Need a VPN to update FG

[i3ullseye]

Not sure how related this may be........

I have been fighting with FG over the past few days to get connected for updates. Xfinity may have done some upgrades, increased speed, etc... but that seemed to have come with some added new security features. Security features that impacted absolutely nothing except FG. I have spent hours over the past few days finding and disabling various features. Deleting and recreating port forwarding and triggering. Exceptions in Gateway firewalls and Windows firewalls, to disabling them all. Turning off any and all adware, virus or other scanners and such. Connecting to my phone as a hotspot even.

Nothing.

So frustrated, I just connected to my VPN (I use BoxPN). Boom.... now I can reinstall and connect. Updates and purchases download and install fine. Before using the VPN I didn't seem to be able to contact FG servers at all using the game engine. The web site worked fine, and I even reset my password a few times and uninstalled and reinstalled FG a few times.

Is it possible that the host servers somehow have a blocked list of IP's or something, and somehow I am on it? I am at a loss how the only thing that really seemed to change was what IP I presented to the FG servers for it to start working. I am also unsure how that might block the game client, but not a web log on. I was always under the impression if you could log in on the website, then the game should update files just fine, but that was clearly not the case.

Any ideas? Any more info you need form me to see perhaps what is going on?

Edit to add:: The VPN allowed me to install and get all my updated, but fails the connection test to host. So it doesn't resolve the port forwarding issue at all.

[Trenloe]

I've moved this post to its own thread in the House of Healing forum so that your specific issue can be looked at in isolation to the generic VPN thread you originally posted in.

[i3ullseye]

Added info.... when i watch which ports are in use on MY pc during the connection and update processes, I see which ports are used, and which IP they are attempting to resolve against. I cannot Ping or Tracert to that IP address. Now Ping is often disabled for security, so I tried to Tracert from another location, using an online trace.... and it worked just fine. My PC does a Tracert to Google just fine, and other sites. Just not the FG web server.

Not sure how it can be my PC or network causing an issue like that.

[Trenloe]

Please post an example of the tracert output when it fails - this might help to identify which hop in the communication is blocking the connection.

[i3ullseye]

Sure. Not ,much info however.

29322

[JShadow007]

I'm getting the same issue as well--Xfinity did something stupid on their end and now they've broken FG's ability to check for updates.

The good news is, we're getting high speed fiber in our neighborhood extremely shortly so I can kick these idiots to the curb...but in the interim... any ideas?



1 8 ms 4 ms 5 ms 10.0.0.1
2 13 ms 11 ms 11 ms 96.120.25.37
3 13 ms 14 ms 13 ms te-0-7-0-1-sur04.elmhurst.il.chicago.comcast.net [68.86.117.213]
4 16 ms 17 ms 20 ms be-124-ar01.area4.il.chicago.comcast.net [162.151.45.109]
5 16 ms 17 ms 18 ms be-33491-cr02.350ecermak.il.ibone.comcast.net [68.86.91.165]
6 15 ms 15 ms 27 ms be-10577-pe03.350ecermak.il.ibone.comcast.net [68.86.86.2]
7 36 ms 16 ms 19 ms 96-87-9-190-static.hfc.comcastbusiness.net [96.87.9.190]
8 * * * Request timed out.
9 35 ms 16 ms 18 ms dns.google [8.8.8.8]

[i3ullseye]

Worth noting... I grabbed a new VPN..... not sure if this is forbidden or not, but PrivateVPN is the one I grabbed. Everything work fine through that. Definitely something on Xfinity within their gateway/router was changed. But PrivateVPN seems to avoid all of it. Not sure if I can host with it running yet, but that's another fight for a later day I think at this point. At least I got it installed and updated.

[Zacchaeus]

If you can post a solution to this issue that would be good. I get quite a few people on Discord with X-finity routers with a similar problem.

[Trenloe]

Sure. Not ,much info however.

