EFW 2.5 Utorrent

[Guest]

[jamerson]

Hi all,
can someone please advise how to allow utorrent ports on the endian firewall?
i tried to forward the ports that my Utorrent clients used to the machine but it stil not working,
when i disable the Outgoing firewall configuration it works,
i am supposed to do some configuration on the outgoing firewall traffic?


thank you

[sree]

Create port forwarding NAT to the client machine with the desired port and allow the same port in outgoing traffic from the client. it works


Cheers~
Sree

[jamerson]

Hey Sree,
thank you for the answer, i've tried it but still doesnt works,
any more suggestions?

thank you

[sree]

Try deleting  SNORT rule p2p

Cheers~
sree

[jamerson]

i've checked on the outgoing rules there is no SNORT rule p2p!
i have to disable the outgoing rules to get this thing working ! however disabling it is not a reason of using the firewall !

[jamerson]

any suggestions please? i need this working today!

[Di4bLo]

Create a new rule that ALLOW (no IPS) from your IP (where Utorrent is installed) to ANY destination.
If you want, log the connections on that IP and check what ports Utorrent is using.

[Ricard]

I have the p2p snort rules in drop mode, and torrent works very well also with IPS. Just I have the forwarding port for uTorrent.

Security remains in the forwarding rule, because you tell the machine 192.168.3.42 will be the only one receiving traffic through the assigned uTorrent port.
When you have the Outgoing Firewall active, then it cannot works because  Torrent apps needs communication with a lot of outer ports. So you should turn off the Outgoing Firewall or building a new rule in Outgoing Firewall to allow a huge number of ports beyond 8080; in example: 10000-> 65535.

When you open the uTorrent, the uTorrent would be the only app using that port. No more apps will answer through that port in that same machine.  If you need more security in that machine, then you would need an application layer firewall in the same machine which host uTorrent. That software can check if uTorrent is the app using that inside port in that machine and also if this is the only app with permission for 10000:65535 outside ports.

It would be nice if some day all the apps would be able to send an unique identificator to the network firewalls, and then Endian would be able to check all these related things by himself.