Testers needed to confirm CPF games rule settings.

[Guest]

[panic]

G'day,

I'm working on compiling a set of rules for CPF to allow online game playing for a large number of games. I currently have 44 games worked out but don't have all the games to test the rules.

If you have any of the games listed below and would like to help me out, please PM me and let me know which games you can test and I'll send you the rule parameters.

****************************************
ACTION PC FOOTBALL 2006 (1 RULE)
AGE OF EMPIRES (3 RULES)
AGE OF EMPIRES II (2 RULES)
AGE OF EMPIRES III (2 RULES)
ALIEN vs PREDATOR (3 RULES)
AMERICAS ARMY (3 RULES)
APACHE (1 RULE)
ATC BATTLEFIELD 1942 (1 RULE)
ATC BATTLEFIELD 2 (1 RULE)
ATC GHOST RECON 2 (1 RULE)
BALDURS GATE I and II (2 RULES)
BATTLEFIELD 1942 (3 RULES)
BATTLEFIELD VIETNAM (2 RULES)
BLACK AND WHITE (1 RULE)
BRIDGE COMMANDER (1 RULE)
BROTHERS IN ARMS - EARNED IN BLOOD (2 RULES)
CALL OF DUTY (2 RULES)
CALL OF DUTY 2 (2 RULES)
CALL OF DUTY UNITED OFFENSIVE (2 RULES)
COMMAND & CONQUER GENERALS (2 RULES)
COMMAND & CONQUER RED ALERT (2 RULES)
COMMAND & CONQUER RED ALERT 2 (2 RULES)
COMMAND & CONQUER RED ALERT 2 YURIS REVENGE (2 RULES)
COMMAND & CONQUER RED ALERT AFTERMATH (2 RULES)
COMMAND & CONQUER RED ALERT COUNTERSTRIKE (2 RULES)
COMMAND & CONQUER RENEGADE (2 RULES)
COMMAND & CONQUER THE COVERT OPERATIONS (2 RULES)
COMMAND & CONQUER TIBERIAN DAWN (2 RULES)
COMMAND & CONQUER TIBERIAN SUN (2 RULES)
COMMAND & CONQUER TIBERIAN SUM FIRESTORM (2 RULES)
COMMAND & CONQUER ZERO HOUR (2 RULES)
COUNTERSTRIKE (3 RULES)
DAYS OF DEFEAT (3 RULES)
DEER HUNTER 2005 (1 RULE)
DELTA FORCE (1 RULE)
DIABLO (1 RULE)
DIABLO II (2 RULES)
DOOM III (1 RULE)
DEUS EX (2 RULES)
FEAR (1 RULE)
STARCRAFT (1 RULE)
WARCRAFT II BATTLE.NET EDITION (1 RULE)
WARCRAFT III (1 RULE)
WORLD OF WARCRAFT (1 RULE)
**********************************************

I have around another 100 or so to complete. These will be added to this list over the next few days/weeks/epochs.

Please note - these rules relate strictly to the games actual online port requirements. Some of these games may be copy protected and some copy protection schemes (notably SafeDisk 2.7 and higher) generate a pseudo-randomly named file as part of the protection. This additional file may also require an additional port.

The port requirements for these games have been derived from the games' suppliers official support sites, third party gaming sites and third party support sites.

Thanks in advance,
Ewen :-)

P.S. If you have any games you would like to see added to this list, please add them to this topic.

Ewen :-)

[Rucia]

Great idea.  Here's a few i can think of at the moment that you could add to your list.

Half-Life Counter Strike
Splinter Cell Double Agent
Unreal Tournament 2004
Warhammer Dawn of War
Warhammer Mark Of Chaos

[Soak]

Maybe add:

Microsoft Flight Simulator X  (uses GameSpy which you can connect directly through a mulitplayer feature built into the game).

IL2 Sturmovik 1946 (many join dedicated servers through Hyperlobby)

http://hyperfighter.sk/

I'm an admin on WarBirdsofPrey which hosts Two servers for IL2 Sturmovik 1946 (shameless plug)

http://warbirdsofprey.org/

I'm very familiar with both and will offer any assistance.

[panic]

****************************
COMMAND & CONQUER RENEGADE (2 NETWORK RULES - 2 APPLICATION RULES)

CONFIRMED by RUCCIA - 8/1/07

NETWORK MONITOR RULES
---------------------
Action : ALLOW
Protocol : TCP
Direction : OUT
source IP : ANY
Destination IP : ANY
Source Port : ANY
Destination Port : 3840, 4005, 4808, 4810, 4995, 7000, 7001,7002

Action : ALLOW
Protocol : UDP
Direction : OUT
source IP : ANY
Destination IP : ANY
Source Port : ANY
Destination Port : 1234, 1235, 1236, 1237

APPLICATION MONITOR RULES
-------------------------
APPLICATION : game.exe
PARENT: Renegade.exe
ACTION : Allow
PROTOCOL : TCP/UDP
DESTINATION IP : ANY
DESTINATION PORT : 53,80

APPLICATION : Game2.exe
PARENT: game.exe
ACTION : Allow
PROTOCOL : TCP/UDP
DESTINATION IP : ANY
DESTINATION PORT : 53,80,4005

****************************

These four rules allow C&C Renegade with Anti-Cheat activated to work over the net. If you don't use Anti-Cheat, you can omit the Application Monitor rule for GAME2.EXE.

