Difficulty with port forwarding with eero wifi mesh system

[Big_Nuggie]

Hello all,

For anyone that is interested in helping, I am currently having issues with port forwarding for my Dreamcast. Specifically, I have an eero 6 with 2 extenders for my home where the eero 6 router itself is directly connected to my networks original router for internet. And when I tried port forwarding for games like AFO, I keep getting constant disconnects and I can't join games on worms.

Currently, I tried to set up port forwarding on the eero itself through the app where I portforwarded through the dreampi itself. And in extension, I also attempted to port forward directly on my older router (arris frontier communications router) which did not work either.

I am thinking on just making my eero network into bridge mode where it entirely just acts as an access point but I wanted to reach out to see what else I should attempt to resolve this issue.

Any feedback would be deeply appreciated

-Big_Nuggie

[Scrivani]

Hello friend,

Please let me know if you've tried this:

Inside your Main ISP Router (Arris), the second router has an IP, example 192.168.1.20. So this IP goes to Arris DMZ

Inside your Second Router (Eero6) may exist a different DHCP IP addressing(?), like example 10.0.0.0/24, so maybe the ip of your Dreamcast should be 10.0.0.98, so this IP 98 goes to Eero6 DMZ.

viewtopic.php?f=3&t=16471&p=174915&hilit=Router#p174915

[Scrivani]

Also please send an image of both routers port fowarding configuration pages.

[Big_Nuggie]

Hey so with the help of Scrivani, I managed to resolve this issue.

In summary, we created a .sh file called enable ports where Scrivani listed every game to be port forwarded like this:

#Daytona USA: UDP 20675 | UDP 12079
sudo iptables -t nat -A PREROUTING -p udp --dport 20675 -i wlan0 -j DNAT --to-destination 192.168.4.98:20675
sudo iptables -t nat -A PREROUTING -p udp --dport 12079 -i wlan0 -j DNAT --to-destination 192.168.4.98:12079

#Driving Strikers: UDP 30099
sudo iptables -t nat -A PREROUTING -p udp --dport 30099 -i wlan0 -j DNAT --to-destination 192.168.4.98:30099

#ChuChu Rocket!: UDP 9789
sudo iptables -t nat -A PREROUTING -p udp --dport 9789 -i wlan0 -j DNAT --to-destination 192.168.4.98:9789

#Ooga Booga: UDP 6001
sudo iptables -t nat -A PREROUTING -p udp --dport 6001 -i wlan0 -j DNAT --to-destination 192.168.4.98:6001

#Alien Front Online: UDP 7980
sudo iptables -t nat -A PREROUTING -p udp --dport 7980 -i wlan0 -j DNAT --to-destination 192.168.4.98:7980

#Dee Dee Planet: UDP 9879
sudo iptables -t nat -A PREROUTING -p udp --dport 9879 -i wlan0 -j DNAT --to-destination 192.168.4.98:9879

#Worms World Party: TCP 17219
sudo iptables -t nat -A PREROUTING -p tcp --dport 17219 -i wlan0 -j DNAT --to-destination 192.168.4.98:17219

#The Next Tetris: Online Edition: TCP/UDP 3512
sudo iptables -t nat -A PREROUTING -p tcp --dport 3512 -i wlan0 -j DNAT --to-destination 192.168.4.98:3512
sudo iptables -t nat -A PREROUTING -p udp --dport 3512 -i wlan0 -j DNAT --to-destination 192.168.4.98:3512

#Starlancer and PBA: TCP/UPD 2300-2400 | UDP 6500 | TCP/UDP 47624 | UDP 13139
sudo iptables -t nat -A PREROUTING -p tcp --dport 2300:2400 -i wlan0 -j DNAT --to-destination 192.168.4.98:2300-2400
sudo iptables -t nat -A PREROUTING -p udp --dport 2300:2400 -i wlan0 -j DNAT --to-destination 192.168.4.98:2300-2400
sudo iptables -t nat -A PREROUTING -p udp --dport 6500 -i wlan0 -j DNAT --to-destination 192.168.4.98:6500
sudo iptables -t nat -A PREROUTING -p tcp --dport 47624 -i wlan0 -j DNAT --to-destination 192.168.4.98:47624
sudo iptables -t nat -A PREROUTING -p udp --dport 47624 -i wlan0 -j DNAT --to-destination 192.168.4.98:47624
sudo iptables -t nat -A PREROUTING -p udp --dport 13139 -i wlan0 -j DNAT --to-destination 192.168.4.98:13139

