SoftEther VPN LAN Gaming

Open Control Panel
Click System and Security
Click Allow an app through Windows Firewall
Click Change settings
Click Allow another app
Click Browse
- DirectPlay
  - Go to C:\Windows\SysWOW64
  - Select dplaysvr.exe and click Open
- DirectPlay 8 (x32)
  - Go to C:\Windows\System32
  - Select dpnsvr.exe and click Open
- DirectPlay 8 (x64)
  - Go to C:\Windows\SysWOW64
  - Select dpnsvr.exe and click Open
- Game
  - Go to game directory
  - Select game executable and click Open
Click Network types
- Check Private and Public
- Click OK
Click Add
Click OK

Optional recommendations

Visit PCGamingWiki for game patches/fixes
- https://www.pcgamingwiki.com/wiki/Home
Use dgVoodoo or WineD3D for old DirectX 2-9 games
- http://dege.freeweb.hu/dgVoodoo2/dgVoodoo2/
- https://fdossena.com/?p=wined3d/index.frag
Use D8VK for DirectX 8 games
- https://github.com/AlpyneDreams/d8vk
Use DXVK or DXVK-GPLAsync for DirectX 9 games
- https://github.com/doitsujin/dxvk
- https://gitlab.com/Ph42oN/dxvk-gplasync
Use Special K or RTSS frame limiters to improve frame pacing and reduce inpug lag (check out Special K for even more features: Latent Sync, HDR retrofit, etc.)
- https://special-k.info/
- https://www.guru3d.com/download/rtss-rivatuner-statistics-server-download/

SoftEther VPN Server (Host PC - Linux)

Download the latest version of SoftEther VPN Server
- https://www.softether-download.com/en.aspx?product=softether
Extract the archive
Open the Terminal
Change working directory to the extracted vpnserver folder
- cd "<path>/vpnserver"
  - Example: cd "${HOME}/Downloads/vpnserver"
Install SoftEther VPN Server
- make

Move the vpnserver folder to /usr/local
- cd ..
- sudo mv vpnserver /usr/local
Create a VPN Server startup script
- Download a vpnserver.service file to /lib/systemd/system
  - curl -s https://pastebin.com/raw/rc4aM1y7 | tr -d '\r' | sudo tee /lib/systemd/system/vpnserver.service > /dev/null
- Enable the VPN Server service
  - sudo systemctl enable --now vpnserver
Use Wine to install the Windows version of SoftEther VPN Server Manager
- Continue to SoftEther VPN Server (Host PC - Windows)

SoftEther VPN Server (Host PC - Windows)

Download the latest version of SoftEther VPN Server
- https://www.softether-download.com/en.aspx?product=softether
Run SoftEther VPN Server setup
- Click Next
- Select Software Components to Install
  - Windows
    - Select SoftEther VPN Server
    - Click Next
  - Linux (Wine)
    - Select SoftEther VPN Server Manager (Admin Tools Only)
    - Click Next
- Agree to the End User License Agreement and click Next
- Click Next
- Specify the install directory and click Next
- Click Next
- Click Finish

Open the SoftEther VPN Server Manager

Click New Setting (if localhost setting already exists, click Edit Setting)
- Setting Name: localhost
- Connect to Localhost: Yes
- Port Number: 5555
- Proxy Type: Direct TCP/IP Connection (No Proxy)
- Administration Mode: Server Admin Mode
- Do not Save Admin's Password: No
- Password: Leave empty (will be changed later)
- Click OK
Click Connect

Enter new password and click OK
Click OK

Select Remote Access VPN Server and click Next
Click Yes

Specify the Virtual Hub Name and click OK
- Name could represent a game: HL1, CMR2, etc.