Hope this helps,
Ewen :-)

[Someone]

Hi there,

The way i use CPF to play a game is opening the console, then start the game (the example Am Army2.5), and if the game opens in full screen, ALT-Tab - Comodo - back to the desktop, allow, back to the game. Usually the game doesn't even open in full screen with comodo console open.

This is stone age, i know, but it works. What i'm saying is: this is not in my priorities!
(new year good mood lol)

[panic]

Hi there,

The way i use CPF to play a game is opening the console, then start the game (the example Am Army2.5), and if the game opens in full screen, ALT-Tab - Comodo - back to the desktop, allow, back to the game. Usually the game doesn't even open in full screen with comodo console open.

This is stone age, i know, but it works. What i'm saying is: this is not in my priorities!
(new year good mood lol)

Could you please test the following rules for me.

**********************************

AMERICAS ARMY (3 RULES)

Action : ALLOW
Protocol : TCP
Direction : IN/OUT
source IP : ANY
Destination IP : ANY
Source Port : 20025-20048
Destination Port : ANY

Action : ALLOW
Protocol : UDP
Direction : IN/OUT
source IP : ANY
Destination IP : ANY
Source Port : 1716-1718
Destination Port : ANY

Action : ALLOW
Protocol : UDP
Direction : IN/OUT
source IP : ANY
Destination IP : ANY
Source Port : 8777,27900
Destination Port : ANY

****************************

If your method works fro you, that's great, but if you could test these rules, it would help others.

Thanks in advance,
Ewen :-)

[Someone]

OK, i'll check it tomorrow. It's very very late here. Good to see this dedication to others, even if it is games .

But ask the others that find it a pain if bruteforce works for them! !

[panic]

OK, i'll check it tomorrow. It's very very late here. Good to see this dedication to others, even if it is games .

But ask the others that find it a pain if bruteforce works for them! !

LOL - youre talking to the King of bruteforce here! My motto is "When all you have is a hammer, make everything look like a nail."

N.B. The rule parameters supplied are for the application monitor and assum that you already have sufficient outbound network monitor rules. The supplied port details are just for the games executables, but some copy protection methods (notably safedisk) utilise temporary files that access the net. Watch out of these.

Thanks again,
ewen :-)

[Someone]

I assume this has to do with the network rules you mentioned:

Action : ALLOW
Protocol : TCP
Direction : IN/OUT
source IP : ANY
Destination IP : ANY
Source Port : 20025-20048
Destination Port : ANY

No source, just destination IP and Port. What are the rules that need to be made? And the reason for them. Should be for tighter outbound control, but clarify a bit for me, i install and forget. I don't know enough about networking to mess with the rules. (now that the search for sec. apps frenzy ended, maybe i'll read more)

[panic]

I assume this has to do with the network rules you mentioned:

Action : ALLOW
Protocol : TCP
Direction : IN/OUT
source IP : ANY
Destination IP : ANY
Source Port : 20025-20048
Destination Port : ANY

No source, just destination IP and Port. What are the rules that need to be made? And the reason for them. Should be for tighter outbound control, but clarify a bit for me, i install and forget. I don't know enough about networking to mess with the rules. (now that the search for sec. apps frenzy ended, maybe i'll read more)

The rules are actually Application Monitor rules, specific for Americas Army,  and these work in conjunction with the Network Monitor  rules. The default NM rules includes one that allows traffic out, but the application sending the data has to have a correponding AM rule.

For  example, Command and Conquer Renegade requires two AM rules, one for the main executable (game.exe) and another for its anti-cheat module (game2.exe) (see post below).

The three rules I've outlined for you are for whatever applications within Americas Army that try and access the network. These are the pop-ups you mentioned that you ALLOW, after Alt-Tabbing back to the CPF console. If these rules are "pre-made" in the application monitor, you won't even get the pop-ups when you run the game and you won't have to open the console first.

The only info I didn't have was the actual executable names that need to access the internet.

Using explicit AM rules like this ensures that you are only openening the ports that are needed for the specific applications that need them.

Hope this helps,
Ewen :-)

[Someone]

To clarify:
I meant to ask if it was related to NM rules. I understood that the rules you gave were for the AM.
BUT: i can't find source ip nor source port settings. Just these tabs (selecting "Add" in A.M. of course) :
General, Destination IP, Destination Port, Miscellaneous.

[panic]

To clarify:
I meant to ask if it was related to NM rules. I understood that the rules you gave were for the AM.
BUT: i can't find source ip nor source port settings. Just these tabs (selecting "Add" in A.M. of course) :
General, Destination IP, Destination Port, Miscellaneous.

Source IP HAS to be you, since the app is originating on the PC running CPF, therefore source is assumed in AM rules. Source port could  be anything, which is why it is set to ANY.

cheers,
ewen :-)

[BullHorn]

The America's Army rules work, but only needed when hosting a server. when you're just playing it's enough to "Allow" AA in the popup window of the firewall.

[AOwL]

You have metwork monitor rules for COMMAND & CONQUER RENEGADE that specify OUT. Are those needed since there is a default OUT any any any any?

[Rucia]

AOwl,

The NM rules are only needed if you don't have the default rule of any any any any

[Tags:]