This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Bit Torrent sync / firewall rules

okay im at my witts end here I thought i understood how the firewall works but i guess im not getting something

example from the log

01:58:12 Default DROP UDP 10.10.10.194 : 42816 → 54.225.100.8 : 3000 len=125 ttl=127 tos=0x00 srcmac=2c:41:38:11:87:c3 dstmac=0:1a:8c:12:86:a0
01:58:12 Default DROP UDP 10.10.10.194 : 42816 → 54.225.100.8 : 3000 len=125 ttl=127 tos=0x00 srcmac=2c:41:38:11:87:c3 dstmac=0:1a:8c:12:86:a0
01:58:19 Default DROP UDP 10.10.10.116 : 42816 → 54.225.100.8 : 3000 len=125 ttl=127 tos=0x00 srcmac=0:25:90:3c:2b:25 dstmac=0:1a:8c:12:86:a0
01:58:22 Default DROP UDP 10.10.10.194 : 42816 → 54.225.100.8 : 3000 len=125 ttl=127 tos=0x00 srcmac=2c:41:38:11:87:c3 dstmac=0:1a:8c:12:86:a0
01:58:22 Default DROP UDP 10.10.10.194 : 42816 → 54.225.100.8 : 3000 len=125 ttl=127 tos=0x00 srcmac=2c:41:38:11:87:c3 dstmac=0:1a:8c:12:86:a0
01:58:29 Default DROP UDP 10.10.10.116 : 42816 → 54.225.100.8 : 3000 len=125 ttl=127 tos=0x00 srcmac=0:25:90:3c:2b:25 dstmac=0:1a:8c:12:86:a0
01:58:32 Default DROP UDP 10.10.10.194 : 42816 → 54.225.100.8 : 3000 len=125 ttl=127 tos=0x00 srcmac=2c:41:38:11:87:c3 dstmac=0:1a:8c:12:86:a0

the rule i setup was

Internal (network)→ BT Sync* → any

*BT Sync UDP 1:65535 → 42816

Its dropping all the packets

any pointers?

This thread was automatically locked due to age.

Parents

0 FrankBarmentlo over 12 years ago

what I' ve done for torrenting is this:
Routing:
  DNAT:
    Source: Any Ipv4
    service: port bittorrent uses(Laptop = 65535, Desktop 65534 as examples),
    destination: external(address)

    change destination to: the destination that fits the port mentioned above
Firewall
DNAT' s auto-firewall rules are checked
no special rules have been made

IPS: disabled the rules mentioned in earlier posts

if I recall correctly that's all you have to do [;)]
Cancel
Vote Up 0 Vote Down

Cancel
0 bimmerdriver over 12 years ago in reply to FrankBarmentlo

what I' ve done for torrenting is this:
Routing:
  DNAT:
    Source: Any Ipv4
    service: port bittorrent uses(Laptop = 65535, Desktop 65534 as examples),
    destination: external(address)

    change destination to: the destination that fits the port mentioned above
Firewall
DNAT' s auto-firewall rules are checked
no special rules have been made

IPS: disabled the rules mentioned in earlier posts

if I recall correctly that's all you have to do [;)]
I tried this and I'm still finding that the firewall is dropping packets.

I did the following:

Created services for each host each with unique destination port
name: bittorrent
type: TCP/UDP
source: 1:65535
destination: 688x

Created DNAT rule for each host
from: any
using service: bittorrent
to: external WAN
change destination to
automatically create firewall rule

For each host (all running windows 7), I set utorrent to use the particular port with UPNP enabled.

The number of packets seemed to reduce, but I am still getting quite a few (up to 10's of thousands / day) packets dropped for both tcp and udp.

The only difference I can see is that I used any ipv4 or ipv6, rather than any ipv4 as shown above.

Any suggestions?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 bimmerdriver over 12 years ago in reply to FrankBarmentlo

what I' ve done for torrenting is this:
Routing:
  DNAT:
    Source: Any Ipv4
    service: port bittorrent uses(Laptop = 65535, Desktop 65534 as examples),
    destination: external(address)

    change destination to: the destination that fits the port mentioned above
Firewall
DNAT' s auto-firewall rules are checked
no special rules have been made

IPS: disabled the rules mentioned in earlier posts

if I recall correctly that's all you have to do [;)]
I tried this and I'm still finding that the firewall is dropping packets.

I did the following:

Created services for each host each with unique destination port
name: bittorrent
type: TCP/UDP
source: 1:65535
destination: 688x

Created DNAT rule for each host
from: any
using service: bittorrent
to: external WAN
change destination to
automatically create firewall rule

For each host (all running windows 7), I set utorrent to use the particular port with UPNP enabled.

The number of packets seemed to reduce, but I am still getting quite a few (up to 10's of thousands / day) packets dropped for both tcp and udp.

The only difference I can see is that I used any ipv4 or ipv6, rather than any ipv4 as shown above.

Any suggestions?
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data