Dynamic DNS Function
- Click Exit

IPsec / L2TP / EtherIP / L2TPv3 Settings
- Leave all disabled and click OK

If your network is restricted (port forwarding is not possible)
- Enable VPN Azure and click OK
If your network is not restricted (port forwarding is possible)
- Disable VPN Azure and click OK
- Forward TCP port 5555 on your router

Click Create Users
- User Name: Client
- Set the Expiration Date for This Account: No
- Auth Type: Anonymous Authentication
  - If you want, you can select Password Authentication
    - Enter password in Password Authentication Settings
- Set Security Policy: Yes
  - Click Security Policy
  - Select Unlimited Number of Broadcasts
    - Current Value: Enable the Policy
  - Click OK
- Click OK
- Click OK
- Click Exit
Click Close

Select your Virtual Hub
Click Manage Virtual Hub

Click Manage Access Lists
- If you want to add the rules via GUI (slower)
  - Continue to [Rule 01]
- If you want to add the rules via configuration file (faster)
  - Click New (IPv4)
    - Memo: testrule
    - Click OK
  - Click Save
  - Click Exit
  - Click Edit Config
    - Click Save to File
    - Save the configuration file to another location (Downloads folder, etc.)
    - Click OK
  - Open the configuration file with a text editor (Notepad, etc.)
    - Search (CTRL + F) "testrule"
    - Replace the entire "declare AccessList" section
      - https://pastebin.com/raw/NtfYB8G4
    - Save and close the configuration file
  - Click Import File and Apply
    - Select the modified configuration file
    - Click Yes
    - Click OK
  - Open the SoftEther VPN Server Manager
    - Return to the Virtual Hub Management
    - Skip [Rule 01-20] and continue to Log Save Setting

