aMule Forum

Please login or register.

Login with username, password and session length
Advanced search  

News:

We're back! (IN POG FORM)

Pages: [1] 2 3

Author Topic: KAD's firewall check  (Read 17943 times)

gav616

  • Guest
KAD's firewall check
« on: February 13, 2010, 02:15:13 PM »

seems to be happening very recently (latest SVNs)

After about 2-3 days uptime aMule 'thinks' my TCP is closed so it connects to a buddy and puts me into firewalled status.
The UDP status is classed as 'OK' though.


my ports are open in iptables TCP and UDP.
using KAD-only.
« Last Edit: October 13, 2010, 10:47:33 PM by Stu Redman »
Logged

Stu Redman

  • Administrator
  • Hero Member
  • *****
  • Karma: 214
  • Offline Offline
  • Posts: 3739
  • Engines screaming
Re: SVN - Firewalled after X days uptime
« Reply #1 on: February 13, 2010, 09:52:36 PM »

Could you try a version a bit older to verify your theory the problem has been introduced lately?
I remember aMule getting offline after a few days since a long time, if network problems occurred. Maybe that's the problem.
Logged
The image of mother goddess, lying dormant in the eyes of the dead, the sheaf of the corn is broken, end the harvest, throw the dead on the pyre -- Iron Maiden, Isle of Avalon

gav616

  • Guest
Re: SVN - Firewalled after X days uptime
« Reply #2 on: February 15, 2010, 01:14:22 AM »

I'll stress test latest stable tomorrow and let you know.
Logged

gav616

  • Guest
Re: SVN - Firewalled after X days uptime
« Reply #3 on: February 15, 2010, 02:56:33 PM »

after 13 hours in, 2.2.6 goes firewalled :S


i can give lots of config info and iptables setup etc.. if needed.
Logged

gav616

  • Guest
Re: SVN - Firewalled after X days uptime
« Reply #4 on: March 30, 2010, 05:01:14 PM »

Is anyone else getting this; and using iptables?
Logged

Kry

  • Ex-developer
  • Retired admin
  • Hero Member
  • *****
  • Karma: -665
  • Offline Offline
  • Posts: 5795
Re: SVN - Firewalled after X days uptime
« Reply #5 on: March 30, 2010, 06:30:54 PM »

Has your IP changed?
Logged

gav616

  • Guest
Re: SVN - Firewalled after X days uptime
« Reply #6 on: March 31, 2010, 01:23:25 AM »

Has your IP changed?

You know what, that sounds like it could be that, i'll have a look..

BTW, does aMule have any features concerning IP changes during a session? (basically, what does it do in the event of...?)

I've noticed a couple of features that some eMule mods have to help dynamic IP users;
Quote
ReAsk Sources after IP change v2:

    * If clients with a dynamic IP have a reconnect there IP changes. Unless they reask the clients they want to download from those clients do not know about the IP change. So it is possible that a client wants to upload to me but still thinks I do have the old IP and fails. This feature helps reasking all the other clients as fast as possible in order not to create the mentioned situation. This feature will not work for LowID clients.

Quote
Inform queue clients after IP change via opcode:

    * Informs all clients in the waiting queue when our IP changed so they will not loose us and their queue position

Quote
Reconnect KAD on IP-Change:

    * Stops and starts KAD when IP has changed
    * Triggered by Server

worth a looksee?
Logged

gav616

  • Guest
Re: SVN - Firewalled after X days uptime
« Reply #7 on: April 04, 2010, 12:54:19 PM »

ok, my ip hasn't changed since start of session and i'm firewalled after 14:10 hours :(
Logged

Stu Redman

  • Administrator
  • Hero Member
  • *****
  • Karma: 214
  • Offline Offline
  • Posts: 3739
  • Engines screaming
Re: SVN - Firewalled after X days uptime
« Reply #8 on: April 04, 2010, 02:07:48 PM »

Firewalled or disconnected?
Yes, amule behaves dumb when the network gets disconnected and later reconnected. I often had problems like that when I still had DSL. (No, I don't know how to fix it at the moment.)
Logged
The image of mother goddess, lying dormant in the eyes of the dead, the sheaf of the corn is broken, end the harvest, throw the dead on the pyre -- Iron Maiden, Isle of Avalon

gav616

  • Guest
Re: SVN - Firewalled after X days uptime
« Reply #9 on: April 04, 2010, 03:39:06 PM »

Firewalled or disconnected?
Yes, amule behaves dumb when the network gets disconnected and later reconnected. I often had problems like that when I still had DSL. (No, I don't know how to fix it at the moment.)

