change the thompson router, they usually make such problems
not much help in that got a thompson router but cant change it as its supplied by the ISP and they have a own firmware in use to even get a connection

IMHO Crytek has to fix/modify the Networking code of the game... popping up this message each time one starts the game is very bad UI design.

Either add a "don't show again" option or show this information somewhere else....

Do you have a thomson router?
sorry, but i have no idea what is this

In my latest match in Crysis 2, I had 500+ ping. I've noticed that in all of my matches, the killcam is terribly lagging. My killer will often shoot around me and get the kill, and move on before I actually die. I've portforwarded the demo ports, the ports from Crysis 1, and I've let Crysis 2 through my firewall. Why is my NAT still strict, why do I still get the message that a firewall is blocking Crysis 2 everytime I go into multiplayer, and why do I lag so badly?

Thanks in advance

Just a FYI, having a "strict" and "moderate" NAT does not mean "awful latency". It just means you can only join servers (or players) that have the same NAT as you, so if you were to have an "open" NAT you'll probably find more and maybe better servers.

Just a FYI, having a "strict" and "moderate" NAT does not mean "awful latency". It just means you can only join servers (or players) that have the same NAT as you, so if you were to have an "open" NAT you'll probably find more and maybe better servers.

yeah, i have a strict NAT and my ping is like 80-150.
Just wish i could figure out how to open it.
And i think a Strict NAT can only connect to an open NAT, a moderate NAT can connect to a moderate or open NAT, and an open NAT can connect to all three.

I have strict NAT.. was just playing on a US server with 20-40 ping.

No problems with any US servers for me. highest ping was 120. basic cox cable internet.

Just a FYI, having a "strict" and "moderate" NAT does not mean "awful latency". It just means you can only join servers (or players) that have the same NAT as you, so if you were to have an "open" NAT you'll probably find more and maybe better servers.

yeah, i have a strict NAT and my ping is like 80-150.
Just wish i could figure out how to open it.
And i think a Strict NAT can only connect to an open NAT, a moderate NAT can connect to a moderate or open NAT, and an open NAT can connect to all three.

In case if you do figure out how to open it:

Game Port Usage

For all traffic between server and client 'game' port is used
(default 64100 - net_lobby_gamespy_online_port).

Ports
SDK Service Hostname Type Local Remote

Available hbmaster3 crysis2.available.gamespy.com UDP Any 27900
NN natserver1 natneg1.gamespy.com UDP game 27901
NN natserver2 natneg2.gamespy.com UDP game 27901
NN nat neg Game client UDP game game*(other game)
QR2 hbmaster3 crysis2.master.gamespy.com UDP game 27900
QR2 Incoming queries Game client UDP game Any
CDKey keymaster key.gamespy.com UDP game 29910
SAKE Profile settings/stats crysis2.sake.gamespy.com TCP Any Any (def:80)
Chat Any IRC server peerchat.gamespy.com TCP Any 6667
GP gpmanager gpcm.gamespy.com TCP Any 29900
GP searchmanager gpsp.gamespy.com TCP Any 29901
SB gmaster3 crysis2.ms5.gamespy.com TCP Any 28910
SB Server queries game servers UDP Any game*(target server)
RSS RSS Feed lb.crysis2.ea.com TCP 80 80

Default value for 'game' is 64100 (can be adjusted).
For incoming UDP traffic, only port "game" ( default 64100)
is required to be opened.

from the game's ReadMe manual

Just a FYI, having a "strict" and "moderate" NAT does not mean "awful latency". It just means you can only join servers (or players) that have the same NAT as you, so if you were to have an "open" NAT you'll probably find more and maybe better servers.

yeah, i have a strict NAT and my ping is like 80-150.
Just wish i could figure out how to open it.
And i think a Strict NAT can only connect to an open NAT, a moderate NAT can connect to a moderate or open NAT, and an open NAT can connect to all three.

In case if you do figure out how to open it:

Game Port Usage

For all traffic between server and client 'game' port is used
(default 64100 - net_lobby_gamespy_online_port).

Ports
SDK Service Hostname Type Local Remote

Available hbmaster3 crysis2.available.gamespy.com UDP Any 27900
NN natserver1 natneg1.gamespy.com UDP game 27901
NN natserver2 natneg2.gamespy.com UDP game 27901
NN nat neg Game client UDP game game*(other game)
QR2 hbmaster3 crysis2.master.gamespy.com UDP game 27900
QR2 Incoming queries Game client UDP game Any
CDKey keymaster key.gamespy.com UDP game 29910
SAKE Profile settings/stats crysis2.sake.gamespy.com TCP Any Any (def:80)
Chat Any IRC server peerchat.gamespy.com TCP Any 6667
GP gpmanager gpcm.gamespy.com TCP Any 29900
GP searchmanager gpsp.gamespy.com TCP Any 29901
SB gmaster3 crysis2.ms5.gamespy.com TCP Any 28910
SB Server queries game servers UDP Any game*(target server)
RSS RSS Feed lb.crysis2.ea.com TCP 80 80

Default value for 'game' is 64100 (can be adjusted).
For incoming UDP traffic, only port "game" ( default 64100)
is required to be opened.

from the game's ReadMe manual

WTF is that mean!?? I also read the readme file but Im not geek I just want to **** play without the strict BS!!! how do I open it??

