Thread: (ask)game online bermasalah??

suhu2 mikrotik, aku punya masalah nih dengan mikrotikq.
permasalahnannya klienku nggak bisa bermain game online.
mohon petunnjuk donk supaya klien bisa bermain game online(RO, dll)

ini rule firewall filterq:;

Code:

7   ;;; sharring file
     chain=forward protocol=tcp dst-port=25 src-address-list=SPAM action=drop 

49   ;;; allow established connections
     chain=forward connection-state=established action=accept 

50   ;;; allow related connections
     chain=forward connection-state=related action=accept 

58   ;;; Drop Messenger Worm
     chain=virus protocol=udp dst-port=135-139 action=drop 

59   ;;; drop invalid connections
     chain=forward connection-state=invalid action=drop 

60   ;;; Drop Blaster Worm
     chain=virus protocol=tcp dst-port=135-139 action=drop 

61   ;;; Worm
     chain=virus protocol=tcp dst-port=1433-1434 action=drop 

62   ;;; Drop Blaster Worm
     chain=virus protocol=tcp dst-port=445 action=drop 

63   ;;; Drop Blaster Worm
     chain=virus protocol=udp dst-port=445 action=drop 

64   ;;; ________
     chain=virus protocol=tcp dst-port=593 action=drop 

65   ;;; ________
     chain=virus protocol=tcp dst-port=1024-1030 action=drop 

66   ;;; Drop MyDoom
     chain=virus protocol=tcp dst-port=1080 action=drop 

67   ;;; ________
     chain=virus protocol=tcp dst-port=1214 action=drop 

68   ;;; ndm requester
     chain=virus protocol=tcp dst-port=1363 action=drop 

69   ;;; ndm server
     chain=virus protocol=tcp dst-port=1364 action=drop 


70   ;;; screen cast
     chain=virus protocol=tcp dst-port=1368 action=drop 

71   ;;; hromgrafx
     chain=virus protocol=tcp dst-port=1373 action=drop 

72   ;;; cichlid
     chain=virus protocol=tcp dst-port=1377 action=drop 

73   ;;; Bagle Virus
     chain=virus protocol=tcp dst-port=2745 action=drop 

74   ;;; Drop Dumaru.Y
     chain=virus protocol=tcp dst-port=2283 action=drop 

75   ;;; Drop Beagle
     chain=virus protocol=tcp dst-port=2535 action=drop 

76   ;;; Drop Beagle.C-K
     chain=virus protocol=tcp dst-port=2745 action=drop 

77   ;;; Drop MyDoom
     chain=virus protocol=tcp dst-port=3127 action=drop 

78   ;;; Drop Backdoor OptixPro
     chain=virus protocol=tcp dst-port=3410 action=drop 

79   ;;; Worm
     chain=virus protocol=tcp dst-port=4444 action=drop 

80   ;;; Worm
     chain=virus protocol=udp dst-port=4444 action=drop 

81   ;;; Drop Sasser
     chain=virus protocol=tcp dst-port=5554 action=drop 

82   ;;; Drop Beagle.B
     chain=virus protocol=tcp dst-port=8866 action=drop 

83   ;;; Drop Dabber.A-B
     chain=virus protocol=tcp dst-port=9898 action=drop 

84 X ;;; Drop Dumaru.Y, recommended disable coz usually used to webmin
     chain=virus protocol=tcp dst-port=10000 action=drop 

85   ;;; Drop MyDoom.B
     chain=virus protocol=tcp dst-port=10080 action=drop 

86   ;;; Drop NetBus
     chain=virus protocol=tcp dst-port=12345 action=drop 

87   ;;; Drop Kuang2
     chain=virus protocol=tcp dst-port=17300 action=drop 

88   ;;; Drop PhatBot, Agobot, Gaobot
     chain=virus protocol=tcp dst-port=65506 action=drop 

89   ;;; jump to the virus chain
     chain=forward action=jump jump-target=virus 

90   ;;; Accept established connections
     chain=input connection-state=established action=accept 

91   ;;; Accept related connections
     chain=input connection-state=related action=accept 

92   ;;; Drop invalid connections
     chain=input connection-state=invalid action=drop 

93   ;;; Drop SubSeven
     chain=virus protocol=tcp dst-port=27374 action=drop 

94   ;;; UDP
     chain=input protocol=udp action=accept 

95   ;;; Allow limited pings
     chain=input protocol=icmp limit=50/5s,2 action=accept 

96   ;;; Drop excess pings
     chain=input protocol=icmp action=drop 

97   ;;; FTP
     chain=input protocol=tcp dst-port=21 src-address-list=ournetwork action=accept 

98   ;;; SSH for secure shell
     chain=input protocol=tcp dst-port=22 src-address-list=ournetwork action=accept 

99   ;;; Telnet
     chain=input protocol=tcp dst-port=23 src-address-list=ournetwork action=accept 

100   ;;; Web
     chain=input protocol=tcp dst-port=80 src-address-list=ournetwork action=accept 

101   ;;; winbox
     chain=input protocol=tcp dst-port=8291 src-address-list=ournetwork action=accept 

102   ;;; pptp-server
     chain=input protocol=tcp dst-port=1723 action=accept 

103   ;;; From Datautama network
     chain=input src-address-list=ournetwork action=accept 

104   ;;; Log everything else
     chain=input action=log log-prefix="DROP INPUT" 

105   ;;; Drop everything else
     chain=input action=drop

klo memang portnya masih tertutup, port berapa saja yang harus dibuka?


thank's b4

coba firewall nya dimatiin dulu semuanya...
test, bisa main ngga..

trus coba enable firewall nya satu persatu.. ntar ketauan salah dmn..

tapi gw curiga sama script yg ini

;;; FTP
chain=input protocol=tcp dst-port=21 src-address-list=ournetwork action=accept

98 ;;; SSH for secure shell
chain=input protocol=tcp dst-port=22 src-address-list=ournetwork action=accept

99 ;;; Telnet
chain=input protocol=tcp dst-port=23 src-address-list=ournetwork action=accept

100 ;;; Web
chain=input protocol=tcp dst-port=80 src-address-list=ournetwork action=accept

101 ;;; winbox
chain=input protocol=tcp dst-port=8291 src-address-list=ournetwork action=accept

gak masalah kok firewall 98-101 itu

Port 2000 - 10000 jangan ada yang diblok ..
RO pake port 5000-an, tapi gameguardnya gue lupa pake port berapa.

Terus port 21 juga jangan diblok, itu buat cek patch nya.

kalo untuk internetan bisa gak?
kalo bisa berarti bener ada port yang ketutup,seperti postingan "t3rm".tapi kalo gak bisa internet kemungkinan address ip nya belum masuk ke list (src-address list="ournetwork")

kalo ndak salah port 135-139 juga jangan ditutup
suka ng blok messenger kalo ngga salah

135-139 port netbios nya windows, gak masalah kalo ditutup..