29322
That actually helps a lot.

10.0.0.1 will be your router/modem, which you’re reaching fine, then everything beyond that is timing out. So, it’s more than likely that something in your router/modem is stopping the communication to FG-web.fantasygrounds.com

Login to your router/modem at 10.0.0.1 - what make/model and version is it?

[Trenloe]

I'm getting the same issue as well--Xfinity did something stupid on their end and now they've broken FG's ability to check for updates.

The good news is, we're getting high speed fiber in our neighborhood extremely shortly so I can kick these idiots to the curb...but in the interim... any ideas?



1 8 ms 4 ms 5 ms 10.0.0.1
2 13 ms 11 ms 11 ms 96.120.25.37
3 13 ms 14 ms 13 ms te-0-7-0-1-sur04.elmhurst.il.chicago.comcast.net [68.86.117.213]
4 16 ms 17 ms 20 ms be-124-ar01.area4.il.chicago.comcast.net [162.151.45.109]
5 16 ms 17 ms 18 ms be-33491-cr02.350ecermak.il.ibone.comcast.net [68.86.91.165]
6 15 ms 15 ms 27 ms be-10577-pe03.350ecermak.il.ibone.comcast.net [68.86.86.2]
7 36 ms 16 ms 19 ms 96-87-9-190-static.hfc.comcastbusiness.net [96.87.9.190]
8 * * * Request timed out.
9 35 ms 16 ms 18 ms dns.google [8.8.8.8]

Please to a tracert to the same address used by i3ulleye - fg-web.fantasygrounds.com and post the result.

[Nylanfs]

We had some comcast outages and work done in our area in the last couple of days, I'd better check when I get home.

I wonder if they are pushing out IPv6 to more customers? https://test-ipv6.comcast.net/

[i3ullseye]

Ok. Great news... this is what will work for me.

Now again, I cannot endorse any specific software here or use their referrals links or anything. But PrivateVPN works very well. It is fast, and it supports port forwarding. However, it doesn't look like you can specify which port(s) get forwarded, and each server varies.

Which that being said.... their Toronto servers forward EVERY port. Just fired it up and FG runs like a champ. Connection test works, external IP returns just fine, everything updates.

Is there a speed impact?

With the VPN enabled I get a Speedtest result of 160 Mbps down and 20 Mbps up.

Without the VPN I get about 360 Mbps down and still 20 Mbps up.

That doesn't necessarily mean the VPN cuts my speed in half, I could be hitting the cap on that server at the moment. Still, MORE than enough to reliably game and host.

Figuring out what in the gateway is blocking traffic/ports would be great. But for as inexpensive as this particular VPN is, I think I am not going to stress too much about it hehe.

Still hoping that FGU gets rid of all this mess.

[Trenloe]

Ok. Great news... this is what will work for me.
Glad you got it working.

So we can help others who may have a similar issue, without your VPN running and FG not able to update, would you mind using the link Nylanfs posted above and post the results please?

[i3ullseye]

Yup. IPv6 fully enabled. No way that I can find to truly turn it off within the gateway/router, not for WiFi at least. It seems to bridge the v4 and v6 addressing somehow. The new gateway doesn't seem to save my setting when I try to force a static IP either.

The result was a 10/10 readiness score.

[Trenloe]

Yup. IPv6 fully enabled. No way that I can find to truly turn it off within the gateway/router, not for WiFi at least. It seems to bridge the v4 and v6 addressing somehow. The new gateway doesn't seem to save my setting when I try to force a static IP either.

The result was a 10/10 readiness score.
Thanks for checking.

I'm on Comcast and I get a 0/10 readiness score - and FG works great! Don't touch my connection Comcast!!! :o

[JShadow007]

Getting identical results for that trace route—all requests timing out. Also getting 10/10 on the ipv6 test.

[JShadow007]

Just a brief update: Not sure what Comcast did (or if something got fixed on FG's end), but when i tried tonight, it worked!