I posted this, because I can't join ANY game session in Crysis 2 due to my NAT type being strict. My router is ZyXEL's P-660HW-D1 and I have wired connection. Because I'm complete amateur in port forwarding, and if you say I should forward TDP this and UPD that, I wouldn't understand, so I would like step-by-step instructions what ports I should port forward and how. I have tried to do everything hat has been said in portforward.com, but it doesn't seem to work. I hope someone experienced would be able to help me who knows how to use ZyXEL router.

when i login multiplayer it's show me a text "my compurter's behind restrict firewall" or something like this then when i join server some server i can join but some i can't which server i can't it's showme a text "connect host fail" i don't know how to fix this because my friend can join every server i'm pc player i buy limited edition and i'm live in thaiand my friend live in thai too but only me have this problem

i'm not good at speak english this's the best i can do

my nat type is strict because of that someserver i can't join what and how i need to do to fix this or change my nat type

Okay, so I've tried setting up the proper ports in my router - nothing
Setting my system to DMZ - nothing
Toggling UPNP - nothing

Still stays as "strict".

Even though it was strict in the demo for me, at least it would connect to servers; Now I have difficulty doing even that.

Is there anything else I can try? Have not been able to connect to a server for several days now
Even if I could get it to work again under "strict", I hear having it limits who you can connect to.

What Ports have you open/forward?

Crysis 2 uses
Tcp ports: 80, 443, 64100, 667, 29900, 2990, 2891
UDP ports: 27900, 27901, 64100

Setup a static IP Address (google that if you don't know how, but it's easy).

Forward the port numbers (google port forwarding)

But my question is, ARE YOU USING A WIRELESS CONNECTION? And that's a big question hence the capitals. as wireless almost guarantees you'll have MP problems. Been there myself.

What does the NAT type even mean?

What does the NAT type even mean?

Actually - ability for your computer to open port to server.

Usual reason - antiviruses, routers and fairwalls.
Sometimes - @Provider is jerk@

This is a rather technical question.

Crysis 2 multiplayer currently says I have a "Strict NAT". This is despite forwarding the relevant ports.

As I understand it, a "Strict NAT" means that the game is not able to "hole-punch" ( http://en.wikipedia.org/wiki/Hole_punching ) a UDP connection on the port 64100. Crysis 2 appears to use other, undocumented ports such as 64228 which I have also opened.

Using the software from PortForward.com I can verify that the ports are open. However, when Crysis 2 is presumably performing the test to determine NAT Type I see no UDP packets on either port snooped by Wireshark.

The game warns me that having "Strict NAT" could affect my ability to connect to games; and indeed, games can connect but they often drop me rather quickly or lag severely. However (again using Wireshark) I can see that packets from the server are successfully reaching my computer on port 64100 (and on port 64228 as the connection is established). In fact in one instance the packets kept reaching my computer from the server even after I had stopped sending packets because of a disconnect.

So the questions:
- What method does Crysis 2 use to determine NAT Type?
- Is this responsible for the lag and disconnects I am experiencing?
- If so how can I fix it?
- If not, what could be the problem? ISP throttling?
- Where can I learn more about how online games transmit data over the internet and how lag and disconnects occur even on low-ping connections?

Same here, i have no NAT at all, so it should be displayed as open NAT, but for some reason game falsely display me "strict NAT" this is another bug of this alpha version of game we testing for out own money! damn it!

Same here, i have no NAT at all, so it should be displayed as open NAT, but for some reason game falsely display me "strict NAT" this is another bug of this alpha version of game we testing for out own money! damn it!

Yeah, there has to be some test that it's performing though. Any ideas what it could be? Or if it's related to the disconnects? Have you been able to play many games yourself?

Tried forwarding all those ports. I've always been on a static IP, and never used wireless

Is it true that it could just be my provider???

What does your setup look like exactly? Computer (how many?) --> Router --> Internet?

I've probably made some horribly obvious/iddiotic mistake, but I'm getting very confused with my Strict NAT problems...

I've Allowed Crysis 2 and all the EA server applications to go through my firewall (look bellow)


And I've also -tried to- opened my ports (probably)


Can anybody help? I have a feeling that it's some really obvious/stupid mistake.. but I can't figure out what it could be =S

Sorry for my stupidity.

I've got the same problem.

My problem is the fameous "The Connection to the Session Has Been" error to where I can't maintain a connection for more than 2-5 minutes. I've tried everything including three different routers, opening all recommended ports, turning off all firewalls and anti-virus, enabling DMZ, completely bypassing the router and plugging straight into the modem, and even uninstalling/reinstalling the game. Nothing is worked and I'm not convinced that it's just a broken game.

Regardless of what I change, my NAT remains at Moderate.