Forum Settings
       
Reply To Thread

Connection Issue from South KoreaFollow

#102 Sep 04 2008 at 3:28 PM Rating: Default
Yeah, so many people are going to change over from KT + LG ISPs and use inferior ones just so they can connect to generic MMO #665039. KT is the best ISP that is available in Korea, and one foreigner used a download/upload test to tell the difference between KT and LG (#2). The difference is huge, but then again, I'm not in a hurry to connect to FFXI. I mean, connecting would be nice, but I'm not going through the hassle of getting a new ISP and stuff.

While I do agree that this is a shady deal, Americans also have their shady dealings as well. Look at the Texas City Disaster that killed 581 people. Hundreds of people filed suits that held the US responsible for "a litany of negligent acts of omission and commission by 168 named agencies and their representatives in the manufacture, packaging, and labeling of ammonium nitrate, further compounded by errors in transport, storage, loading, fire prevention, and fire suppression, all of which resulted in the explosions and the subsequent carnage." The Daegu Subway incident killed only 103 people compared to the Texas Disaster. How about those Phillips Diasters in Texas, they didn't even have a gas/fire alarm. Crandall Canyon Mine incident ring a bell? No escape routes there.

Point is, there will always be shady business deals in every country. No need to be like SHADY KOREAN BUSINESS, but rather, shady business deals, I thought we've grown past the whole deal of, "SHADY KOREAN/CHINESE/JAPANESE BUSINESSES ARGH" but I guess we haven't. Maybe America just isn't ready for a non-white man to take up presidency--America will never be a melting pot of cultures, there will always be someone shouting racial slurs and curses and abusing racially-mixed children.

Maybe because of my contacts to the business and military worlds, I've been treated like a king, but I've always saw the brighter side of Korea in my 20 years here.

Edited, Sep 4th 2008 11:28pm by Demera
#103 Sep 04 2008 at 4:58 PM Rating: Decent
The All Knowing
Avatar
*****
10,265 posts
Quote:
Thats up north in 2ID territory (Camp Red Cloud). Haha big area filled with Philipina juicy girl bars amongst other cheap thrills ... not to mention the base being filled with Philipina wives pushing baby carriages.


LOL.. I literally laughed out loud on that one.. I live out in Osan ( I'm not Air Force, but GO AIR FORCE women!) and I visited up north once for a meeting and I noticed that so quickly. I said to myself "I've never seen so many Filipina women on post before" and they all did have baby carriages. I heard the juicy drinks are like $20 though, it doesn't make sense to me..
#104 Sep 04 2008 at 6:54 PM Rating: Decent
Thief's Knife
*****
15,054 posts
Demera wrote:
Yeah, so many people are going to change over from KT + LG ISPs and use inferior ones just so they can connect to generic MMO #665039. KT is the best ISP that is available in Korea, and one foreigner used a download/upload test to tell the difference between KT and LG (#2). The difference is huge, but then again, I'm not in a hurry to connect to FFXI. I mean, connecting would be nice, but I'm not going through the hassle of getting a new ISP and stuff.

While I do agree that this is a shady deal, Americans also have their shady dealings as well. Look at the Texas City Disaster that killed 581 people. Hundreds of people filed suits that held the US responsible for "a litany of negligent acts of omission and commission by 168 named agencies and their representatives in the manufacture, packaging, and labeling of ammonium nitrate, further compounded by errors in transport, storage, loading, fire prevention, and fire suppression, all of which resulted in the explosions and the subsequent carnage." The Daegu Subway incident killed only 103 people compared to the Texas Disaster. How about those Phillips Diasters in Texas, they didn't even have a gas/fire alarm. Crandall Canyon Mine incident ring a bell? No escape routes there.

Point is, there will always be shady business deals in every country. No need to be like SHADY KOREAN BUSINESS, but rather, shady business deals, I thought we've grown past the whole deal of, "SHADY KOREAN/CHINESE/JAPANESE BUSINESSES ARGH" but I guess we haven't. Maybe America just isn't ready for a non-white man to take up presidency--America will never be a melting pot of cultures, there will always be someone shouting racial slurs and curses and abusing racially-mixed children.

Maybe because of my contacts to the business and military worlds, I've been treated like a king, but I've always saw the brighter side of Korea in my 20 years here.