[i3ullseye]

Just tried it. Still fails for me. Maybe some complaints in each area are getting some changes made?

[SublimeBW]

Comcast/Xfinity customer too - Still fails for me which is a bummer as I was hoping to check out some FGU.

[i3ullseye]

I don't think I am saying too much here. But the FGU updater does not give me this problem. :o

[Gillersan]

I am having the same problem. I didnt change any network settings or security configs. Just randomly FG decided it doesnt want to update anymore, giving me the "ERROR: Get PackageFiles: Network: time out " when updating the PFRPG2.pak.
I ran a tracert to the posted domain and got a good result, which was interesting.
Redacted the first 2 hops but

3 3 ms 14 ms 6 ms 75-16-192-1.lightspeed.edmdok.sbcglobal.net [75.16.192.1]
4 2 ms 2 ms 2 ms 71.147.88.145
5 13 ms 14 ms 14 ms 12.123.240.18
6 9 ms 11 ms 10 ms gar25.dlstx.ip.att.net [12.122.85.233]
7 10 ms 10 ms 8 ms 192.205.37.50
8 9 ms 9 ms 8 ms dls-b23-link.telia.net [62.115.113.84]
9 19 ms 19 ms 19 ms kanc-b1-link.telia.net [213.155.130.179]
10 20 ms 32 ms 20 ms 1o1internet-ic-323279-kanc-b1.c.telia.net [80.239.196.110]
11 20 ms 19 ms 20 ms ae-10.gw-distp-a.slr.lxa.us.oneandone.net [74.208.1.101]
12 20 ms 19 ms 19 ms 74.208.141.19
13 20 ms 19 ms 19 ms 74.208.138.71
14 20 ms 20 ms 20 ms fg-web.fantasygrounds.com [70.35.199.236]

[notrealdan]

I am having the same problem. I didnt change any network settings or security configs. Just randomly FG decided it doesnt want to update anymore, giving me the "ERROR: Get PackageFiles: Network: time out " when updating the PFRPG2.pak.
I ran a tracert to the posted domain and got a good result, which was interesting.
Redacted the first 2 hops but

3 3 ms 14 ms 6 ms 75-16-192-1.lightspeed.edmdok.sbcglobal.net [75.16.192.1]
4 2 ms 2 ms 2 ms 71.147.88.145
5 13 ms 14 ms 14 ms 12.123.240.18
6 9 ms 11 ms 10 ms gar25.dlstx.ip.att.net [12.122.85.233]
7 10 ms 10 ms 8 ms 192.205.37.50
8 9 ms 9 ms 8 ms dls-b23-link.telia.net [62.115.113.84]
9 19 ms 19 ms 19 ms kanc-b1-link.telia.net [213.155.130.179]
10 20 ms 32 ms 20 ms 1o1internet-ic-323279-kanc-b1.c.telia.net [80.239.196.110]
11 20 ms 19 ms 20 ms ae-10.gw-distp-a.slr.lxa.us.oneandone.net [74.208.1.101]
12 20 ms 19 ms 19 ms 74.208.141.19
13 20 ms 19 ms 19 ms 74.208.138.71
14 20 ms 20 ms 20 ms fg-web.fantasygrounds.com [70.35.199.236]

With the release of the FGU beta yesterday, the update servers were hit quite hard and were not working for a lot of people. Are you still unable to update today?

[i3ullseye]

Servers have been up and down... Xfinity has been up and down... hard reset on gateway..... now everything works. I have no idea what may have changed, so this isn't much help I know, but I wanted to update. Maybe port forwarding settings don't take on the Xfinity gateways and require a hard reset with a very long down time delay?

[Gillersan]

With the release of the FGU beta yesterday, the update servers were hit quite hard and were not working for a lot of people. Are you still unable to update today?

Yes that must have been it, in my case. I was able to update tonight. Thanks for looking into it for me!