#World Series Baseball 2K2: UDP 37171 | UDP 13713
sudo iptables -t nat -A PREROUTING -p udp --dport 37171 -i wlan0 -j DNAT --to-destination 192.168.4.98:37171
sudo iptables -t nat -A PREROUTING -p udp --dport 13713 -i wlan0 -j DNAT --to-destination 192.168.4.98:13713

#Floigan Bros: TCP 37001
sudo iptables -t nat -A PREROUTING -p tcp --dport 37001 -i wlan0 -j DNAT --to-destination 192.168.4.98:37001

#Internet Game Pack: UDP 5656 | TCP 5011 | TCP 10500-10503
#NBA/NFL/NCAA 2K Series: UDP 5502 | UDP 5503 | UDP 5656 | TCP 5011 | TCP 6666
sudo iptables -t nat -A PREROUTING -p tcp --dport 5011 -i wlan0 -j DNAT --to-destination 192.168.4.98:5011
sudo iptables -t nat -A PREROUTING -p tcp --dport 6666 -i wlan0 -j DNAT --to-destination 192.168.4.98:6666
sudo iptables -t nat -A PREROUTING -p tcp --dport 10500:10503 -i wlan0 -j DNAT --to-destination 192.168.4.98:10500-10503
sudo iptables -t nat -A PREROUTING -p udp --dport 5503 -i wlan0 -j DNAT --to-destination 192.168.4.98:5503
sudo iptables -t nat -A PREROUTING -p udp --dport 5656 -i wlan0 -j DNAT --to-destination 192.168.4.98:5656
sudo iptables -t nat -A PREROUTING -p udp --dport 5502 -i wlan0 -j DNAT --to-destination 192.168.4.98:5502

#Planet Ring: UDP 7648 | UDP 1285 | UDP 1028
sudo iptables -t nat -A PREROUTING -p udp --dport 7648 -i wlan0 -j DNAT --to-destination 192.168.4.98:7648
sudo iptables -t nat -A PREROUTING -p udp --dport 1285 -i wlan0 -j DNAT --to-destination 192.168.4.98:1285
sudo iptables -t nat -A PREROUTING -p udp --dport 1028 -i wlan0 -j DNAT --to-destination 192.168.4.98:1028

We also used putty to remotely connect to the dreampi to edit the necessary files.

Using winscp, we successfully moved the .sh file into dreampi directly by connecting through the dreampi's ip address and moving it into the /home/pi directory. For my setup as well, we needed to dmz the eero wifi system through the original router's configuration page with its ip address.

Since there was a lot of steps, I may have missed a detail or two but I did my best to summarize what we had to do in order to resolve this issue.

[Scrivani]

The same solution had to be done to @Sonic1994DC

So this scenario is when a router system doesn't allow you to enter a manual IP to port foward. It just allow enabled devices with unique mac address.

Then we port foward the same ports needed to the RaspberryPi IP itself. After that i created a set of IPTABLES Firewall Rules, that made the foward inside the Pi again, but now for the Dreamcast IP.

Is individual port forwards, not DMZ, so raspberrypi is ok in terms of network security.

Is a bash script file running every boot, so is easy to disable if needed.

Maybe can help others, so now it's documented.

[JohnSmithhh]

Hello

[SMiTH]

dreamcast talk should pin Scrivani posts of network configs for the insane amount of network setups to get things working.

there are way too many variables to say ok one way fits every scenerio.
pin every damn thread that has setups for online games.
there are too many scenerios to deal with to say get a dreampi and etc.....

its not one size fits all.

[Sonic1994DC]

The same solution had to be done to @Sonic1994DC

So this scenario is when a router system doesn't allow you to enter a manual IP to port foward. It just allow enabled devices with unique mac address.

Then we port foward the same ports needed to the RaspberryPi IP itself. After that i created a set of IPTABLES Firewall Rules, that made the foward inside the Pi again, but now for the Dreamcast IP.

Is individual port forwards, not DMZ, so raspberrypi is ok in terms of network security.

Is a bash script file running every boot, so is easy to disable if needed.

Maybe can help others, so now it's documented.

Glad me and Scrivani worked on this. I'm happy because this info can help others that are going through the same trouble that I had. Again thanks for all your help Scrivani

[RobisMarshall]

Scrivani got mine u and working by putting new rules in the Dreampi. Had to use a few programs such as Putti but he was able to fix it for me directly. I am so thankful for that Now I will be back to online. Thank you for everything Scrivani!