The auto-updater is the first part of the game to access the net. If the primary connection is chosen, it will try to
connect via TCP to 220.127.116.11:6214. If this connection fails it will automatically revert to the backup connection.
The backup connection will try to reach the update server via TCP at 18.104.22.168:6214. Older clients (which haven't been
updated for a long time) will use 22.214.171.124:6214 if backup is chosen.
The next network access is done by the actual game client. If the primary connection is chosen, it will try to connect via TCP
to one of the hosts in the subnet 126.96.36.199/28 (ie. 188.8.131.52 to 184.108.40.206) to one of the ports in the
range 5556 to 5570.
The backup connection will try the subnet 220.127.116.11/29 (ie. 18.104.22.168 to 22.214.171.124) instead.
The website is at 126.96.36.199 and at 188.8.131.52 (port 80 for http and port 443 for https). The name server entries of
www.astonia.com and www.intent-software.com will point to the one deemed more stable.
A recommended firewall configuration would consist of:
allow outgoing tcp to 184.108.40.206/28 to ports 5556 to 5570 and port 6214
allow outgoing tcp to 220.127.116.11/29 to ports 5556 to 5570 and port 6214
allow outgoing tcp to 18.104.22.168/32 to ports 5556 to 5570 and port 6214
This configuration assumes that return packets and web access are already allowed (which is almost always the case).