Is it possible to play behind a NAT firewall?

[simionea]

Hi!

My computer is behind a NAT firewall that forwards all TCP, UDP and ICMP traffic. Unfortunately I can't play the game.
"ROClientGame.exe" stops at the stage "Connecting... Checking firewall...".
What could be the problem? Does "ROClientGame.exe" need to accept incoming connections from the Internet?

Thanks.

[Znurre]

Yes it needs in/out access.
In theory, you could use a SSH Tunnel do play the game but I didn't get it working myself yet.

I suppose you are trying to play the game from your school or something similar?
Then you could also try this:

www.your-freedom.net

[simionea]

Originally Posted by Znurre

Yes it needs in/out access.
In theory, you could use a SSH Tunnel do play the game but I didn't get it working myself yet.

Thanks! I will think about this possibility.

Originally Posted by Znurre

I suppose you are trying to play the game from your school or something similar?
Then you could also try this:
www.your-freedom.net

You are right. I'm trying to launch the game at my workplace
I'd like to achieve my goal without installing third-party applications.

[Froste]

I play behind a nat.

[Znurre]

So do I at home, but the point is that most workplaces/schools prevent outgoing traffic on all ports but 80 and sometimes 443.

[mrclean]

Originally Posted by simionea

Thanks! I will think about this possibility.



You are right. I'm trying to launch the game at my workplace
I'd like to achieve my goal without installing third-party applications.

If there's a firewall closing regnum ports I don't think you can achieve it. You need at least an HTTP tunneling for it.

EDIT: Mind that the use of HTTP tunnels may be forbidden by some companies...

[ArcticWolf]

Originally Posted by Znurre

Yes it needs in/out access.
In theory, you could use a SSH Tunnel do play the game but I didn't get it working myself yet.

If you're in linux you would need to set up a ssh dinamic (-D port) tunnel to a computer outside the wall and then to re-route all the traffic from the Client to localhost with iptables. It's just a guess, I can't try that ATM, but it should work.

Originally Posted by Znurre

So do I at home, but the point is that most workplaces/schools prevent outgoing traffic on all ports but 80 and sometimes 443.

And some others just block all the non-http like traffic in those ports. I heard something about http(s)-tunneling, but I don't have any information about that. I'll tell you if I find some!

[Znurre]

Originally Posted by Xephandor

If you're in linux you would need to set up a ssh dinamic (-D port) tunnel to a computer outside the wall and then to re-route all the traffic from the Client to localhost with iptables. It's just a guess, I can't try that ATM, but it should work.

I have tried this from my school.
I was 50% sucessful

I used tsocks to make the game use my socks emulation SSH Tunnel, but, at official server I would get disconnected almost at once and at experimental I wouldn't see any mobs, neither would my position get updated.

It's my guess that the UDP packages didn't get forwarded properly.

[ArcticWolf]

What if you try setting the encryption lvl to the minimum? The server may be dropping packages because of the time it takes to hop from the NAT'd computer to the SSH server and then to Ra.

I'd love that Surak could enlighten us about this :P

[Froste]

Originally Posted by Xephandor

What if you try setting the encryption lvl to the minimum? The server may be dropping packages because of the time it takes to hop from the NAT'd computer to the SSH server and then to Ra.

No, ssh tunnelling takes no (or extremely little) overhead, but you can set the encryption to blowfish for less cpu-time overhead (still negligable).

EDIT: Znurre, I assume the initial port is just for making the connection, it would prolly need a range afterwards that it hops to transfer the data stream. Or something like that.