Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Kerio WF + NAT + Ragnarok Online = Problem
  •  
DimkaUA

Messages: 6
Karma: 0
Send a private message to this user
Tested on Kerio Winroute Firewall 6.0.8 and 6.2.1 build 1454.

Kerio installed on Server.
Server connected to local network and to internet (PPPoE). In local network i have computer which recieve internet from server (NAT).

When i play Ragnarok Online (Online Game) and when my computer recieve large amount of packets game is froze.
I tell about large amount of game packets.
Game is froze too, if i recieve large packet (maybe > 500 byte).
If i play in Ragnarok Online on server (not Client computer, and not through NAT, firewall is on, and all ports are open) all is good!
Game is not supported proxy.

My kerio settings:
Client=>Inet Connecton (All ports, NAT)
Client=>Server (DNS)
Server=>Inet Connection (DNS)

Antivirus (on-off, it's not solve the problem)

Game uses next ports: TCP 5000 (main game port), TCP 6000, TCP 6900 (Protocol inspector - off)

MAIN THING: game server (not my server) recieve my packets and respond to me. If i enable logging i see how incoming packets come to firewall (Logs=>Filter) and i see too how firewall resend this packets through NAT to my computer (client computer).
I have tested this problem on two computers (windows firewall off, without any antivirus or firewall programm, default windows settings).

Log file attached.
192.168.0.198 - Client
1.1.1.1 - Server (it's not the real IP)
81.177.13.* - Game servers

TCP 6900 - Login Server (No problem)
TCP 6000 - Map server (No problem)
TCP 5000 - Game Sever (Problem !!!)

I think that problem in this large packet which KWF have not resend to me. Why?

[24/Oct/2006 09:00:36] PERMIT "Dimka -> Inet" packet from Inet, proto:TCP, len:308, ip/port:81.177.13.32:5000 -> 1.1.1.1:64623, flags: ACK PSH , seq:1929713741 ack:1823998971, win:65506, tcplen:268
[24/Oct/2006 09:00:36] PERMIT "Dimka -> Inet" packet to HKHP, proto:TCP, len:308, ip/port:81.177.13.32:5000 -> 192.168.0.198:2125, flags: ACK PSH , seq:1929713741 ack:1823998971, win:65506, tcplen:268
[24/Oct/2006 09:00:36] PERMIT "Dimka -> Inet" packet from Inet, proto:TCP, len:56, ip/port:81.177.13.32:5000 -> 1.1.1.1:64623, flags: ACK PSH , seq:1929714009 ack:1823998971, win:65506, tcplen:16
[24/Oct/2006 09:00:36] PERMIT "Dimka -> Inet" packet to HKHP, proto:TCP, len:56, ip/port:81.177.13.32:5000 -> 192.168.0.198:2125, flags: ACK PSH , seq:1929714009 ack:1823998971, win:65506, tcplen:16
[24/Oct/2006 09:00:36] PERMIT "Dimka -> Inet" packet from HKHP, proto:TCP, len:52, ip/port:192.168.0.198:2125 -> 81.177.13.32:5000, flags: ACK , seq:1823998971 ack:1929712281, win:17516, tcplen:0
[24/Oct/2006 09:00:36] PERMIT "Dimka -> Inet" packet to Inet, proto:TCP, len:52, ip/port:192.168.0.198:2125 -> 81.177.13.32:5000, flags: ACK , seq:1823998971 ack:1929712281, win:17516, tcplen:0
[24/Oct/2006 09:00:36] PERMIT "Dimka -> Inet" packet from HKHP, proto:TCP, len:52, ip/port:192.168.0.198:2125 -> 81.177.13.32:5000, flags: ACK , seq:1823998971 ack:1929712281, win:17516, tcplen:0
[24/Oct/2006 09:00:36] PERMIT "Dimka -> Inet" packet to Inet, proto:TCP, len:52, ip/port:192.168.0.198:2125 -> 81.177.13.32:5000, flags: ACK , seq:1823998971 ack:1929712281, win:17516, tcplen:0
[24/Oct/2006 09:00:37] PERMIT "Dimka -> Inet" packet from Inet, proto:TCP, len:306, ip/port:81.177.13.32:5000 -> 1.1.1.1:64623, flags: ACK PSH , seq:1929714025 ack:1823998971, win:65506, tcplen:266
[24/Oct/2006 09:00:37] PERMIT "Dimka -> Inet" packet to HKHP, proto:TCP, len:306, ip/port:81.177.13.32:5000 -> 192.168.0.198:2125, flags: ACK PSH , seq:1929714025 ack:1823998971, win:65506, tcplen:266

  • Attachment: log.txt
    (Size: 28.25KB, Downloaded 620 times)

[Updated on: Tue, 24 October 2006 08:19]

  •  
DimkaUA

Messages: 6
Karma: 0
Send a private message to this user
Previous Topic: Proxy, Auth, FTP
Next Topic: 2 connections on winroute ?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Fri Nov 24 06:21:33 CET 2017

Total time taken to generate the page: 0.00365 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.