, just for peace of mind.

When I run the server locally:



When I do this on an external IP (address ending intentionally changed):



Of course, the same situation over No-IP over DDNS. Nmap also shows that the ports are closed, although the logs from the server console show that there is nothing to bounce back from ...

Any ideas? In addition to buying a router and putting it in bridge mode ...?

PS: The hotline confirmed that they are not blocking any ports (except for a few low ones, for security reasons) and redirection works fine for them, but they do not set it up, the user is left to himself: /

Open ports 28960-70 separately for TCP and udp. I know it's a stupid job, but there may be a catch on UPC equipment


And by the way, you are a guest ... The server in dmz, all security is disabled ..respect

trivial1 wrote:

Open ports 28960-70 separately for TCP and udp. I know it's a stupid job, but there may be a catch on UPC equipment


And by the way, you are a guest ... The server in dmz, all security is disabled ..respect

Changing ports did nothing, restart done:



As for safety - don't worry, I only set myself up for tests to eliminate all possible factors

Turn off the IPv6 support site yet and check

trivial1 wrote:

Disable the IPv6 support site yet and check

Off, only IPv4 works - that's what they set up on the occasion of another request.

Your network looks like this: internet-upc-server?
And from this server you are trying to connect to CoD?
Do you connect to another computer?
Have you checked if the folks can connect after all your treatments?

trivial1 wrote:

Your network looks like this: internet-upc-server?
And from this server you are trying to connect to CoD?
Do you connect to another computer?
Have you checked if the folks can connect after all your treatments?

I put the server on my own PC and I want to connect to it from the outside.

With "tracert" to WP.PL I have 9 bounces, so there are no strange redirects.

But explain how do you connect from the outside?
Is the same pc on which you have the server connected to the external IP?

trivial1 wrote:

But explain how do you connect from the outside?
Is the same pc on which you have the server connected to the external IP?

So far, I'm not connecting at all, except locally. The server on the external IP does not get up, I have to tell it local to start. I say right away that I am sure about the files, because it worked like a dream on a different machine in a different place.

And ultimately - the server is here, and we connect everyone from a different computer (including me, because I only run the server on this machine, and I will play on another computer from a different network).

Aramis93 wrote:

and we connect each with a different computer

But do you have confirmation from your friends that they can't see the server either? Is it just you?

trivial1 wrote:

Aramis93 wrote:

and we connect each with a different computer

But do you have confirmation from your friends that they can't see the server either? Is it just you?

I do not need, I can see in the logs that the wgl server. does not take off.
Despite this, I just checked from a laptop connected to the mobile internet to exclude the network - unfortunately it does not connect me.

I went back to the beginning of the story and something is wrong. To start the server, you give him the LAN IP and start? Then it's okay.
And if you want to expose the server to the world, you set your external IP and start and error?

31.xx is you sure external IP?
At UPC, external starts at 89

SP5IT wrote:

31.xx is you sure external IP?
At UPC, external starts at 89

UPC as a router has IP 89 ...
And as bridge 31 ..
So the IPs match up

Aramis93 wrote:

The server on the external IP does not get up, I have to tell it local to start.

When the server starts on the local IP, try to connect to it from outside.

trivial1 wrote:

UPC as a router has IP 89 ...
And as bridge 31 ..

There is no such IP anywhere: 31,178,123,456
There is no such option that when switching from a modem to a modem it will spoil the IP.
@ aramis93
So where did it get there: 31,178,123,456?
Because if this IP is from the No-IP domain, then maybe this redirection does not work yet, because this IP has not spread to DNS servers and nobody knows that it exists (the time can be up to 48 hours).

Aramis93 wrote:

In addition, I connected to the No-IP service

And where, what do you have active No IP?
It should be active on the modemorouter.

KOCUREK1970 wrote:

There is no such IP anywhere: 31,178,123,456
There is no such option that when switching from a modem to a modem it will spoil the IP.

He changed the ending, as mentioned in 1 post.
Second, believe me it is done. I don't know why UPC does this, but it does.

@ trivial1
Now I have read - thanks for paying attention.
@ aramis93
Why port forwarding when a computer / server in the DMZ?
There is no redirection in the DMZ (it is unnecessary), because the DMZ has all ports open.

Trigger this IP from DMZ, give it to static IP / DHCP reservation (assign other hardware as well) and only then redirect the ports (first trigger all, save and reenter them).
Additionally, if possible, reduce (select a specific port number on the server) and enter only this one in Arris for redirection.

gkwiatkowski wrote:

Aramis93 wrote:

The server on the external IP does not get up, I have to tell him the local to start.

