Blocking Internet Gaming

James james at
Mon Jan 7 02:54:13 UTC 2002

It would make me nervous too.  Plus, I hate when things stop working
because then people call me and I have to talk to them :)

But if a brand new packet is outbound to 29760, you know it is probably
going to a Half Life server (I think that's the port).  So wouldn't it
be wise to deny that?  Specifically it would be UDP 29760, not TCP.
Doesn't FTP use TCP when negotiating a connection?

- James

-----Original Message-----
From: owner-nanog at [mailto:owner-nanog at] On Behalf Of
Scott Gifford
Sent: Sunday, January 06, 2002 9:45 PM
To: James
Cc: nanog at
Subject: Re: Blocking Internet Gaming

"James" <james at> writes:

> What kind of games specifically?
> Like online Java games (Bejeweled)?  Or games like Quake, Unreal,
> etc?
> The latter is much easier, just block all traffic to/from the default
> ports which use them.  A quick google would yield what they use.  I'll
> give you a quick hint and say Quake3 is 29760-5 or so and Tribes1/2 is
> 28000-28005 or so.

Doesn't that cause trouble with occasionally blocking ephemeral ports?
If you're not allowing incoming connections of any kind (including
non-PASV FTP) it shouldn't matter, but blocking ports above 1024
always makes me nervous...


More information about the NANOG mailing list