Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 1 reply
  • Subscribers 0 subscribers
  • Views 990 views
  • Users 0 members are here
Options
Suggested

[7.191] block bittorrent

ulong
hi,

I set "block all" for bittorrent, but i can download at 487ko/s...
I see in the AFC log several line AFC block , but µTorrent is able to overcome the filter from the Astaro...

There is no special configuration, except that i Use policy routing to change the output interface.

Ulong 

2008:05:02-21:54:44 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="75.72.234.175" dstip="192.168.0.1" proto="6" length="108" tos="0x00" prec="0x00" ttl="47" srcport="61395" dstport="19102" tcpflags="ACKPSH "

2008:05:02-21:54:44 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth1" srcip="192.168.0.1" dstip="76.181.78.129" proto="17" length="95" tos="0x00" prec="0x00" ttl="63" srcport="19102" dstport="11307" 

2008:05:02-21:54:45 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="88.134.205.117" dstip="192.168.0.1" proto="6" length="108" tos="0x00" prec="0x00" ttl="50" srcport="4642" dstport="19102" tcpflags="ACKPSH "

2008:05:02-21:54:45 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="79.211.213.131" dstip="192.168.0.1" proto="17" length="95" tos="0x00" prec="0x00" ttl="114" srcport="37884" dstport="19102" 

2008:05:02-21:54:46 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="91.9.144.248" dstip="192.168.0.1" proto="6" length="108" tos="0x00" prec="0x00" ttl="51" srcport="54453" dstport="19102" tcpflags="ACKPSH "

2008:05:02-21:54:46 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="190.144.6.182" dstip="192.168.0.1" proto="6" length="108" tos="0x00" prec="0x00" ttl="49" srcport="56903" dstport="19102" tcpflags="ACKPSH "

2008:05:02-21:54:47 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="86.62.106.1" dstip="192.168.0.1" proto="17" length="95" tos="0x00" prec="0x00" ttl="114" srcport="55015" dstport="19102" 

2008:05:02-21:54:50 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="80.138.157.50" dstip="192.168.0.1" proto="6" length="108" tos="0x00" prec="0x00" ttl="48" srcport="24251" dstport="19102" tcpflags="ACKPSH "

2008:05:02-21:54:52 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="89.142.74.25" dstip="192.168.0.1" proto="17" length="95" tos="0x00" prec="0x00" ttl="113" srcport="53455" dstport="19102" 

2008:05:02-21:54:52 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="151.47.177.193" dstip="192.168.0.1" proto="6" length="108" tos="0x00" prec="0x00" ttl="52" srcport="8734" dstport="19102" tcpflags="ACKPSH "

2008:05:02-21:54:54 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="84.73.159.220" dstip="192.168.0.1" proto="6" length="108" tos="0x00" prec="0x00" ttl="112" srcport="32881" dstport="19102" tcpflags="ACKPSH "

2008:05:02-21:54:54 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="91.55.74.254" dstip="192.168.0.1" proto="17" length="95" tos="0x00" prec="0x00" ttl="113" srcport="39211" dstport="19102" 

2008:05:02-21:54:55 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="157.181.166.60" dstip="192.168.0.1" proto="6" length="108" tos="0x00" prec="0x00" ttl="109" srcport="4902" dstport="19102" tcpflags="ACKPSH "

2008:05:02-21:54:55 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="217.41.61.60" dstip="192.168.0.1" proto="6" length="88" tos="0x00" prec="0x00" ttl="104" srcport="49626" dstport="19102" tcpflags="ACKPSH "

2008:05:02-21:54:55 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth1" srcip="192.168.0.1" dstip="91.55.74.254" proto="17" length="95" tos="0x00" prec="0x00" ttl="63" srcport="19102" dstport="59603" 

2008:05:02-21:54:58 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="82.32.128.226" dstip="192.168.0.1" proto="6" length="108" tos="0x00" prec="0x00" ttl="47" srcport="18058" dstport="19102" tcpflags="ACKPSH "

2008:05:02-21:54:58 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="118.0.176.146" dstip="192.168.0.1" proto="17" length="95" tos="0x00" prec="0x00" ttl="107" srcport="22375" dstport="19102" 

2008:05:02-21:54:58 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth1" srcip="192.168.0.1" dstip="89.142.74.25" proto="17" length="95" tos="0x00" prec="0x00" ttl="63" srcport="19102" dstport="53455" 

2008:05:02-21:54:59 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth1" srcip="192.168.0.1" dstip="118.0.176.146" proto="17" length="95" tos="0x00" prec="0x00" ttl="63" srcport="19102" dstport="25171" 

2008:05:02-21:55:00 (none) ulogd[2641]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="60202" outitf="eth0" srcip="209.30.21.59" dstip="192.168.0.1" proto="6" length="108" tos="0x00" prec="0x00" ttl="52" srcport="17457" dstport="19102" tcpflags="ACKPSH "
Parents
  • 0
    hey.

    bittorent uses sometimes encrypted connections that can't be detected. so in your afc.log you probably see the drop of non-encrypted connections whereas your client still downloads through the encrypted connections. 
    you probably notice an increase of performanc if you disable bittorent blocking.

    /alex
Reply
  • 0
    hey.

    bittorent uses sometimes encrypted connections that can't be detected. so in your afc.log you probably see the drop of non-encrypted connections whereas your client still downloads through the encrypted connections. 
    you probably notice an increase of performanc if you disable bittorent blocking.

    /alex
Children
No Data
Unfiltered HTML