# Moonlight Client-Side Firewall/Routing Diagnostic Prompt

Deploy this prompt to a Hermes agent running on the Moonlight CLIENT PC
when the Sunshine server is confirmed working (paired, ports listening)
but Moonlight throws `Error 10060` (RTSP handshake timeout) on stream launch.

The prompt assumes:
- Sunshine server IP is known (replace `<SERVER_IP>` below)
- Sunshine is confirmed listening on TCP 48010, 47984, 47989, 47990
- Pairing completed successfully (client cert in sunshine_state.json)
- The block is on the client side (Windows Firewall, Tailscale routing, etc.)

---COPY BELOW THIS LINE---

Hey Hermes, I'm trying to stream from my Sunshine server (IP: <SERVER_IP>) to
this PC using Moonlight, but I keep getting "RTSP Handshake failed: Error 10060".

The host agent confirmed that the PC is successfully paired, and the Sunshine
server is running and listening on all required ports (TCP 47984, 47989, 47990,
48010). However, when Moonlight attempts to start the stream, the RTSP handshake
on TCP 48010 is timing out before it ever reaches the server logs.

Please perform a full network and firewall diagnostic on this client PC to fix
the connection to the host:
1. Verify if Windows Defender / Windows Firewall is blocking Moonlight.exe or
   the required ports (TCP 48010, UDP 48000, 48010) and add allow rules for them.
2. Test network reachability to the host using
   `Test-NetConnection -ComputerName <SERVER_IP> -Port 48010`.
3. Check if there are any stale UDP/TCP connections held open in TIME_WAIT state
   that might be blocking Moonlight.
4. If Tailscale is installed on this PC, check if it's interfering with local
   LAN routing to <SERVER_IP>.

Fix any firewall or routing blockers you find so Moonlight can successfully
complete the handshake.