[Rule 01] Click New (IPv4)
- Memo: Outbound Port 25 Blocking
- Action: Discard
- Priority: 1
- Protocol Type: 6 (TCP/IP Protocol)
- Destination Port: 25 - 25
- Click OK
[Rule 02] Click New (IPv4)
- Memo: Outbound MS-SMB Blocking #1
- Action: Discard
- Priority: 2
- Protocol Type: 6 (TCP/IP Protocol)
- Destination Port: 135 - 139
- Click OK
[Rule 03] Click New (IPv4)
- Memo: Outbound MS-SMB Blocking #2
- Action: Discard
- Priority: 3
- Protocol Type: 6 (TCP/IP Protocol)
- Destination Port: 445 - 445
- Click OK
[Rule 04] Click New (IPv4)
- Memo: Outbound MS-SMB Blocking #3
- Action: Discard
- Priority: 4
- Protocol Type: 17 (UDP/IP Protocol)
- Destination Port: 135 - 139
- Click OK
[Rule 05] Click New (IPv4)
- Memo: Outbound MS-SMB Blocking #4
- Action: Discard
- Priority: 5
- Protocol Type: 17 (UDP/IP Protocol)
- Destination Port: 445 - 445
- Click OK
[Rule 06] Click New (IPv4)
- Memo: Keep-alive Blocking for Saving Bandwidth
- Action: Discard
- Priority: 6
- Destination IP Address
  - Applies to All Destination Addresses: No
  - IPv4 Address: 130.158.6.56
  - Subnet Mask: 255.255.255.255
- Click OK
- Select Rule/ID 6 and click Disable
[Rule 07] Click New (IPv4)
- Memo: Permit DNS Packets (UDP)
- Action: Pass
- Priority: 7
- Protocol Type: 17 (UDP/IP Protocol)
- Destination Port: 53 - 53
- Click OK
[Rule 08] Click New (IPv4)
- Memo: Permit DNS Packets (TCP)
- Action: Pass
- Priority: 8
- Protocol Type: 6 (TCP/IP Protocol)
- Destination Port: 53 - 53
- Click OK
[Rule 09] Click New (IPv4)
- Memo: Permit DHCP Packets #1
- Action: Pass
- Priority: 9
- Protocol Type: 17 (UDP/IP Protocol)
- Destination Port: 67 - 68
- Click OK
[Rule 10] Click New (IPv4)
- Memo: Permit DHCP Packets #2
- Action: Pass
- Priority: 10
- Protocol Type: 17 (UDP/IP Protocol)
- Source Port: 67 - 68
- Click OK
[Rule 11] Click New (IPv4)
- Memo: Permit Packets to Private Gateway / DNS Server
- Action: Pass
- Priority: 11
- Destination IP Address
  - Applies to All Destination Addresses: No
  - IPv4 Address: 192.168.30.1
  - Subnet Mask: 255.255.255.255
- Click OK
[Rule 12] Click New (IPv4)
- Memo: Permit Packets from Private Gateway / DNS Server
- Action: Pass
- Priority: 12
- Source IP Address
  - Applies to All Source Addresses: No
  - IPv4 Address: 192.168.30.1
  - Subnet Mask: 255.255.255.255
- Click OK
[Rule 13] Click New (IPv4)
- Memo: Deny Packets to Neighbor VPN Clients
- Action: Discard
- Priority: 13
- Source IP Address
  - Applies to All Source Addresses: No
  - IPv4 Address: 192.168.30.0
  - Subnet Mask: 255.255.255.0
- Destination IP Address
  - Applies to All Destination Addresses: No
  - IPv4 Address: 192.168.30.0
  - Subnet Mask: 255.255.255.0
- Click OK
- Select Rule/ID 13 and click Disable
[Rule 14] Click New (IPv4)
- Memo: Permit Any Packets to VPN Segment
- Action: Pass
- Priority: 14
- Destination IP Address
  - Applies to All Destination Addresses: No
  - IPv4 Address: 192.168.30.0
  - Subnet Mask: 255.255.255.0
- Click OK
[Rule 15] Click New (IPv4)
- Memo: Block Any Packets to LAN (192.168.0.0/16)
- Action: Discard
- Priority: 15
- Destination IP Address
  - Applies to All Destination Addresses: No
  - IPv4 Address: 192.168.0.0
  - Subnet Mask: 255.255.0.0
- Click OK
[Rule 16] Click New (IPv4)
- Memo: Block Any Packets to LAN (172.16.0.0/12)
- Action: Discard
- Priority: 16
- Destination IP Address
  - Applies to All Destination Addresses: No
  - IPv4 Address: 172.16.0.0
  - Subnet Mask: 255.240.0.0
- Click OK
[Rule 17] Click New (IPv4)
- Memo: Block Any Packets to LAN (10.0.0.0/8)
- Action: Discard
- Priority: 17
- Destination IP Address
  - Applies to All Destination Addresses: No
  - IPv4 Address: 10.0.0.0
  - Subnet Mask: 255.0.0.0
- Click OK
[Rule 18] Click New (IPv4)
- Memo: Block Any Packets to APIPA (169.254.0.0/16)
- Action: Discard
- Priority: 18
- Destination IP Address
  - Applies to All Destination Addresses: No
  - IPv4 Address: 169.254.0.0
  - Subnet Mask: 255.255.0.0
- Click OK
[Rule 19] Click New (IPv4)
- Memo: Block Any Packets to Multicast (224.0.0.0/4)
- Action: Discard
- Priority: 19
- Destination IP Address
  - Applies to All Destination Addresses: No
  - IPv4 Address: 224.0.0.0
  - Subnet Mask: 240.0.0.0
- Click OK
- Select Rule/ID 19 and click Disable
[Rule 20] Click New (IPv4)
- Memo: Block Any Packets to CGN Shared Address Space (100.64.0.0/10)
- Action: Discard
- Priority: 20
- Destination IP Address
  - Applies to All Destination Addresses: No
  - IPv4 Address: 100.64.0.0
  - Subnet Mask: 255.192.0.0
- Click OK
Click Save

Click Log Save Setting
- Save Security Log: No
- Save Packet Log: No
- Click OK

Click Virtual NAT and Virtual DHCP Server (SecureNAT)
- Click SecureNAT Configuration
  - Virtual Host's Network Interface Settings
    - MAC Address: Leave default
    - IP Address: 192.168.30.1
    - Subnet Mask: 255.255.255.0
  - Use Virtual NAT Function: No
  - Save NAT or DHCP Server Operations to Log File: No
  - Virtual DHCP Server Settings
    - Use Virtual DHCP Server Functions: Yes
      - Distributes IP Address: 192.168.30.10 to 192.168.30.200
      - Subnet Mask: 255.255.255.0
      - Lease Limit: Leave default
    - Options Applied to Clients
      - Default Gateway Address: Empty
      - DNS Server Address 1: Empty
      - DNS Server Address 2: Empty
      - Domain Name: Empty
  - Click OK
- Click Enable SecureNAT, OK and Exit
Click Exit

