I need to circumvent a firewall.

[Totien]

Because FFXI. I can tether to my phone and that'd be great cause FFXI is a 56k game, but I have to do other things that use plenty more data while I play.

The only options I've found are proxy websites, but that just reroutes URLs. I need to reroute actual port traffic.

How can do?

[Totien]

If it's somehow possible to tell pol.exe to run thru NIC/connection #2 (tether) and everything else to run thru NIC/connection #1 (firewalled ethernet) I think that'd work perfectly.

[bungiefan]

The only way to route port traffic is via a VPN, which may be blcoked by the firewall, and is going to limit you by the internet speed on the other side of the VPN, as well as potentially add more latency. Dividing up applications to separate network interfaces might be possible, but I'm not familiar with doing so in a Windows environment.

[Buffy]

If it's somehow possible to tell pol.exe to run thru NIC/connection #2 (tether) and everything else to run thru NIC/connection #1 (firewalled ethernet) I think that'd work perfectly.

It isn't. Windows controls that and it automatically prioritizes to whichever connection is fastest if you have multiple connections.

There are free VPNs and FFXI doesn't have much lag because of it's age, I'd try a VPN and see if that works.

[Totien]

The only way to route port traffic is via a VPN, which may be blcoked by the firewall, and is going to limit you by the internet speed on the other side of the VPN, as well as potentially add more latency. Dividing up applications to separate network interfaces might be possible, but I'm not familiar with doing so in a Windows environment.

How would you do it in another OS? If there are linux commands to do this I might be able to get it working using cygwin.

What VPNs do you recommend? Googling it I only found how to set up a VPN and how to host one myself.

[mistmonster]

You need to identify what IPs FFXI use, and use the "Route" command to route ffxi traffic to the gateway that your phone uses.

It would look like this on windows:

route add 202.0.0.0 mask 255.0.0.0 <gateway of your phone>

The network 202.0.0.0/8 http://whois.arin.net/rest/net/NET-202-0-0-0-1/pft is where I see a lot of FFXI traffic going too, but my FFXI is updating. If I see any other networks, I'll update this.

edit: you need to run that route command each time you boot windows unless you use the -p

route add -p 202.0.0.0 mask 255.0.0.0 <gateway of your phone>

Also I'm assuming windows defaults to your LAN even when your phone is tethered.

[Hellfury]

to be the mandatory party pooper: if you're doing this at work; on a work computer: be very certain you'll get away with it if you're caught. More and more companies take circumventing internal security like this very seriously, no matter the intent behind it.

on the answer side; I wonder if you could set up a virtual machine, and tell it to use the modem connection (haven't tried, just an idea that appeared to me)?

[mistmonster]

Kind of why I suggested he use his phone for FFXI. As a firewall admin myself, I can not detect this but I can detect VPN's. Only local polices on the computer itself can detect/prevent this type of "circumvention" (yes, still a terrible security risk, as you are now a router and bypassing the firewall, if you are hacked, there is nothing to prevent damage to the internal network and yes security folks take this very seriously)

Need this network too:

route add 124.0.0.0 mask 255.0.0.0 <gateway of your phone>

[Totien]

ok so I'm not actually connecting to FFXI retail, I'm connecting to a private server.

Knowing that, are those IPs still relevant? Idk where you got 202... and 124... from.

[mistmonster]

ok so I'm not actually connecting to FFXI retail, I'm connecting to a private server.

Knowing that, are those IPs still relevant? Idk where you got 202... and 124... from.

Yes, you need the IPs to route the traffic to your phone, instead of the default gateway. I got those networks by doing a packet capture on the retail version. Technically, I got the IP addresses and then looked them up on http://arin.net/ to get the entire network.

[Totien]

route -p add 124.0.0.0 mask 255.0.0.0 172.20.10.1
route -p add 202.0.0.0 mask 255.0.0.0 172.20.10.1

Didn't work.

[Totien]

Also nslookup'd the private server and added that IP.

Didn't work.

[Lucki]

If you're looking for a VPN service, I use/like Private Internet Access (paid) but have used VPN Book (free, no data limit) and liked it in the past. Bonus: both can be used on Android/iOS devices

[mistmonster]

route -p add 124.0.0.0 mask 255.0.0.0 172.20.10.1
route -p add 202.0.0.0 mask 255.0.0.0 172.20.10.1

Didn't work.

yeah these would only help with retail.

They might use more than on IP, like the retail one does. I'm not sure how you entered it (the "route" command). I know this works as I did it for years, unfortunately the only real way to troubleshoot it is use a packet capture software (wireshark) to see where the traffic was going. I was going to just do this for you, but I can't help with the private server.

[Totien]

I'll PM you mist.