Re: [SLE] gnutella firewalled on 6346

From: Henry Tang (henry_at_yucreation.com)
Date: 10/13/03

  • Next message: Olipro: "Re: [SLE] (Solved) Refresh Rate Hell (SaX2)"
    Date: Mon, 13 Oct 2003 10:51:10 -0500
    To: fsanta <fsanta@arrakis.es>
    
    

    Ah i see the port now. By looking at the ip i guess you are trying to run
    gnutella on a secondary computer. Maybe you shoudl try putting this in.

    FW_SERVICES_EXT_UDP="6112"
    FW_FORWARD_MASQ="0/0,192.168.1.10,udp,6112"

    The above was used to get my starcraft to work on a secondary computer. It
    allows information to go inand out of my 192.168.1.10 computer via port 6112
    which is used for starcraft. If i remembered correctly, my sc was transferring
    information out but it couldn't receive information (information got lost, i
    think). This is for udp though

    I am going to try installing gnutella on my server compueter tonight when i get
    home. I didn't know this existed for linux. Sweet, thanks!
     
     
    Quoting fsanta <fsanta@arrakis.es>:

    > Thanks. Here are two references to 6346. Are there any clues
    > here?
    > Oct 13 16:51:26 polop kernel: SuSE-FW-ACCEPT IN=eth0 OUT=
    > MAC=00:05:1c:10:ee:75:00:60:68:81:10:c7:08:00
    > SRC=24.159.129.226 DST=192.168.1.2 LEN=64 TOS=0x00
    > PREC=0x00 TTL=108 ID=57394 DF PROTO=TCP SPT=6346 DPT=1445
    > WINDOW=16968 RES=0x00 ACK SYN URGP=0 OPT
    > (020405B4010303000101080A000000000000000001010402)
    >
    > Oct 13 16:51:27 polop kernel: SuSE-FW-ACCEPT IN=eth0 OUT=
    > MAC=00:05:1c:10:ee:75:00:60:68:81:10:c7:08:00
    > SRC=24.159.129.226 DST=192.168.1.2 LEN=52 TOS=0x00
    > PREC=0x00 TTL=108 ID=57458 DF PROTO=TCP SPT=6346 DPT=1445
    > WINDOW=16701 RES=0x00 ACK URGP=0 OPT
    > (0101080A004A59670009C904)
    >
    >
    > On Monday 13 October 2003 16:41, Henry Tang wrote:
    > > >FW_LOG_DROP_CRIT="yes"
    > > >FW_LOG_DROP_ALL="no"
    > > >FW_LOG_ACCEPT_CRIT="yes"
    > > >FW_LOG_ACCEPT_ALL="no"
    > > >
    > > > > On /var/log/warn you should see which packets is the
    > > > > firewall rejecting.
    > > >
    > > > Hi. There is nothing rejected on port 6346
    > > >
    > > > --
    > > > Check the headers for your unsubscription address
    > > > For additional commands send e-mail to
    > > > suse-linux-e-help@suse.com Also check the archives at
    > > > http://lists.suse.com Please read the FAQs:
    > > > suse-linux-e-faq@suse.com
    > >
    > > Set FW_LOG_DROP_ALL to yes as well? Also how do you know
    > > what port fw is dropping? I can never figure out. I am
    > > tring to figure out why my microphone doesn't work
    > > through messenger.
    > >
    > > Where is the port?
    > >
    > > Oct 13 09:38:13 main kernel: SuSE-FW-DROP-DEFAULTIN=eth0
    > > OUT= MAC=00:50:da:c4:1a:35:00:02:3b:01:16:46:08:00
    > > SRC=66.93.119.161 DST=66.93.216.238 LEN=48 TOS=0x00
    > > PREC=0x00 TTL=117 ID=40453 DF PROTO=TCP SPT=4009 DPT=135
    > > WINDOW=16384 RES=0x00 SYN URGP=0 OPT (020405B401010402)
    > >
    > >
    > > ---------------------------------------------------------
    > >----------- This message was sent using Yu Creation
    > > Webmail powered by Horde IMP
    >
    >
    > --
    > Check the headers for your unsubscription address
    > For additional commands send e-mail to suse-linux-e-help@suse.com
    > Also check the archives at http://lists.suse.com
    > Please read the FAQs: suse-linux-e-faq@suse.com
    >
    >

    --------------------------------------------------------------------
    This message was sent using Yu Creation Webmail powered by Horde IMP

    -- 
    Check the headers for your unsubscription address
    For additional commands send e-mail to suse-linux-e-help@suse.com
    Also check the archives at http://lists.suse.com
    Please read the FAQs: suse-linux-e-faq@suse.com
    

  • Next message: Olipro: "Re: [SLE] (Solved) Refresh Rate Hell (SaX2)"

    Relevant Pages

    • Re: Firewall logging port 6346
      ... i made the mistake of running gnutella over a year ago and I still ... have machines hitting my firewall. ... > my port 6346, this has been happening for quite some time ... > Jos Kirps ...
      (Incidents)
    • RE: Firewall logging port 6346
      ... Most likely the person on that IP before you was sitting on the Gnutella ... network for some time. ... I know of no specific malware that uses this port (I ... and tracking system please see: http://aris.securityfocus.com ...
      (Incidents)
    • Re: [SLE] : [SLE] USB drive
      ... I'm using a 1.x device and 1.x port, ... had to load drivers to get 'em to work. ... Check the headers for your unsubscription address For additional commands send e-mail to suse-linux-e-help@suse.com Also check the archives at http://lists.suse.com Please read the FAQs: suse-linux-e-faq@suse.com ...
      (SuSE)
    • Firewall logging port 6346
      ... My firewall has logged 131.114.2.90 trying to connect to ... I know that this is the standard port for Gnutella (it also ... Could this mean that the network is slow / broken down ...
      (Incidents)
    • running gnutella, leaving ports open when not in use
      ... I have a permanent broadband connection and a few computers in the ... family networked through a hardware firewall router. ... started using Gnutella, which requires me to connect a high-numbered ... server port from my computer to the outside - to connect and disconnet ...
      (comp.os.linux.security)