NAT, FTPing, game hosting, and voice chatting (on AIM)

[MaxFPS]

The ISP that I'm on is using NAT (I think on Cisco routers) and I'm unable to do the following because of NAT:

1. Cannot voice chat with friends on AIM (already set use different IP in IM Images and Talk)
2. I set up an FTP server on Win2K Pro, gave a friend user/pass and he was unable to connect. I was successul in connected, however.
3. I can set up a game server (CS7 or Q3A) but friends can't connect

Is there anyway I could get around my ISPs NAT software to allow me to do the above?

The IP address which I get is dynamically assigned (DHCP) so it's not visible to the outside world (internet), correct? Is there a way I can pick up an IP address off from NAT so I can use that IP address to setup an FTP site?

 

[Damaged]

Why do you think they're using NAT? If you're using Win2K you should be able to see the IP addy they're assigning you by issuing from a command prompt ipconfig /all. Just because you get assigned an IP via DHCP (Dynamic Host Configuration Protocol) doesn't mean your ISP is using NAT. Those are separate and distinct issues.

I'd be careful with serving stuff as it may violate your AUP (Authorized Usage Policy). Not good as it's grounds for terminating your account.

 

[Scarpozzi]

I hate to say it, but it sounds like you're stuck. If I were you, I would probably try to change ISPs... It's about the only choice you have. From an Admin prospective...it would be "Inconceivable" to use NAT the way you are talking about. There would be too many ip addresses to keep track of. Not only that, but you have to route specific UDP ports to each ip address and for all of that to go through a router, but it would be he** on the router....well, I'm sure it could be done, but don't hold your breath...

 

[MaxFPS]

I know they are using NAT because I spoke with a technician and that's what he told me.

 

[Damaged]

Well, then you're fsck'd. No offense, just the truth.

You should be able to see the internal IP but not the external. Wouldn't matter much anyways you wouldn't be able to do what you wish with it.

 

[M00T]

Don't always believe the telephone techs. Some are knowledgable, some aren't, and some have a checklist.

 

[MaxFPS]

<< Well, then you're fsck'd. No offense, just the truth. >>



Before I posted this thread I kinda figured that but I was hoping someone more knowledgeable about the matter (like you guys) might have known a way around it.

Hmmm, can anyway tell me what I have to do once I breach the communications room here at the apartment complex I'm staying at? Joke guys!

While I on-campus (NCSU) over there summer I was able to do all of the above without any problems. Which probably means NCSU isn't using NAT? My question now is why would someone with a large network as NCSU let users FTP, game hosting, etc but yet this ISP I'm on (Intetech) puts up security measures for possible attacks? I can understand it's one less thing they have to worry about as far as security but it's limiting what users can do on the net. I could care less about hosting a game but voice chatting (save on long distance calls), and FTPing can be, in some cases, necessary.

Guess I'll have to wait until I go back to dorming on-campus sometime next year

Damaged (or anyone else),
Intetech recently finishing configuring the routers for T1 speeds this week. I'm dual-booting WinME and Win2K. I've done the line speed tests at [L]www.computingcentral.com[/L] under Win2K and I only get 30-40 kb/sec. OTOH, while running WinME I get the ACTUAL T1 speeds (close to it). Don't you guys find this odd? Shouldn't it be the other way around as Win2K has the update, more efficient TCP/IP stack? This one has me puzzled at the moment.

 

[Damaged]

Hadn't thought of this at first but you could ask them if they sell or make available static IPs.

As to the second issue, try looking at the tweaks at speedguide.net for some help with Win2K tweaks. May just help you out there.

 

[pink_panther]

Here's how you see your global IP (the Cisco's IP) which is your only real IP address:

Telnet into your router or use hyperterminal (be sure to connect the serial cable to a COM port first if you use hyperterminal)

at the CBOS prompt type:
SHOW NAT

As for getting your other apps to work, you need to open the required ports. Let's consider FTP; It uses TCP ports 20 and 21 so you'll need to open those on the router:

at the CBOS prompt type:
ENABLE
(you need to be in enable mode to make port changes)

you now have a CBOS# prompt

type the following:
set nat entry <internal IP> <port> <global IP> <port> <protocol>

here's an example, assuming your FTP server has an address of 10.0.0.5, your global IP is 216.120.100.1 and the ports you want to open are 20 and 21 (TCP):

set nat entry add 10.0.0.5 20 216.120.100.1 20 tcp

set nat entry add 10.0.0.5 21 216.120.100.1 21 tcp

then type:
WRITE
(to save changes)

As for the game server, me thinks you are out of luck. The server software will use the PC's IP addy, not the router's, so internet gamers won't ever be able to connect to it.

I know it's possible to get AIM working, open a single port (as per the FTP example above) and make sure you set the connection in AIM to match the port you opened. It doesn't matter which port you open, just make sure AIM knows what one you picked.

Hope that helps

-Panther

 

[Damaged]

Err, where did you get the idea that he's using NAT on a Cisco router?

And, if the ISP is using a Cisco it doesn't run CBOS it runs IOS. Totally different ball game there.

 

[pink_panther]

Err, /me is jumping to conclusions again...

He's probably not using NAT on his end unless he has DSL, so you're right DAMAGED.

Disregard above post

 

[Damaged]

Ehh, no biggee. I was just like &quot;WTF? Did I miss something there?&quot;

 

[MaxFPS]

Damn, pink_panther you had my hopes up for a few seconds I wish all that network hardware was sitting in my room though Then I'd really have some fun.

BTW, the technician I spoke must have felt some sympathy for me because he went as far as asking his manager if they would assign me a static IP address so I could FTP and voice chat with my family back home (save on long distance calls). Unfortunately she said no:| Oh well

 

[Damaged]

You couldn't even purchase one? Bummer.