Firewalled and connected to a 'buddy' aMule says TCP is closed and UDP is open

Cable modem, direct connection  with iptables (no router or wireless nonsense)

Code: [Select]
#!/bin/bash

/etc/rc.d/iptables stop

iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
iptables -F
iptables -X

iptables -N OPEN-TCP
iptables -N OPEN-UDP

iptables -P FORWARD DROP

iptables -P OUTPUT ACCEPT

iptables -P INPUT DROP

iptables -A INPUT -i lo -j ACCEPT

iptables -A INPUT -m state --state INVALID -j DROP
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

iptables -A INPUT -p udp -m state --state NEW -j OPEN-UDP
iptables -A INPUT -p tcp --syn -m state --state NEW -j OPEN-TCP

iptables -A INPUT -p tcp -j REJECT --reject-with tcp-rst
iptables -A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable

iptables -A INPUT -j REJECT --reject-with icmp-proto-unreachable

iptables -A OPEN-TCP -p tcp --dport 54662 -j ACCEPT
iptables -A OPEN-UDP -p udp --dport 54672 -j ACCEPT

iptables -I INPUT -i eth0 -s 127.0.0.0/8 -j DROP

/etc/rc.d/iptables save
/etc/rc.d/iptables start

iptables -L;

exit 0;
Logged

gav616

  • Guest
Re: SVN - Firewalled after X days uptime
« Reply #10 on: April 14, 2010, 04:19:18 PM »

I tried ED2K and KAD simultaneously with no luck, even less time elapses until the firewalled status.



The things that are puzzling me are;
How can 'Connection State' be firewalled if 'Ed2K' is in 'HighID', TCP port 54662 must be open
Why  does a buddy connection need to be made if UDP is 'OK', buddy should be dropped and KAD HighID.
When i disconnect/reconnect KAD,, I get a 'No buddy required UDP is open'. Then KAD is HighID again (green).
« Last Edit: April 14, 2010, 04:31:30 PM by gav616 »
Logged

gav616

  • Guest
Re: SVN - Firewalled after X days uptime
« Reply #11 on: April 20, 2010, 01:48:29 PM »

Hi, could this be part of my issue? It does sound very like my problem, because reconnecting Kad fixes it (writes the nodes for usage..)

http://forum.emule-project.net/index.php?showtopic=147626

(Sorry my source-code knowledge is limited, this could all be a random coincidence with the mules and my problem)
Logged

GonoszTopi

  • The current man in charge of most things.
  • Administrator
  • Hero Member
  • *****
  • Karma: 169
  • Offline Offline
  • Posts: 2685
Re: SVN - Firewalled after X days uptime
« Reply #12 on: April 20, 2010, 04:40:01 PM »

Nope, that has been fixed in 2.2.1.
Logged
concordia cum veritate

gav616

  • Guest
Re: SVN - Firewalled after X days uptime
« Reply #13 on: July 14, 2010, 06:54:10 PM »

could it be to do with, I block all echo requests through my kernel?

or doesn't this matter beacuse I've opened the relevant ports anyway...
Logged

Stu Redman

  • Administrator
  • Hero Member
  • *****
  • Karma: 214
  • Offline Offline
  • Posts: 3739
  • Engines screaming
Re: SVN - Firewalled after X days uptime
« Reply #14 on: July 14, 2010, 10:29:48 PM »

I had the same problem in Windows, so probably not.
Logged
The image of mother goddess, lying dormant in the eyes of the dead, the sheaf of the corn is broken, end the harvest, throw the dead on the pyre -- Iron Maiden, Isle of Avalon
Pages: [1] 2 3