Make sure your Virtual Hub is Online
Backup your server configuration file (useful during reinstall, especially the DDnsClient Key)
- Click Edit Config
- Click Save to File
- Click Close
Click Exit
Close the SoftEther VPN Server Manager

SoftEther VPN Client (Host PC - Linux)

Download the latest version of SoftEther VPN Client
- https://www.softether-download.com/en.aspx?product=softether
Extract the archive
Open the Terminal
Change working directory to the extracted vpnclient folder
- cd "<path>/vpnclient"
  - Example: cd "${HOME}/Downloads/vpnclient"
Install SoftEther VPN Client
- make

Move the vpnclient folder to /usr/local
- cd ..
- sudo mv vpnclient /usr/local
Create a VPN Client startup script
- Download a vpnclient.service file to /lib/systemd/system
  - curl -s https://pastebin.com/raw/6syxBcdG | tr -d '\r' | sudo tee /lib/systemd/system/vpnclient.service > /dev/null
- Enable the VPN Client service
  - sudo systemctl enable --now vpnclient
Create a VPN Client connect/disconnect script
- Download a client.sh file to /usr/local/vpnclient
  - curl -s https://pastebin.com/raw/LwHX4Zd3 | tr -d '\r' | sudo tee /usr/local/vpnclient/client.sh > /dev/null
- Assign execute permission to the client.sh file
  - sudo chmod +x /usr/local/vpnclient/client.sh
Use Wine to install the Windows version of SoftEther VPN Client Manager
- Continue to SoftEther VPN Client (Host PC - Windows)

SoftEther VPN Client (Host PC - Windows)

Download the latest version of SoftEther VPN Client
- https://www.softether-download.com/en.aspx?product=softether
Run SoftEther VPN Client setup
- Click Next
- Select Software Components to Install
  - Windows
    - Select SoftEther VPN Client
    - Click Next
  - Linux (Wine)
    - Select SoftEther VPN Client Manager (Admin Tools Only)
    - Click Next
- Agree to the End User License Agreement and click Next
- Click Next
- Specify the install directory and click Next
- Click Next
- Click Finish

Open the Client Manager
- Windows
  - Open the SoftEther VPN Client Manager
- Linux (Wine)
  - Open the SoftEther VPN Client Remote Manager
  - Connect to Local Computer: Yes
  - Click OK

Click Virtual Adapter -> New Virtual Network Adapter
Specify the Virtual Network Adapter Name and click OK
Wait until adapter is created

Click Connect -> New VPN Connection Setting
- Setting Name: localhost <Virtual Hub>
  - Example: localhost HL1
- Host Name: localhost
- Port Number: 5555
- Disable NAT-T: Yes ("/tcp" will be added to Host Name)
- Virtual Hub Name: Select your Virtual Hub from dropdown
- Proxy Type: Direct TCP/IP Connection (No Proxy)
- Always Verify Server Certificate: No
- User Authentication Setting: User (Client) info from your server setup
  - SoftEther VPN Server -> Manage Virtual Hub -> Manage Users
- Reconnects Automatically After Disconnected: Yes
- Reconnect Interval: Leave default
- Infinite Reconnects (Keep VPN Always Online): Yes
- Use SSL 3.0: No
- Click Advanced Settings
  - Number of TCP Connections: 1
  - Establishing Interval: Leave default
  - Set Connection Lifetime of Each TCP Connection: No
  - Use Half-Duplex Mode: No
  - Disable VoIP / QoS Functions: Yes
  - Encrypt VPN Session with SSL: No
  - Use Data Compression: No
  - Disable UDP Acceleration: Yes
  - Bridge / Router Mode: No
  - Monitoring Mode: No
  - No Adjustments of Routing Table: No
  - Click OK
- Click OK

Right click your localhost connection setting and select Copy
Right click the copied connection setting and select Rename
- Example: EU Server HL1

