Guarddog firewall settings for tremulous.

[ninjaweasel]

I have been able to play tremulous with no problem until I installed guarddog firewall.  Despite setting the game protocols for quake, quake 2 and quakeworld to allow I cannot connect to a server. There is not an option for quake 3.  Is anyone else using this firewall and if so what settings are you using to allow connection to the servers?

[Taiyo.uk]

The default Tremulous port is 30720, you'll need to open this port.

[cactusfrog]

the above thing will work but i think if you have a firewall that is that stupid to just disable it

[David]

How is that stupid?
The whole point of a firewall is that it blocks everything...

[Sap]

I use Firestarter and had similar problems connecting to tremulous (and many other internet programs) before when I had set its outbound policy to "Restrictive by default, whitelist traffic". Many servers use non-default ports so you might have to give a range , say 30700-30800 or perhaps even larger.

Alternatively, unless you have really strong reason for restricting outbound traffic , you may just set it to something which is "Permissive by default, blacklist traffic" . The option may be different in Guarddog so just look for it.

[cactusfrog]

what is the point of a firewall anyways to keep viruses from connecting to the internet? IF you just run a virus scan every week and you will be fine. 

[Syntac]

The point of a firewall, as I understand it, is twofold:
    • Prevents attackers from connecting to arbitrary ports on your machine
    • Prevents possiby malicious software on your computer from connecting to other machines

[Hendrich]

I have two suggestions:

A)Get a better firewall that you could tell which programs to block/not to block

or

B) Dis-able the firewall everytime  you want to play, are you that lazy? 

[mooseberry]

Or just tell your firewall not to touch tremulous...

[Taiyo.uk]

what is the point of a firewall anyways to keep viruses from connecting to the internet? IF you just run a virus scan every week and you will be fine. 

Firewalls are to block malicious inbound connections, not outbound connections from viruses. How do you think the malware is installed on your machine in the first place?

[cactusfrog]

downloading spam programs and stuff

[Archangel]

Actually, any secure and critical box I run (like my webhosting box) I allow only certain ports outgoing -- namely 22, and 53. Incoming, only 80, and 22 are accepted. :]

[David]

And if someone gets in and is in a position to be starting outbound connections, iptables -F.

[Archangel]

iptables? Maybe more like a hardware firewall.

[Einstein]

I'm confused - you're all talking about different things. Guarddog and Firestarter aren't firewalls, really, they just provide a nice GUI interface for Linux's iptables firewall and monitor the logs for you. Outbound connections are sometimes important to secure; I have mine set rather restrictively, although I have very little software on my system that would ever want to "phone home" to begin with, so it's pretty easy to enable the ports and services I use everyday.

Firewalls generally have very little to do with viruses, given that most use already commonplace media to propagate, and on Linux this isn't really a problem anyways; the only viruses you really need to worry about are those that one might inadvertently pass on to a Windows box. The master server for Tremulous and the majority of the game servers listed therein use port 30720; however, as mentioned above, specific servers also opt to use nonstandard ports. You'll need to allow UDP traffic through all of these, both inbound and outbound.

manpages will not solve all of your problems, but will give you the resources necessary to do so:

Code: [Select]

$ man iptables If you still aren't comfortable with iptables, Guarddog and Firestarter are the two main apps to help you manage your network traffic in a more user-friendly fashion.