In reply to the earlier question about how the firewalled host downloading works, this change really benefits everyone on the network. It does not improve downloads for people who are already firewalled. If you're behind a firewall, you already cannot download from other hosts behind a firewall simply because there's no way to make a direct connection between the two.

Rather, this change improves downloads for people who are not behind firewalls, as it makes it more likely that they'll be able to successfully download from firewalled sources. This is because the firewalled host returns "proxies" in the query hit that tell the downloader multiple paths it can take to download the file (to have the downloaded source open the TCP connection after a push request, and then transfer the file).

Hope that makes some sense.