Forums

Resolved
0 votes
Hello all,

I'm using ClearOS at home as my firewall/content filter/antiviral. Everything was going swimmingly until we started playing FFXIV. What happens is that the launcher goes out to their severs to check for updates and fails if the firewall is enabled and the game doesn't launch. I did do a bit of googling and came up with the ports that it uses, i put them into the firewall rules as follows:

https://dl.dropboxusercontent.com/u/4849953/Capture.JPG

This of course made sense to me and the way i look at it, should have passed all traffic through for the game but it hadn't. The only way for me to allow the game through was to put in a Custom Firewall rule per computer. I believe this bypasses the firewall making it pointless:

iptables -t nat -I PREROUTING -s <internal IP> -j ACCEPT

I was wondering if anyone had any experiences with ClearOS and game clients and perhaps can point me in the right direction to get this working and get my ClearOS back into Gateway mode as i switched to Standalone - No Firewall to allow this through until i can find a solution.

Thanks for the help in advance!
Tuesday, January 05 2016, 12:48 PM
Share this post:

Accepted Answer

Wednesday, January 06 2016, 10:50 AM - #Permalink
Resolved
0 votes
Another possibility is the proxy getting in the way. I once had that problem for external provisioning of a VOIP box. Bypassing the proxy solved the issue.

Cheers

Peter
The reply is currently minimized Show
Responses (6)
  • Accepted Answer

    Sunday, January 10 2016, 11:59 AM - #Permalink
    Resolved
    0 votes
    Let me amend this post real quick with an update, as i set Peter's answer as the solution, it isn't really the easiest one to maintain. I din't want proxy off and the launcher constantly round-robin's it's patch servers, which i could not find a definitive list of. My attempt at adding the addresses from the squid access log for the launcher got too time consuming so i eventually took Nick's advice and installed miniupnp on the box. This seems to solve the issue and let me keep the proxy up without having to manually add entries every time the launcher doesn't work.
    The reply is currently minimized Show
  • Accepted Answer

    Friday, January 08 2016, 12:22 PM - #Permalink
    Resolved
    0 votes
    I'll leave this here for posterity, anyone else having issues, add patch-bootver.ffxiv.com to the Web Proxy Bypass.
    Also the following:

    208.91.112.142
    65.172.31.41
    65.172.31.57

    Otherwise the launcher can't complete the version check.
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, January 05 2016, 06:13 PM - #Permalink
    Resolved
    1 votes
    Will the miniupnp app help here?
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, January 05 2016, 02:35 PM - #Permalink
    Resolved
    0 votes
    You can't...if that game is designed with the requirement to make a connection to your desktop without your desktop making a connection first (which provides the routing and firewall exception for replies coming back), you are limited to that one desktop in which you have added the port forwarding rule.

    B.
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, January 05 2016, 02:21 PM - #Permalink
    Resolved
    0 votes
    There are multiple machines that need access, how do i just open those ports to the whole LAN?
    The reply is currently minimized Show
  • Accepted Answer

    Tuesday, January 05 2016, 01:52 PM - #Permalink
    Resolved
    0 votes
    Looks like you've added those rules to the Incoming/Allow section (app)...Unless you're running the game on your server, I think you want to forward those ports back to the LAN IP of the desktop/laptop where you are actually running the game from. If you haven't installed the Port Forwarding app, install it first from the Marketplace...Delete your incoming firewall rules and replace with the equivalent port forward entries.

    B.
    The reply is currently minimized Show
Your Reply