Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Nov 2008 07:55:39 +0100
From:      Bernt Hansson <bernt@bah.homeip.net>
To:        Fbsd1 <fbsd1@a1poweruser.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: pf or ipf rules to allow p2p Limewire through
Message-ID:  <492F95EB.8080308@bah.homeip.net>
In-Reply-To: <492F8E9B.5040805@a1poweruser.com>
References:  <492E60A8.6080105@a1poweruser.com> <492F82D1.4020000@bah.homeip.net> <492F8E9B.5040805@a1poweruser.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Fbsd1 said the following on 2008-11-28 07:24:
> Bernt Hansson wrote:
>> Fbsd1 said the following on 2008-11-27 09:56:
>>> What pf or ipf firewall keep-state rules needed to allow p2p 
>>> application such as limewire through? Using same firewall rules as in 
>>> handbook example.
>>
>> Put this in your /etc/ipnat.rules
>>
>> rdr rl0 0.0.0.0/0 port port# -> internal-ip port port# tcp
>> rdr rl0 0.0.0.0/0 port port# -> internal-ip port port# udp
>>
>>
>>
>>
> 
> 
> How about explaining just why this is going to allow p2p limewire work?

Read the handbook on ipfilter.
http://coombs.anu.edu.au/~avalon/

> I think you are missing the fact that limewire does not use dedicated 
> port numbers. Every session uses different port numbers and the remote 
> computers come in on different hight port numbers.

Change port# to port range, then. Or you can skip the firewall.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?492F95EB.8080308>