Edited, Sep 4th 2008 11:28pm by Demera


Union Carbide killed an entire town, then got bought by Dow Chemical and never had to pay for it.

http://en.wikipedia.org/wiki/Bhopal_disaster

____________________________
Final Fantasy XI 12-14-11 Update wrote:
Adjust the resolution of menus.
The main screen resolution for "FINAL FANTASY XI" is dependent on the "Overlay Graphics Resolution" setting.
If the Overlay Graphics Resolution is set higher than the Menu Resolution, menus will be automatically resized.


I thought of it first:

http://ffxi.allakhazam.com/forum.html?forum=10&mid=130073657654872218#20
#105 Sep 04 2008 at 7:10 PM Rating: Good

Quote:
Point is, there will always be shady business deals in every country. No need to be like SHADY KOREAN BUSINESS, but rather, shady business deals, I thought we've grown past the whole deal of, "SHADY KOREAN/CHINESE/JAPANESE BUSINESSES ARGH" but I guess we haven't.


Every single foreign teacher I have met in Korea deals with schools that won't honour their contracts. My own school refuses to honour my contract and I've spent the last four months fighting for basic health insurance. Despite what it may look like, that I'm being racist and misunderstanding Korean culture, I have to deal with shady Korean business every single day. I never had any problems with job contracts in Canada - everything was handled professionally. So please don't judge until you walk a mile in my shoes.

Also, you're forgetting that the president of Korea recently pardoned nearly three million criminals, including corrupt businessmen and politicians who rigged elections. His reason was that the corrupt businessmen should be free to do business again to boost the faltering Korean economy.



As for FFXI, I'm trying to get onto a new ISP because I doubt that KT will ever fix this problem. Unfortunately, my school is now claiming it will cost a couple hundred dollars to cancel my KT account, as well as several hundred more to install the new ISP. So I have to spend the next couple of weeks trying to figure out if they're telling the truth or not.

#106 Sep 04 2008 at 7:58 PM Rating: Good
**
435 posts
For those of you who were looking for an alternate DNS server, I have heard that OpenDNS is a reliable service.

Nonetheless, as one poster mentioned before in this thread, the tech guy tol him/her that they wouldn't "unblock" the port 443, which SE/FFXI requires, because "many viruses and hacks used it". If they have, in fact, blocked it, then you have found the reason you can't log in to FFXI.

Each application that requires a connection must have all the ports open at all times in order to work properly.

443 is within the bounds of the well known ports. Allow me to elaborate:

Port 80 is used to manage the HTTP (It's the protocol your browsers uses to recieve the hmtl code in order to view web pages).

If you look at that table, you will notice that port # 443 is the port that uses HTTPS, a port which manages the HTTP Secure protocol (used to provide secure comunications over the internet, such as the log in process...).

So, if this port is, in fact, blocked, I am sure that's the reason you aren't able to log in.

Of course, this is just speculation. If what the support guy said about the port being blocked isn't true, then this last post is useless.
#107 Sep 05 2008 at 12:31 AM Rating: Good
***
2,890 posts
Port 443 is not blocked, at least not across the general backbone. If it was blocked then you could never access any https websites. Most likely lost in translation, but he was probably referring to the routers blocking port 443 to THEMSELVES (as in connections TO the servers and network devices, not connections that are redirects, forwards or packets just transitioning through). South Korea has one of the most open networks in the entire world, hence its the target of the majority of the worlds hacker / bot attacks. A hacker would easily take control of 10,000 - 20,000 computers on the Korean network and use them to launch DDoS attacks to any other target they wanted, there's more then enough bandwidth available to bog down any website / server system.

As a response to butt hurt Demera
I'm not being racist or knocking Korean culture at all. Why the hell would of I stayed here 5+ years if I didn't enjoy it. But Korean businessmen are EXTREMELY shady in their dealings. Especially when it comes to honoring contractual agreements. Its a well known fact that the Good Ole Boy system is in full swing out here. This is why University is so important to Korean men, it allows them to forge the bonds and friendships that will later become center place on their business life. We in America practice this to an extent, but not nearly to the length the Koreans do.

The Hagwans are probably the easiest way to see this in effect. The owners / directors are always trying to jip the teachers out of money. I dated a Korean English teacher for 3.5 years, trust me their (the private English academies) are all the same because its hard for an owner to make money on them.

Now on the cultural level, this is an AWESOME place, and I'm always recommending others to come out. And while most people prefer Seoul, 20+ million people in one place just doesn't sit well with me. I like to stay down in the Daegu / Busan area.
#108 Sep 05 2008 at 1:07 AM Rating: Default
The All Knowing
Avatar
*****
10,265 posts
I'm planning a trip to Busan.. I just don't know when I'll go. I hear its expensive out there
#109 Sep 05 2008 at 2:01 AM Rating: Default
Quote:
english teachers, shady business deals in general, etc.


feels good man

---

Anyways, DNS isn't the problem as I confirmed it several times by changing my DNS. Could be firewall, its not a port problem because all my ports are open. I ran a trace test which confirms that its not a backbone server issue or port issue but rather the IP - server connection just isn't accepting. Could be because the KT/LG scandal, I really don't know. Also, if your officetel/apartment is wired with KT/LG and you want to switch, expect to pay money because it's not wired for a different ISP. Either way its a pain, so expect some headaches.
#110 Sep 05 2008 at 2:55 PM Rating: Default
Just ran another trace test using cmd.exe's tracert with the POL server IP that KT gave me. It turns out one of SE's servers isn't accepting the IP - server connection and that the firewall is causing this. If you want the server IP addresses, PM me.
#111 Sep 05 2008 at 3:10 PM Rating: Decent
***
2,890 posts
Almalieque wrote:
I'm planning a trip to Busan.. I just don't know when I'll go. I hear its expensive out there


Well Busan is a city, so yeah its kinda expensive. But its no where as expensive as Seoul is. I often make trips down there and it seems to be about the same prices as Daegu. Of course anything western will be expensive out the ying/yang.
#112 Sep 05 2008 at 3:12 PM Rating: Decent
***
2,890 posts
Demera wrote:
Just ran another trace test using cmd.exe's tracert with the POL server IP that KT gave me. It turns out one of SE's servers isn't accepting the IP - server connection and that the firewall is causing this. If you want the server IP addresses, PM me.


I came up with the exact same conclusions last weekend. Just KT's shutting being forces to shutdown happened at the EXACT same time as we lost FFXI. And its BOTH KT and LG that this happened on, the two companies that both got shutdown 6pm 28 Aug 2008. So it might be a coincidence, but that would be a HUGE coincidence...
#113 Sep 05 2008 at 3:43 PM Rating: Decent
saevellakshmi wrote:
I came up with the exact same conclusions last weekend. Just KT's shutting being forces to shutdown happened at the EXACT same time as we lost FFXI. And its BOTH KT and LG that this happened on, the two companies that both got shutdown 6pm 28 Aug 2008. So it might be a coincidence, but that would be a HUGE coincidence...


Well, I ran another trace test using a state-side (VA) server's IP -> SE server IP. While they have a difficult time as well, it allows the connection to go through, but there is some packet loss that I would attribute to the distance required to connect directly to the POL server. SYN_SENT to port 54000 used by POL server shows an incomplete connection to the server indicating a possible firewall blocking the pings sent by the IP. There was an IP that showed where the connection stopped and I checked who owned the server and it was indeed SE.

I'm not sure that contacting web support would produce immediate results, but bringing this connection problem to SE would increase the chances of them fixing the server. I guess I'll contact the web support when it opens up and tell them which server is acting up. I'm not a computer person so its difficult getting this information, but perhaps if I mention the server causing it, they can look into it. And as you said, it might be a coincidence and could possibly effect the connections, but again I am not sure.

Edited, Sep 5th 2008 11:40pm by Demera
#114 Sep 05 2008 at 4:29 PM Rating: Default
Okay, somehow I just got connected. I don't even know what happened.

Hope you guys get connected as well!
#115 Sep 05 2008 at 4:50 PM Rating: Default
The All Knowing
Avatar
*****
10,265 posts
Quote:
Okay, somehow I just got connected. I don't even know what happened.

Hope you guys get connected as well!


>< you got me excited, I'm still getting POL error.. hmmm I might just have to go AWOL to where you leave till this gets fixed..

I want to somehow help, but I have really no idea whats going on. All you people's jargon is just confusing me :(

Quote:
Well Busan is a city, so yeah its kinda expensive. But its no where as expensive as Seoul is. I often make trips down there and it seems to be about the same prices as Daegu. Of course anything western will be expensive out the ying/yang.


Yea I like Daegu. They seem so much nicer down there than up North.
#116 Sep 05 2008 at 4:56 PM Rating: Decent

I still can't get connected on my KT connection either.


#117 Sep 05 2008 at 9:01 PM Rating: Decent
***
2,890 posts
No connection from KT over here either. Hanaro is looking better and better by the moment, especially if this is some weird KT -> SE miscommunication. Could take the better part of a year for them to hash it out, then another 6+ months to agree on a fix.

Japanese company that is known of not admitting when their wrong vs South Korean ISP who is known to not admit when they have problems .... hmm....
#118 Sep 05 2008 at 11:14 PM Rating: Decent
N Connection here also and I use LG. Hopefully we all can get connected again here soon but to be honest, its nice to be FFXI free for a little while.
#119 Sep 06 2008 at 8:22 PM Rating: Good
***
2,890 posts
Ok a bit more information. Turned on individual logging of all packets on my FW and got the actual server FFXI is trying to connect to when it first starts up.

61.195.59.38 Protocol: TCP Source Port 1231 Destination Port 54000

Doing a traceroute / ping check

Microsoft Windows [Version 5.2.3790]
(C) Copyright 1985-2003 Microsoft Corp.

ping 61.195.59.38

Pinging 61.195.59.38 with 32 bytes of data:

Reply from 61.195.56.218: Destination net unreachable.
Request timed out.
Reply from 61.195.56.218: Destination net unreachable.
Reply from 61.195.56.218: Destination net unreachable.

Ping statistics for 61.195.59.38:
Packets: Sent = 4, Received = 3, Lost = 1 (25% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

tracert 61.195.59.38

Tracing route to 61.195.59.38 over a maximum of 30 hops

1 Intentionally left out
2 <1 ms <1 ms <1 ms 118.41.173.62
3 <1 ms <1 ms <1 ms 121.182.154.197
4 1 ms 1 ms 1 ms 61.78.48.122
5 <1 ms <1 ms <1 ms 121.182.213.249
6 2 ms 1 ms 1 ms 218.145.33.246
7 6 ms 6 ms 6 ms 59.18.52.61
8 5 ms 5 ms 5 ms 59.18.52.62
9 5 ms 5 ms 5 ms 59.18.63.74
10 133 ms 132 ms 127 ms 203.234.255.118
11 136 ms 139 ms 135 ms xe-0-0-0.a20.tokyjp01.jp.ra.gin.ntt.net [61.213.162.238]
12 140 ms 140 ms 137 ms ge-2-2-5.a20.tokyjp01.jp.ra.gin.ntt.net [61.120.145.110]
13 223 ms 221 ms 223 ms 61.195.56.218
14 61.195.56.218 reports: Destination net unreachable.

Trace complete.

Seems that the last hop of 61.195.56.218 is where our connections going south at. Seems some Firewall / router within SE is whats dropping packets. The injunction with KT/LG seems to just be a coincidence. Without having indepth knowledge of how SE's network is built I can't really troubleshoot from here anymore. Tomorrow going to try to contact the SE customer support and hope I can get my message through, at least as a note to the network admins.
#120 Sep 06 2008 at 9:19 PM Rating: Default
The All Knowing
Avatar
*****
10,265 posts
Well please continue to post all information. I'm so confused right now on the subject it isn't even funny. Well, actually a little, but you know what I mean ><
#121 Sep 06 2008 at 10:11 PM Rating: Decent
Yes, I found that a couple days ago. SE still denies proof even when I talked to them on Thursday (had the server IPs for four? five days now). The SE rep told me that SE probably blocked certain regional access and if thats the case, they'd rather you cancel the account than try to bug them about it.
#122 Sep 07 2008 at 10:38 PM Rating: Decent
***
2,890 posts
Ok found a solution (sort of). I used Freecap to force all of FFXI's network traffic through a proxy. The proxy system I used was called Tor, its anonymous routing. Now the bad part is that Tor is constantly building / destroying tunnels between end points, so its completely anonymous, but also very slow. Your packets tend to go halfway around the world and back again. Might be an option for people who need into FFXI ASAP. Hopefully we can pester SE into unblocking the KT/LG networks.
#123 Sep 08 2008 at 1:38 AM Rating: Default
The All Knowing
Avatar
*****
10,265 posts
Can you dumb that down to the fullest if you already haven't? I don't need it right away, but I don't for see this being solved anytime soon and I would rather have it done now while it is still fresh on everyone's minds.
#124 Sep 08 2008 at 3:16 AM Rating: Decent
***
2,890 posts
Ok more information regarding my attempts to get past SE's stupid block. Lots of information from digging through firewall logs.

It seems SE has three different IP networks that FFXI deals with.

61.195.59.0/24 (this is used for registration / POL login) this is the one thats blocked, specifically the main registration server 61.195.59.6. Need to use Freecap + Tor to proxy around it.

202.67.59.0/24 Lots and lots of servers in here, like everything else besides login / updates. This range is UNBLOCKED, so you can set these for direct connect without a worry.

219.117.156.21 This IP kept showing up and weird points, but its NOT BLOCKED either, so again you can set it as direct connection.

From what I can tell, the only thing you need to proxy arround is the 61.195.59.6 address, get past that and you should be able to login. Now actually playing FFXI is an issue for me, seems my computer doesn't like freecap / widecap too much and won't let UDP connections happen. (FFXI makes UDP connections to the actual world servers, which from what I remember are in the 202 / 219 / 220 range).

*Note for the technically impaired,
Listen, this is really complicated stuff as I'm basically reverse engineering SE's network from the outside through traffic analysis. SE put this block in place to keep the "bad guys" from attacking their registration / password server (that 61.195.59.6 machine). Somehow we got lumped into the same crowd as the "bad guys" so now we gotta find a way to circumvent SE's own security measures. The only way I can see is to proxy connections for that one machine through Tor. On a client system you do that by running a network packet capture program thats designed to reroute packets to a proxy. This is what freecap / widecap / sockscap does. You have to get a working Vidalia Tor setup first, then install one of those cap programs and point it to the Tor proxy (will be your local computer). Those programs have readme's and documentation to assist in setting them up, but there is NO easy quick fix (other then SE unblocking KT/LG). The best I can do is point you in the right direction and how all goes well.
#125 Sep 08 2008 at 3:22 AM Rating: Default
The All Knowing
Avatar
*****
10,265 posts
Thanks, its about time for me to start using proxy anyway..>.>
#126 Sep 08 2008 at 3:44 AM Rating: Good
***
2,890 posts
Ok finially got a nice cool picture of me looking at my Moogle. This means I got it working...
Now heres how I did it, try to keep up as its kinda complicated.

First, download Tor
http://www.torproject.org/download.html.en
Install Tor, its pretty easy to setup if you read the help / readme file.

Second, download freecap
http://www.freecap.ru/eng/?p=download
Again install it, this is a bit more complicated to configure though. I'll try to walk through the basic areas (mind you I SUCK at writing how-to's).
In Freecap click "File" -> "Settings"
Under proxy settings put "127.0.0.1" as your proxy server, and port 9050 (Tor runs locally as 127.0.0.1 port 9050, so your basically pointing Freecap to Tor).
Next check the Socks v5 Box, you should not need any authentication.
On the top tap, click to "Direct Connections". Now add the following

Direct Address's
0.0.0.0
220.0.0.0/8
219.0.0.0/8
217.0.0.0/8
202.0.0.0/8

Direct Ports
54090

Yes SE has crap scattered over that many networks, so I just lumped them all into single /8 subnets.

Now click on the "Program" tab. Have only the following checked (meaning uncheck everything else)
[X]Show warnings in dialog boxes
[X]Use some tricks to traverse UDP through NAT
[X]Hide FreeCap by Alt+F4 instead of closing
DNS Name resolving
[X]Local

Now click on the "Log settings" tab and setup the log (this is so you can later look for IP address and fix errors).
[X]Enable Log
Log File: somewhere on your PC
Event Categories
[X]Connection status
[X]SOCKS
[X]Warning messages
[X]Programs should send logs to FreeCap's window

Click on Apply, then OK. Freecap is now setup for redirection, but we need to add the FFXI apps to it. Click "File" -> "New Application"
Profile Name: FFXI Whatever
Program Path: click Browse, find your polboot.exe file in the FFXI directory
Working Path: should default to the Program Path
Program Paramaters: empty, also don't check the Run with startup box.

Repeat this for the launcher.exe if you use windower.

Ok all this -SHOULD- get you to access FFXI, if not then PM me and we'll discuss over cell phone (if need be). I'll try to find a condensed version of this how-to, but honestly with as jerry-rigged as this is, I don't expect it to get much easier.

*EDIT*
Ok found a major glitch in freecap that caused packets to be sent to the wrong port. This only cropped up when I tried to download the update (apparently something weird with the packets for the update server). I installed sockscap (another free program) and it was able to update fine.

http://beaglesoft.com/clwaproxysockscap.htm





Edited, Sep 9th 2008 6:52am by saevellakshmi
Reply To Thread

Colors Smileys Quote OriginalQuote Checked Help

 

Recent Visitors: 712 All times are in CST
Anonymous Guests (712)