Firewall & Port Basics

Gaming in general is fun, but there's something abouttraffic for benign applications that youwant to have
multiplayer gaming that'seven more enjoyable. Perhapsaccess to the Internet, such as your Web browser,
it's the satisfaction of realizing that the caryou justyour e-mailapplication, and online games?
passed in the last lap is being driven by a real person,The answer is sort of. Picture a computer firewall in
like you, andnot some computer program.terms of its namesake.
But the Internet connection that makes gaming soA firewall in construction terms is a specially insulated
much fun also serves as adoorway through whichwall between officesuites or apartments, which
nefarious hackers can send malicious code, causingprevents fires in one suite from spreading to thenext
havocwith your computer. Broadband users aresuite. But sometimes builders want water or electrical
especially fertile targets for badseeds. That's why aconduits to passthrough the firewall. That's easy
firewall is so important. A good firewall, such asenough—they just poke a hole through thewall, run
Internettheir conduit through, and insulate around it. Computer
Connection Firewall (ICF) that comes with Windowsfirewallslet you do just that. They let you open specific
XP, protects your computerfrom attacks.ports while keeping otherports sealed off.
A firewall works by blocking communication ports thatGaming through ICF
are used to transferdata to and from your PC.So when do you need to open ports? Believe it or not,
However, games (and all applications that workwhen you want to playclient-server games like Return
overthe Internet) use those ports to communicate. Thisto Castle Wolfenstein or Call of Duty on adistant
raises some questions thatwe frequently encounter onserver, you don't have to open any ports. That's
message boards and in the Usenet: how doesbecause firewallsblock data coming in, but not going
afirewall affect the performance of online gaming?out. When your PC sends handshake dataout to the
What do you have to do toenjoy online gaming with aserver, a connection is established, and once that
firewall in place? I'll answer these questions inthis article.connection isfired up, it allows your game to
How Ports Workcommunicate through the firewall.
To get the most out of online gaming through a secureHowever, when you wish to host a multiplayer session
connection, you have tohave some idea of howor play a peer-to-peergame like Age of Empires, you
games communicate over the Internet and how ado have to do a little footwork. In the caseof starting a
firewallworks. Don't worry; this discussion won't getserver, your PC does not initiate a connection. When
inaccessibly technical. I'llstick to layman's terms. To startyou startup a game and choose to host a server, it
with, let's look at how programs talk toeach other overjust sits there and waits for othercomputers to
the Internet. All Internet-aware programs communicateconnect to it. When ICF is in place, those other
witheach other through ports. What, exactly, is a port?computers can'tconnect. In fact, they can't even see
Think of your Internet connection as a water conduit.that your PC is hosting a server.
But instead of thinkingof it as one big pipe, picture it asYou'll have to open one or more ports to allow other
a conglomeration of thousands of smallpipes: 65,535 ofplayers to connect toyour server. Such is also the
them, to be exact. That is the number of Internetcase with peer-to-peer games, in which
portsthrough which communications can take place.eachparticipant has to connect to everyone else's
Different services use different ports—thecomputer. Thankfully, mostgames use a client-server
assignment of which service useswhich port is moreimplementation.
or less arbitrary. For example, World Wide WebTo open ports in your ICF firewall:
communi-cations use port 80. Why port 80? Because1) Click Start, click My Network Places, and under
a few years ago, a bunch ofNetwork Tasks, click Viewnetwork connections.
Internet-related people got together and decided that2) Right-click the connection that you use for the
that's how it would be.Internet, and then click
Similarly, SMTP e-mail traffic uses port 25. ThoseProperties.
same people decided thatthat's how that would go,3) On the Advanced tab, click Settings, and then click
and so on. These and other services use protocolstoAdd.
transmit and receive their data through these ports.In the Description of service box type a name for the
Two protocols thatthey use are Transmission Controlport you're opening. Forexample, "Halo Server."
Protocol (TCP) and User Datagram Protocol4) In the Name or IP address of the computer hosting
(UDP).this service on yournetwork box, type 127.0.0.1.
The 65,535 ports are divided into three groups: Well5) In both the External Port and Internal Port boxes,
Known Ports (ports 0through 1023), Registered Portstype the port number youwant to open.
(ports 1024 through 49151), and Dynamic or6) Click either TCP or UDP, and then click OK. If you're
Private Ports (all the rest). A list of port numbers andunsure, repeat theprocess for both protocols.
what servicescommonly use them is kept up by theIf you choose to make things easier, you can opt to
Internet Assigned Numbers Authority.turn off ICF when hostinga game and turn in it back on
Like other services, the Internet components of gameswhen you're done. However, this leaves yourcomputer
use ports and protocolsto communicate over thevulnerable while your PC is acting as the game server.
Internet. When you play Halo online with a bunchWhich ports do you open? Different games use
ofother people, it has to transmit your keyboard anddifferent ports and some use TCP,some use UDP, and
mouse-click data to theserver so it can tell when yousome use both. You can often find out which ports
move around or fire your weapon. In turn ithas toare usedby a given game by consulting the game's
transmit world data back to your computer so youdocumentation, its Readme file, or byvisiting its Web
can see where otherpeople move so you can aim atsite and checking the FAQ pages. Some games make
them and chase them around. Halo andportinformation readily accessible, and for others, it's
othermultiplayer games like the Quake family, Half-Lifehard to come by. Youmight try visiting a game's
and mods such as TeamUsenet group or the message boards at its officialsite
Fortress Classic and the popular Counter-Strike, Medalor fan sites and posing the question: which ports do I
of Honor: Alliedopen to host aserver? In some cases, you'll not only
Assault, Battlefield 1942 send their data down portshave to open ports for the game's ownneeds, but also
and listen for data fromthe same or other ports. Gameto meet the needs of its matchmaker service, so that
matchmaker services like GameSpy Arcade alsouseyourserver can be listed in other players' server
ports to communicate.browsers.
Firewalls block ports. They are, by their very nature,Be sure to close the affected ports when you're not
communications-blocking applications. By closing offhosting a gaming serverto keep your connection
ports, they prevent malicious entitiesfrom gainingsecure. That sounds like a lot of footwork, but it'sworth
access to your computer through your Internetit to keep your computer safe.
connection. Butdoesn't that mean they also block