Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

Another firewall question

Cherry Hainsworth
Registered User
Join date: 31 Jul 2006
Posts: 125
07-31-2006 10:30
Hi :)

My router requires an IP address to connect to, as well as the ports.

I looked up SecondLife, but you have lots of IPs!
Which one should I put into the router's firewall settings, please?

(Also posted in the Wiki)

Thanks,
CH
Thili Playfair
Registered User
Join date: 18 Aug 2004
Posts: 2,417
07-31-2006 10:42
https://secondlife.com/tiki/tiki-index.php?page=TechConfigFirewall

Hardware firewalls need to allow access on certain network ports. Second Life needs to connect to ports 443/TCP, 12035/UDP, 12036/UDP, and 13000-13050/UDP. You should configure your firewall to allow outbound traffic on those ports, and related inbound traffic. You'll need to consult your firewall's documentation, or the manufacturer's website, for instructions on how to make these changes to your firewall.

If your hardware firewall is a Cisco router/switch that uses reflexive access lists (IOS 11.0 or later), add these lines to your outbound access list:
permit tcp any any eq 443
permit udp any any eq 12035 reflect outbound-SL
permit udp any any eq 12036 reflect outbound-SL
permit udp any any range 13000 13050 reflect outbound-SL

Then, on your inbound access list, add:
permit tcp any any established
evaluate outbound-SL
Then, apply these access lists. SL should now be able to communicate through this router.

If your hardware firewall is a Linux box that uses Killerwall, add these lines to your /etc/killerwall.acl:

IN IFACE <your lan interface> FROM 0.0.0.0/0 TO 0.0.0.0/0 tcp TOPORT 443 ACCEPT
IN IFACE <your lan interface> FROM 0.0.0.0/0 TO 0.0.0.0/0 udp TOPORT 12035 ACCEPT
IN IFACE <your lan interface> FROM 0.0.0.0/0 TO 0.0.0.0/0 udp TOPORT 12036 ACCEPT
IN IFACE <your lan interface> FROM 0.0.0.0/0 TO 0.0.0.0/0 udp TOPORT 13000-13050 ACCEPT

also check

http://secondlife.com/knowledgebase/search.php?query=router&submit=Go
Cherry Hainsworth
Registered User
Join date: 31 Jul 2006
Posts: 125
Done!
07-31-2006 11:27
Hurray, my second life is just beginning ...

Thanks :D
CH