OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[suse-security] Susefirewall2 on 9.1 and emule

From: John Lederer (johnjhml.org)
Date: Mon Aug 16 2004 - 13:56:01 CDT


I am afraid I am floundering with what should be a simple problem.

I have a 9.1 box that operates as a firewall/router for a home network.
Some of the workstaions are Windows XP.
One of the windows XP staions wants to use emule.

I have tried with and without masquerading, a midified
/sbin/Susefirewall2 script, and an add on custom script. I have , in
fact, gotten myself thorughly confused and tangled.

Does anyone have an /etc/sysconfig/Susefirewall2 parameter script that
works with emule that they would share?

Many thanks,

John Lederer
============================

Emule firewall requirments

1) /Local Port:/ 4662 /Remote Port:/ any /Protocol:/ TCP
/Direction:/ incoming /Purpose:/

Client Port / Connections from other clients, Client to Client Source
Exchange

  /Note:/

You can change this port in /Preferences -> Connection ->/ /Client Port/
This port has to be forwarded in a router. Changing this port in
Preferences you must also change the forwarding in the router

 

2) /Local Port:/ any /Remote Port:/ 4662 /Protocol:/ TCP
/Direction:/ outgoing /Purpose:/

Client Port / Connections to other clients, Client to Client Source Exchange

  /Note:/

4662 is the default port, but other clients may have different settings.
Change the /remote port/ to /any/ when configuring a firewall

 

3) /Local Port:/ 4672 /Remote Port:/ any /Protocol:/ UDP
/Direction:/ incoming /Purpose:/

Clients source asking / extended eMule protocol, Queue Rating, File
Reask Ping

  /Note:/

This port has to be forwarded in a router. Changing this port in
Preferences you must also change the forwarding in the router.
If you are not able to forward this port check the /disable/ box in
/Preferences -> Connection -> UDP Port/

 

4) /Local Port:/ any /Remote Port:/ 4672 /Protocol:/ UDP
/Direction:/ outgoing /Purpose:/

Clients source asking / extended eMule protocol, Queue Rating, File
Reask Ping

  /Note:/

4672 is the default port, but other clients may have different settings.
Change the /remote port/ to /any/ when configuring a firewall

5) /Local Port:/ any /Remote Port:/ 4661 /Protocol:/ TCP
/Direction:/ outgoing /Purpose:/

Connection to server

  /Note:/

4661 is the default port of a server. Many server use different ports.
Configuring a firewall the /remote port/ again changes to /any/.

 

6) /Local Port:/ any /Remote Port:/ 4665 /Protocol:/ UDP
/Direction:/ outgoing /Purpose:/ Source asking on servers /Note:/

Servers using the default port 4661 TCP (see #5) automatically set their
port for source asking to 4665 UDP. If a server uses a different port in
#5 the corresponding UDP port is set to [Connection Port + 4]. For
firewalls the /remote port /here is /any./

 

7) /Local Port:/ 4711 /Remote Port:/ any /Protocol:/ TCP
/Direction:/ incoming /Purpose:/ Webserver /Note:/ This is the
default port for the web interface. When using a router this port has to
be forwarded or no connection to the webserver will be possible.

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here