TL; DR: Is there a minimal list of IP addresses that have to be allowed through the firewall to be able to unlock achievements in the Galaxy client?

----

Achievements in the Galaxy client don't register if the game is firewalled. They work if the game is completely allowed. However, some games also try to connect to non-GOG third party servers, which I don't want to allow. I mostly trust GOG, I don't trust every single game studio. I don't need nor want any kind of online accounts, multiplayer, news, leaderboards, tracking, or any other non-local feature. I would like to have achievements, and only achievements.

From the firewall logs of several games, I managed to pinpoint some of the GOG servers (e.g., 194.110.240.185), but allowing those didn't help. The games also try to connect to a bunch of other IPs belonging to Akamai and Amazon AWS, however, those are CDNs which means that a) the IPs tend to change on every run, so creating a minimal firewall rule is pretty much impossible, and b) more importantly, I can't be sure that it's GOG on the other side.

Any solutions (preferably, a list of first-party IP addresses) or workarounds, or is it a black-and-white choice of "block everything" vs "leak all the data to everyone"?

(Of course, the best solution would be to have the game report achievements to the Galaxy client, then have the client contact the GOG servers. The current implementation is horrible for security and privacy. I do not understand the reasoning behind it. Unfortunately, this is not a solution I can do myself. :( )

reedit: The word 'port' gets used too many different ways around here:

Here's a post about which ports are used. It's a year old and still doesn;t cover achievement data so I still think your best bet would be to contact staff directly as below:

https://www.gog.com/forum/general/what_is_gog_stance_on_telemetry/post11

edit: Hold on, I think I found something. Reading..... Not that I;m aware of and a quick google doesn;t pull one up.

Best bet unless someone can come up such a list is to correct GoG directly and ask them:

https://support.gog.com/hc

Having spent a lot of time looking at a number of MMO platforms, that info is probably going thru its own port but still staff is who you need to be talking to.

Good luck

Damn, so close yet so far. Yeah, I searched several times, with multiple search engines, over the past year or so and found nothing. (Why wait that long to ask about it, you say? I don't like bothering people by asking questions :) ) Damn again. Maybe in a few months (see above re: bothering people :) ). As far as I can see in the logs, only ports TCP 80 (http), TCP 443 (https), and UDP 514 are in use. Those are already mentioned in the post you linked above, so nope, no unique port. I guess that would be too easy :D

Thanks for the reply.