Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 16 Feb 2005 22:08:13 +0100
From:      Fabian Anklam <greatnorthern@gmail.com>
To:        Paul <paul@theharbour.eclipse.co.uk>, freebsd-questions@freebsd.org
Subject:   Re: ipf, ipnat and Bittorrent
Message-ID:  <467b1e7a05021613084191aac4@mail.gmail.com>
In-Reply-To: <E1D1Oqe-0002J8-00@marl.lancs.ac.uk>
References:  <E1D1Oqe-0002J8-00@marl.lancs.ac.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 16 Feb 2005 13:04:28 -0000, Paul <paul@theharbour.eclipse.co.uk> wrote:
> I am trying to forward bittorrent ports on FreeBSD 5.3 with ipf and ipnat.
> But the bittorrent indicator stays yellow which means it isn't set up
> correctly.  Also, I don't get as many connections to peers as I should and
> download speeds are very poor.  My ipnat.rules and ipf.rules files are shown
> below:

Took some toying around for me as well to get it running. For
starters, Azureus is fine with one port only (set in Tools -> Options
-> Incoming TCP listen port) i use 50505.

>[...]
> 
> #bittorrent
> 
> rdr tun0 0/32 port 6881 -> 192.168.0.3 port 6881 tcp/udp
> 
> rdr tun0 0/32 port 6882 -> 192.168.0.3 port 6882 tcp/udp
> 
> rdr tun0 0/32 port 6883 -> 192.168.0.3 port 6883 tcp/udp
> 
> rdr tun0 0/32 port 6884 -> 192.168.0.3 port 6884 tcp/udp
> 
> rdr tun0 0/32 port 6885 -> 192.168.0.3 port 6885 tcp/udp
> 
> rdr tun0 0/32 port 6886 -> 192.168.0.3 port 6886 tcp/udp
> 
> rdr tun0 0/32 port 6887 -> 192.168.0.3 port 6887 tcp/udp
> 
> rdr tun0 0/32 port 6888 -> 192.168.0.3 port 6888 tcp/udp
> 
> rdr tun0 0/32 port 6889 -> 192.168.0.3 port 6889 tcp/udp
> 
> rdr tun0 0/32 port 6890 -> 192.168.0.3 port 6890 tcp/udp

The "Any IP on interface" for ipnat seems to be 0/0 instead of 0/32
and i am not sure if the tcp/udp keyword also works with ipnat. I use:

rdr xl0 0/0 port 50505 -> 192.168.0.11 port 50505 tcp
rdr xl0 0/0 port 50505 -> 192.168.0.11 port 50505 udp

and then in ipf.rules:

pass in quick on xl0 proto tcp from any to 192.168.0.11 port = 50505
flags S keep state
pass in quick on xl0 proto udp from any to 192.168.0.11 port = 50505 keep state

Regards



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?467b1e7a05021613084191aac4>