How to connect from behind locked ports?

[BruThoL]

Are you ready to pay some fee?

For something like 15€/month, you can have a dedicated server else, you can install a ssh server on some computer at home.
In the SSH config file (here for debian : /etc/ssh/ssh_config), configure the listening port to be '80'.

Then at work, use putty on windows, or "ssh" on linux/mac OS to create a tunnel between your work PC and your server.
Make a dynamic tunnel listening on 81

Then with sockscap, make javaw to use this tunnel (socks v5).

[buzzard]

No i dont want to pay...
*******
I *somehow* managed to run the "Your Freedom" + set the Java network options with the result: I connect to Authorisation server and if I put good login&pass and its Autorise then Connecting... and nothing. With wrong login/pass it say its wrong. So I made a step forward!!
I guess I need to set the ports of the game itself right now.. but what will be its adress / IP / etc?

Right now my sets are:

In Control Panel> Java > Network Settings > Use Proxy Server >Advanced - HTTP: localhost:8080, Socks:1080
In Your Freedom>Ports> Local Port Forwards> 21 - http://www.havenandhearth.com/portal/autohaven - 1870 and 1871
Without YF run - HaH gives error message and dont run.

Not sure if that is correct but the authorisation works...

And ideas what next?
EDIT: i found out the server adress might be moltke.seatribe.se / 178.63.100.209 but i'm not sure. It don't work hovewer (looks like it is the authorisation server or something)

[Hipponos]

Any progress here?

Anyone can help? There are more of us interested in this issue...

[Hipponos]

bump to the top.

Any system admins here that could help with this?

[kaizokuroof]

hey brother!!!

just try editing your run.bat file

it should read something like this:

.\updater\HnH_updater.exe
"C:\Program Files (x86)\Java\jre6\bin\java.exe" -Xms512m -Xmx1024m -Dhttp.proxyHost=yourHost -Dhttp.proxyPort=yourPort -jar haven.jar moltke.seatribe.se

In my case at work:

.\updater\HnH_updater.exe
"C:\Program Files (x86)\Java\jre6\bin\java.exe" -Xms512m -Xmx1024m -Dhttp.proxyHost=proxy.work -Dhttp.proxyPort=8080 -jar haven.jar moltke.seatribe.se

This should work with minecraft as well I'm at home at the moment but I'm fairly sure that should work, if your proxy uses those ports... You may need to slightly edit it =)

but I Hope this helps.

[arthuratwar]

hey brother!!!

just try editing your run.bat file

it should read something like this:

.\updater\HnH_updater.exe
"C:\Program Files (x86)\Java\jre6\bin\java.exe" -Xms512m -Xmx1024m -Dhttp.proxyHost=yourHost -Dhttp.proxyPort=yourPort -jar haven.jar moltke.seatribe.se

In my case at work:

.\updater\HnH_updater.exe
"C:\Program Files (x86)\Java\jre6\bin\java.exe" -Xms512m -Xmx1024m -Dhttp.proxyHost=proxy.work -Dhttp.proxyPort=8080 -jar haven.jar moltke.seatribe.se

This should work with minecraft as well I'm at home at the moment but I'm fairly sure that should work, if your proxy uses those ports... You may need to slightly edit it =)

but I Hope this helps.

Could you expand a little on this? How do you get the host for "Dhttp.proxyHost=yourHost" ?

[Hipponos]

hey brother!!!

just try editing your run.bat file

it should read something like this:

.\updater\HnH_updater.exe
"C:\Program Files (x86)\Java\jre6\bin\java.exe" -Xms512m -Xmx1024m -Dhttp.proxyHost=yourHost -Dhttp.proxyPort=yourPort -jar haven.jar moltke.seatribe.se

In my case at work:

.\updater\HnH_updater.exe
"C:\Program Files (x86)\Java\jre6\bin\java.exe" -Xms512m -Xmx1024m -Dhttp.proxyHost=proxy.work -Dhttp.proxyPort=8080 -jar haven.jar moltke.seatribe.se

This should work with minecraft as well I'm at home at the moment but I'm fairly sure that should work, if your proxy uses those ports... You may need to slightly edit it =)

but I Hope this helps.

Unfortunately this doesn't do the trick. I get the same result as without additional parameters. I'm pretty confident that the problem is in ports H&H uses. By using proxifier I managed to get to authorization server which uses TCP, but connection to game server fails.

Could you expand a little on this? How do you get the host for "Dhttp.proxyHost=yourHost" ?

Assuming you can't get to the Internet without proxy, you can check this value in your Internet explorer settings. Tools->Options->Connections->LAN settings.

[Hipponos]

I'm still hoping to get some input here... Anyone?

[desh001]

Depends if you are behind a proxy or a firewall.

Just a commend on previous posts. You can change the java settings but that will only get part of it to work. This game like most games runs the game traffic over a UDP port. There is some part of the startup that will run over the TCP which you can run over a proxy but there is little you can do about the UDP.

If you only have a firewall you can use SSH and the port forwarding trick. It mostly works but tends to be tricky to setup. IT can easily rig it so you cannot issue the commands. This method will not work for a proxy setup. SSH is normally not even possible via a proxy.

The method that is almost impossible to defeat and works though anythings is SSL VPN. They cannot block SSL since that is HTTPS. First option is to buy this service from a provider. Make sure it is SSL VPN not HTTP since HTTP is not encrypted and the proxy knows how to detect tunnel traffic. BUT if IT is smart they have blocked all the proxy sites. Now you need to go to a private SSLVPN server. Best option is your house. There is one free server that runs on ubuntu but you pretty much need a dedicated machine. Your other option is to buy a router with this feature. Be careful most VPN routers run IPSEC not SSLVPN. I use a cisco 2811 I got off EBAY it has a very limited 2 session sslvpn but is good enough for home use.

Most SSLVPN clients can run 3 ways. If you can install the client it is the smoothest. If not you will need to run activex or java based clients that are dynamically installed. They could technically block this but if java and activex are fundamental to many web sites. You want to avoid the java version, since the game is java based.

This does not mean you will not get caught. Part of my job is to monitor the proxy servers where I work. A SSLVPN session looks very different from normal SSL traffic. It tends to stay up for a long time and transfer much more data. If one of these sessions get my attention I can monitor it. Even though it is encrypted I can see the key exchange process. If the keys are registered I can see who owns them. If they are not then I can assume it is most likely a unauthorized activity.
Key here is not to draw attention to yourself by do too much of this.... the filesharing boys tend to get caught.

The other option is to just teather a cell phone with a data plan or use a cell with a hotspot capability. You can mess around with the routing and have both networks active at the same time

[Hipponos]

desh001 thank you very much!!
You answered everything I needed to know.

I'm behind a corporate proxy which used to allow me to play H&H. It was all ok until I forgot I had a haven map open in one of the tabs while I was really working... so admin saw some strange traffic ( lot of small packages in short periods of time ). I wasn't playing at the time but seems like admins went through some logs...
I'll have to think about using SSL VPN compared to the risk of getting caught...