Announcement

Collapse
No announcement yet.

Is my router killing my P2P traffic?

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Is my router killing my P2P traffic?

    I've setup a computer dedicated to P2P traffic using BitTorrent, eMule, ShareAza & BearShare. My router, Netgear DG834G, has uPNP which I assumed would allow the P2P clients to open up their own ports as they wished but this did not work with any of the P2P clients, so I created Services foe each client (stating the ports used by each) and then created manual firewall rules to redirect each service to my P2P (fixed-IP) computer.

    P2P traffic seemed to be running a bit slow and my router is sending me administrative emails like the following:
    UDP Packet - Source:124.177.70.186,50785 Destination:202.76.165.7,1626 - [DOS]
    UDP Packet - Source:124.178.43.155,61963 Destination:202.76.165.7,1624 - [DOS]
    UDP Packet - Source:124.187.103.174,61640 Destination:202.76.165.7,1625 - [DOS]
    UDP Packet - Source:124.177.70.186,50786 Destination:202.76.165.7,1627 - [DOS]
    UDP Packet - Source:124.178.43.155,61964 Destination:202.76.165.7,1625 - [DOS]
    UDP Packet - Source:58.111.86.10,60286 Destination:202.76.165.7,1625 - [DOS]
    UDP Packet - Source:58.111.86.10,60287 Destination:202.76.165.7,1626 - [DOS]
    UDP Packet - Source:58.111.86.10,60286 Destination:202.76.165.7,1625 - [DOS]
    UDP Packet - Source:58.111.86.10,60288 Destination:202.76.165.7,1627 - [DOS]
    UDP Packet - Source:116.193.179.10,4438 Destination:202.76.165.7,1627 - [DOS]
    UDP Packet - Source:60.231.195.73,61351 Destination:202.76.165.7,1625 - [DOS]
    UDP Packet - Source:60.231.195.73,61352 Destination:202.76.165.7,1626 - [DOS]
    UDP Packet - Source:60.231.195.73,61353 Destination:202.76.165.7,1627 - [DOS]
    UDP Packet - Source:143.238.248.174,60115 Destination:202.76.165.7,1625 - [DOS]
    UDP Packet - Source:143.238.248.174,60116 Destination:202.76.165.7,1626 - [DOS]
    UDP Packet - Source:143.238.248.174,60117 Destination:202.76.165.7,1627 - [DOS]
    UDP Packet - Source:60.231.24.222,38734 Destination:202.76.165.7,1627 - [DOS]
    UDP Packet - Source:124.150.101.150,50841 Destination:202.76.165.7,1625 - [DOS]
    UDP Packet - Source:124.150.101.150,50842 Destination:202.76.165.7,1626 - [DOS]
    UDP Packet - Source:58.111.86.10,60285 Destination:202.76.165.7,1624 - [DOS]
    Note that they are all UDP packets. Is this a Denial Of Service from an external source or is my router not accepting P2P traffic on UDP ports 1625-1627?

    The P2P computer is Windows 2003 SP1 Server with no software firewall.
    |
    +-- JDMils
    |
    +-- Regional Systems Engineer, DotNet programmer & Jack of all trades
    |

  • #2
    Re: Is my router killing my P2P traffic?

    what happen when you restart the router

    Comment


    • #3
      Re: Is my router killing my P2P traffic?

      I think I can speak for most on the site that we're really not eager to support the likes of "BitTorrent, eMule, ShareAza & BearShare".

      On the uPNP front, I have found tools like PortForward invaluable. To get it to work properly, you need to set up an "Internet Gateway" connection.

      A quick Google turned up:

      http://cc.uoregon.edu/cnews/spring2003/upnp.html

      Lots of other info out there.

      Let us know how it goes (and don't tell us about anything illegal
      Cheers,

      Rick

      ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

      2006-2099 R Valstar. This post is offered "as is" for discussion purposes only with no express or implied warranty of any kind including, but not limited to, correctness or fitness for use. Nothing herein shall be construed as advice. Attempting any activity based on information in this post is done at your own risk.

      Comment


      • #4
        Re: Is my router killing my P2P traffic?

        I agree with Rick. Those P2P programs are not supported here and if just ONE instance of something illegal is posted, the thread shall be deleted and the poster banned for life.

        This thread is being left open at the moment because the OP may be learning how P2P works so that info can be used to block/filter etc the programs. Be very careful what is posted. Thank you.
        1 1 was a racehorse.
        2 2 was 1 2.
        1 1 1 1 race 1 day,
        2 2 1 1 2

        Comment


        • #5
          Re: Is my router killing my P2P traffic?

          Thanks Chris,

          OK, let me re-phrase my question:

          Q. I have an application which needs ports opened on the router and forwarded to the workstation/application, but the router is reporting that some data coming in on these ports are a Denial Of Service (DOS).

          Why is this happening?
          |
          +-- JDMils
          |
          +-- Regional Systems Engineer, DotNet programmer & Jack of all trades
          |

          Comment


          • #6
            Re: Is my router killing my P2P traffic?

            Did you experiment w/ some of the UPnP stuff per my earlier post? I use BitTorrent to download and share Fedora distros and have no problems and no logged router events for my SMC router w/ UPnP enabled and either WXP or W2K3 machines running BitTorrent through the MS firewall (BitTorrent added as an exception).

            Can't speak to other routers or SW but I'm certain there are a world of answers in Google.
            Cheers,

            Rick

            ** Remember to give credit where credit is due and leave reputation points sigpic where appropriate **

            2006-2099 R Valstar. This post is offered "as is" for discussion purposes only with no express or implied warranty of any kind including, but not limited to, correctness or fitness for use. Nothing herein shall be construed as advice. Attempting any activity based on information in this post is done at your own risk.

            Comment


            • #7
              Re: Is my router killing my P2P traffic?

              The Google didn't help much as it was talking about internal traffic. My router is sending me emails about an alledged Denial Of Service from the WAN port (internet side), but the ports being used are P2P ports. Dunno, maybe it's just the router trying to really say "Hey, there's too much traffic on my P2P ports so I'm going to call this one "DOS"!
              |
              +-- JDMils
              |
              +-- Regional Systems Engineer, DotNet programmer & Jack of all trades
              |

              Comment


              • #8
                Re: Is my router killing my P2P traffic?

                for the record, i use a good bit of torrents, and its all legal. as bandwidth is always at a premium, many open source project choose to publish their releases to the torrent community in addition to source forge and other alt. distro means...

                that said,

                the DoS entries you see on the logs of your router are caused not by DoS, but by half state packets, which is a warning of a DoS attack. typical with p2p traffic, many peers dont have the best bandwidth, and send many packet that get corrupted, or dont get responses or whatever (im not a network d00d) and therefore you get these half state packets that are percieved as DoSs.

                and yes, it kills your download speed. the router i have will deny that IP for 60 seconds or something, and by then the peers p2p client has already refreshed you out, and when they update their tracker and try to connect to you again and send another bad packet the process starts over... so you are wasting the bandwidth on this vicious circle...

                or maybe someone is really trying to hijack your browser. ohhhh.
                its easier to beg forgiveness than ask permission.
                Give karma where karma is due...

                Comment

                Working...
                X