Here’s a simple tutorial how to create SSH Tunnel and Socks proxy to play Diablo III behind a firewall, or just to avoid 3007 errors. You’ll only need a SSH server where you can connect to.
这是一篇简单的教程，关于怎样创建SSH 通道和Socks代理以在防火墙后可以玩暗黑3，或者只是用来避免3007错误。 你仅需要一个能连接上的SSH服务器。
Creating the SOCKS5 SSH tunnel with Putty
Open Putty and go to the Tunnels menu. Set source port to 9999, and then set Dynamic as the port type, and press Add. After this, go into the basic session page, and connect to SSH Server.
使用Putty创建SOCKS5 SSH通道
打开Putty，找到Tunnels菜单。源端口设为9999，并把端口类型设置为动态。然后，到基本会话页面，连接到SSH服务器。
Set the Tunnel port into 9999, set port type to dynamic, and press add
设置Tunnel端口为9999，设置端口类型为动态，按Add增加
Write your server address to the host name and press Open
在主机名处写上你的服务器地址，按Open
Choosing the Proxifier Software
The Proxifier is a proxy server, that can route your traffic though the SOCKS SSH tunnel, that we just created. The Diablo III uses UPD, so you should choose Proxifier SW that supports the SOCKS5 UDP Associate. You can get pretty good comparison at Wikipedia article here: http://en.wikipedia.org/wiki/Comparison_of_proxifiers I decided to use Widecap, since it’s for windows, it supports UDP, and it’s free.
选择Proxifier软件
Proxifier是一个代理服务器软件，它能将你的流量路由通过SOCKS SSH通道（刚创建的）。暗黑3使用UDP，所以你应选择支持SOCKS5 UDP 相关的 Proxifier SW。你能在维基百科获取更好的比较文章：http://en.wikipedia.org/wiki/Comparison_of_proxifiers 。 我决定选择Widecap，因为它支持Window上，既然支持Window上，它支持UDP，而且免费。
Configuring Widecap for Diablo III
The Widecap UI is a bit messy, but you’ll get used to it :)
Step 1: Create a new proxy by clicking proxies/new proxy button. Then set the Server port into localhost:9999 (the SOCKS tunnel we just created). Then create a new Chain by clicking the Create new button at near the chain. You should invent a better name to your chain than the “Unused”
为暗黑3配置Widecap
Widecap的UI有点混乱，但是你很快就会适应它 ：）
步骤1： 点击proxies/new proxy按钮，创建一个新代理。然后设置服务器端口为本机：9999（刚创建的SOCKS通道）。然后点击靠近chain的Create new按钮 ，创建一个新的Chain。你应当给Chain使用一个好一点的名字，而不是使用“Unused”。
Connect to localhost:9999, and Create a new Chain, and click OK
连接到本地：9999，创建一个新的Chain，并点击 OK
Step 2:
Create a new rule, by clicking the “new rule” button under the network.You can give a name to your rule in the Main tab. Next click the chain tb, and set the proxy chain you to the rule that you created in Step1.
步骤2：
创建一个新规则，点击位于network下面的 “new rule”按钮。可以在主标签为规则填一个名字。下一步，点击chain标签，设置proxy chain使用步骤1创建的规则。
Now you can add the real rule, by clicking the address tab, and adding a new address rule. In this example I used only 80.239.208.193, which is the eu.actual.battle.net, but if you’re behind some nasty firewall you should just choose to route all ports by choosing the option “Any”. Please also notice that the eu.actual.battle.net might later resolve into some other IP than 80.239.208.193, if you want to only route that domain, you should ping eu.actual.battle.net and see what it resolves.
现在可以增加真正的规则，点击Address标签，增加一个新的地址规则。在这个例子中，我仅使用80.239.208.193，是eu.actual.battle.net的IP。但是如果你是在一些很严格的防火墙后面，你应当选择路由所有的端口，选中选项“Any ”。 请注意eu.actual.battle.net有时候也会解析为别的IP而不是80.239.208.193，如果你只想着路由那个域名，你应当在命令窗口 ping 80.239.208.193，并看看它解析为什么。
Create new rule, and set the IP
创建新规则，设置IP
Currently it seems that playing the Diablo III causes about 15-20MB of traffic to the eu.actual.battle.net so it’s not eating too much bandwidth from my SSH server.
目前而言，看起来玩暗黑3会发生到eu.actual.battle.net15-20MB的流量，所以它不会从我的SSH服务器吃掉太多的带宽。
Step 3:
Configure the Diablo III to use the newly created rule. Click to the view programs page. Then Drag and Drop the Diablo III.exe file into the programs area. After this right-click the Diablo III.exe, and choose “modify program”. Then choose the rule you created in the Step 2 for the Diablo III and press OK. If you’re behind a firewall, you should also add the same rule for the Diablo launcher, so it can update the Diablo III for you.
步骤3：
配置暗黑3使用新创建的规则。点击到view programs页面。然后拖放Diablo III.exe文件到programs区域。然后，右键点击Diablo III.exe，选择“modify program”。选择在步骤2为暗黑3创建的规则，点击OK。如果你在一个防火墙后面，你也应为Diablo launcher增加相同的规则，以便它能为你更新暗黑3.
Set the newly created rule for Diablo III.exe
为Diablo III.exe设置最近创建的规则
Pro tip: install openSSH server to port 443
Many public networks at the airports etc. have quite strict firewall rules, so you can’t normally access to the SSH via port 22. My favourite hack is to run the OpenSSH server at 443 port, so I can connect into it pretty much from anywhere I like. And with SOCKS5 proxy, I can do everything I like even with these firewalls.
Pro技巧：安装openSSH服务器到443端口
许多公网，如飞机场等，有非常严格的防火墙规则，所以你不能通过端口22正常访问SSH。我最喜欢的修改时将OpenSSH运行在443端口，所以我从我喜欢的任何地方连进它。而且使用SOCKS5代理，我能做我喜欢的任何事情，即使有防火墙。