When the server starts on the local IP, try to connect to it from outside.

When the server starts on the local IP, try to connect to it from outside.

KOCUREK1970 wrote:

And where, what do you have active No IP?
It should be active on the modemorouter.

It is entered in the DDNS tab on Arris (I do not have access from here, so I will not throw the screen yet).

KOCUREK1970 wrote:

There is no such IP anywhere: 31,178,123,456

I changed the ending myself, instead of XX123.456, my correct address is displayed to me, but I do not want to enter it on the forum.

KOCUREK1970 wrote:

Because if this IP is from the No-IP domain, maybe this redirection is still not working, because this IP has not spread to DNS servers yet

No, it's directly my IP that Arris gets.

KOCUREK1970 wrote:

Why port forwarding when a computer / server in the DMZ?
There is no redirection in the DMZ (it is unnecessary), because the DMZ has all ports open.

I tried with and without DMZ, hence the option turned on, I just checked every possibility.

KOCUREK1970 wrote:

Trigger this IP from DMZ, give it to static IP / DHCP reservation (assign other hardware as well) and only then redirect the ports (first trigger all, save and reenter them).

I tried, to no effect.

KOCUREK1970 wrote:

Additionally, if possible, reduce (select a specific port number on the server) and enter only this one in Arris for redirection.

I'll check it, but after I get home :)

gkwiatkowski wrote:

When the server starts on the local IP, try to connect to it from outside.

I will also check it when I come back, thank you

@ aramis93
And this is a trick: disconnect Arris from the power supply for a minute, and then reconnect it to the power supply - maybe he has something stuck in the MAC / IP table.

SP5IT wrote:

31.xx is you sure external IP?
At UPC, external starts at 89

https://pytania.upc.pl/?q=fact_1006822

Hello,
if it is like @ aramis93 ... you can use hamachi VPN app - only everyone must have it installed then to play with you ...

tomxx wrote:

Hello,
if it is like @ aramis93 ... you can use hamachi VPN app - only everyone must have it installed then to play with you ...

I can, but I don't want to, since the IP is public and the hotline stated that it should work without such solutions, I want it to be "God's way". If I plug in my router, it will also work, but that's not the point. Since they declare that it is possible, I will either do it as it is possible or I will play a complaint battle with them

Make a sacrifice and do everything anew, following all of the directions here.
Mainly remove DMZ, assign a fixed IP to the server (in DHCP) and then redirect the ports.
Fire up the server locally (because it works here) and connect from outside.

Brighter: do not connect from the same network on the external address to the local server, otherwise it will not go. You would have to configure Hairpin NAT to be able to do so.

Ps. Arris is a router or a bridge?

trivial1 wrote:

Ps. Arris is a router or a bridge?

As a router.

trivial1 wrote:

Sacrifice yourself and do it all over again, following all the directions given here.

In the evening I will find some time to have fun. We'll see what comes out of it

@ kocurek1970
@gkwiatkowski
Gentlemen, if I'm wrong, correct me because I don't know much about the light.
ONT only converts light to signal for arris?
And arris has no WAN input, I think, only a built-in switch, so there shouldn't be a router behind it?
And hence maybe server problems

trivial1 wrote:

And arris has no WAN input, I think, only a built-in switch

This is exactly what it is. But I say - by of the official position of UPC, there should be no such problems and everything should work.

trivial1 wrote:

@ kocurek1970
@gkwiatkowski
Gentlemen, if I'm wrong, correct me because I don't know much about the light.
ONT only converts light to signal for arris?
And arris doesn't have a WAN input, I guess, just a built-in switch, so there shouldn't be a router behind it?
And hence maybe server problems

Arris with soft 01.02.065.24.EURO.SIP. is otherwise Giga Connect Box, i.e. EuroDocsis modem router for cable TV. It can be roughly said that the function of the WAN port is performed by the F input for connecting the cable. There is no ONT in front of him that turns the light into Ethernet.
In the "router" mode, you should not put a second router behind it, because you will have unnecessary double NAT.

Added after 1 [minutes]:

Aramis93 wrote:

trivial1 wrote:

And arris has no WAN input, I think, only a built-in switch

This is exactly what it is. But I say - by of the official UPC position, there should be no such problems and everything should work.

I have a Compal Connect Box and port forwarding works for me.

@gkwiatkowski
My mistake, with another thread I thought that my friend has light here.