Right click the copied connection setting and select Properties
- Host Name: Replace localhost with Assigned Dynamic DNS Hostname
  - Open the SoftEther VPN Server Manager
    - Select your localhost setting and click Connect
    - Click Dynamic DNS Setting
    - Copy the Assigned Dynamic DNS Hostname and click Exit
    - Close the SoftEther VPN Server Manager
  - Paste the Assigned Dynamic DNS Hostname to replace localhost
    - Example: vpn149908733.softether.net/tcp
- Click Advanced Settings
  - Number of TCP Connections: 8
  - Click OK
- If VPN Azure is enabled
  - Host Name: Replace softether.net with vpnazure.net
    - Example: vpn149908733.vpnazure.net/tcp
  - Port Number: 443
  - Click Advanced Settings
    - Use Data Compression: Yes
    - Click OK
- Click OK

Right click the copied connection setting and select Export VPN Connection Setting
- Save the connection setting file and keep it in Google Drive, MEGA, etc.
- Share the connection setting file to all clients
Right click the copied connection setting and select Delete -> Yes
Connect to the VPN Server
- Windows
  - Right click your localhost connection setting and select Connect
- Linux (Wine)
  - Open the Terminal to establish localhost connection
    - sudo /usr/local/vpnclient/client.sh connect "<localhost_connection_name>"
      - Example: sudo /usr/local/vpnclient/client.sh connect "localhost HL1"
Close the SoftEther VPN Client Manager

SoftEther VPN Client (Client PC - Linux)

Download the latest version of SoftEther VPN Client
- https://www.softether-download.com/en.aspx?product=softether
Extract the archive
Open the Terminal
Change working directory to the extracted vpnclient folder
- cd "<path>/vpnclient"
  - Example: cd "${HOME}/Downloads/vpnclient"
Install SoftEther VPN Client
- make

Move the vpnclient folder to /usr/local
- cd ..
- sudo mv vpnclient /usr/local
Create a VPN Client startup script
- Download a vpnclient.service file to /lib/systemd/system
  - curl -s https://pastebin.com/raw/6syxBcdG | tr -d '\r' | sudo tee /lib/systemd/system/vpnclient.service > /dev/null
- Enable the VPN Client service
  - sudo systemctl enable --now vpnclient
Create a VPN Client connect/disconnect script
- Download a client.sh file to /usr/local/vpnclient
  - curl -s https://pastebin.com/raw/LwHX4Zd3 | tr -d '\r' | sudo tee /usr/local/vpnclient/client.sh > /dev/null
- Assign execute permission to the client.sh file
  - sudo chmod +x /usr/local/vpnclient/client.sh
Use Wine to install the Windows version of SoftEther VPN Client Manager
- Continue to SoftEther VPN Client (Client PC - Windows)

SoftEther VPN Client (Client PC - Windows)

Download the latest version of SoftEther VPN Client
- https://www.softether-download.com/en.aspx?product=softether
Run SoftEther VPN Client setup
- Click Next
- Select Software Components to Install
  - Windows
    - Select SoftEther VPN Client
    - Click Next
  - Linux (Wine)
    - Select SoftEther VPN Client Manager (Admin Tools Only)
    - Click Next
- Agree to the End User License Agreement and click Next
- Click Next
- Specify the install directory and click Next
- Click Next
- Click Finish

Open the Client Manager
- Windows
  - Open the SoftEther VPN Client Manager
- Linux (Wine)
  - Open the SoftEther VPN Client Remote Manager
  - Connect to Local Computer: Yes
  - Click OK

Click Virtual Adapter -> New Virtual Network Adapter
Specify the Virtual Network Adapter Name and click OK
Wait until adapter is created

Click Connect -> Import VPN Connection Setting
- Select the connection setting file (contact server administrator to obtain it)
Connect to the VPN Server
- Windows
  - Right click your connection setting and select Connect
- Linux (Wine)
  - Open the Terminal to establish connection
    - sudo /usr/local/vpnclient/client.sh connect "<connection_name>"
      - Example: sudo /usr/local/vpnclient/client.sh connect "EU Server HL1"
Close the SoftEther VPN Client Manager

Feedback

If you have any questions/suggestions, visit the SoftEther VPN LAN Gaming thread :)
- https://www.vpnusers.com/viewtopic.php?f=7&t=68129