L2J Server

What are the only ports needed for server to can run and ppl to enter ? I am planing to let only the ones needed for it to run to reduce attacks.

If we suppose that you are running LS and GS from same machine and the ips you have set are internal (if you set internal not same as external), then i think you only need login server port open (2106) but not sure. try to test to your pc...

I think I already find out , need mysql port, java, ls,gs, 80 and some more

The minium number of ports are 2106 (Login) and 7777 (Game or what ever port you set your game server to).

For L2 Client connection:

• LoginServer: 2106 TCP
• GameServer: 7777 TCP

For Web Server:

• 80 TCP

You NEVER should open MySQL and Java port because it would vulnerate your security

PS: Also if you're using Windows Dedicated Server, remember to leave open Terminal Server port 3389

kocinski wrote:For L2 Client connection:

• LoginServer: 2106 TCP
• GameServer: 7777 TCP

For Web Server:

• 80 TCP

You NEVER should open MySQL and Java port because it would vulnerate your security

PS: Also if you're using Windows Dedicated Server, remember to leave open Terminal Server port 3389

nah didn't open the ports for mysql and java but the firewall ask me to allow them or not if I no allow no think server will run

If you have all local in your server (LS and GS without external DB or anything), don't need to open MySQL, local conections work well.

If you have a web: 1: local webserver: don't need to open Mysql. 2: remote server: open the port only to web server IP, create a mysql user and grant it the minimum privileges, like only select, by columns. The mysql user must have '@ipwebserver'!

Lupu1 wrote:What are the only ports needed for server to can run and ppl to enter ? I am planing to let only the ones needed for it to run to reduce attacks.

In fact it depends what is your network structure. If you are running all services on a single machine then... you still have two options:
a) you are using the firewall built in your system
b) you have created a DMZ and your machine has a private IP.
If A) I suspect that you need to bind your services to a local host (127.0.0.1) and this should wor fine.
In case of B) you need to do a static translation from your private IP to a public IP, than you need to allow incoming traffic on ports TCP/2106, TCP/7777 (if you also have a web server TCP/80,443). Would be nice to allow outgoing traffic from your server in case you're doing the updates (typically ports TCP/80 and 443).

A.