Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 726 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Blocked IM protocol still connecting

stevenhemelaere
Ever since i use Astaro (from 7.401 up to 7.480), I have chosen "Block completely" for Tencent_QQ and Oscar.

However, each day i see in the Daily Executive Report that there are several hundred connections made (see screenshot).

How am i to interpret this?

Edit:

Added screenshot of IM Control Status


This thread was automatically locked due to age.
  • 0
    You may have an application that is using the same TCP ports. The Astaro sees the port traffic and gives it the name Tencent_QQ as that is what is registered with IANA. 

    Do some checking on the ports your applications are using. 

    Got dualphone or Skype running anywhere?
  • 0
    When i check my previous daily executive reports, i see a clear pattern that everytime i use µtorrent, those connections come up.

    How can this be when in fact i set µtorrent up to use a port which is WAY out of the range of tencent & oscar?
  • 0
    Apparently the application isn't doing what you think it is supposed to. It's not surprising that file-sharing applications don't lock themselves down to specific ports or behave. Their whole goal is to bypass filtering/blocking so that they can get to the Internet and "share". 

    Makes you feel safe, don't it? Either way, I think you've found your culprit.
  • 0
    okay, i found it.

    In the advanced settings of µtorrent there is one option called net.outgoing_port.

    Setting that one to the port wanted prevents µtorrent of using anything else.

    If you use net.outgoing_max_port to set a higher a port than the first one, you'll be using a range of ports.
  • 0
    skype and p2p applications do a port scan to find an open port and use it.  If you want to control them you have to lock them down to a single port.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow