you got to rember ASG can filter trafic based on Applacation so look in the applacation section and add a rule for bit torrent ( you will find it under file transfer apps)
Mine is working good i just created a rule with the port for in and out on tcp and udp then looked under app controle and added bit torrent to the alow list
hmm i did everything and mine is still not working when i look at utorrent it looks like the traffic is really low around 8k and i'm connected to 2peers
Check the firewall and ips log for drops should point you in the right direction if your rules are configured correctly or if something is blocking the traffic.
If you still can't get it to work post screenshot of your service, dnat and packet filter rules etc.
ok I'm lost I have been trying to get this to work for awhile with no luck. I posted alot of screenshots. The information for the service definition are tcp/udp destination port: 28256 source port: 1024:65535
In a nutshell here is what I have done. The computers name is rome and its set to a static IP address and I created a torrent service and created a IPS execption. However when I go and pull up the firewall live log I still see blocks for my torrent port.
The DNAT rule is incorrect as I don't see a destination in the DNAT. I assume ROME is the computer on the LAN that is running utorrent.
Should be like this:
Source: ANY Service: Torrent Destination: External Address Change Destination to: ROME
Packet filter 9 looks correct however rule 10 is unnecessary. Also make sure you are allowing traffic with source of ROME and destination ANY or Internet for either specifically the torrent service or ANY service.
Also for udp the source should be 1:65535, and the exception for flood protection won't work because the traffic is not coming from the external interface. I would also recommend as best practice to not bind definitions to specific interfaces, unless for a very specific reason because if done incorrectly could cause problems.
Also, you should NEVER bind a network/host definition to a specific interface unless specifically instructed to do so by an Astaro engineer. Change all your definitions to 'Interface: >', except for the "Internet" definition supplied by Astaro that cannot be edited.
And, in general, you're confusing "External (Address)" with "Internet". "External (Address)" is a special host object created by WebAdmin when you define the External interface. It has only a single IP and will never be a source for traffic that comes into your Internal network(s).
Finally, another comment that might help explain how S/DNATs work. You can replace your two xbox DNATs with a single one that uses the two xbox service definitions in a services group in the traffic selector. That way, both types of traffic are selected by the DNAT and, since you correctly left the 'Destination service' blank, both are forwarded unchanged to your xbox.
After much hair loss trying to set up utorrent myself over the last few days I realized a few things. I had managed to open the service port successfully as per Open Port Check Tool and other sites and yet my speeds were very poor and in some cases the torrent wouldn't start at all.
In fact, there were several trackers whose torrents would not start at all. I examined the live logs and discovered that the firewall was blocking my machine from communicating with the torrent tracker (only some of them). You can see from within the client what port a particular tracker is listening on and inspect the firewall logs with this in mind. I then created the necessary rules and this solved the problem.
I had checked many of the threads on this subject and not once was this solution mentioned. I believe it may solve many users problems with torrenting. Any feedback on this point is welcomed and appreciated/
