aMule Forum

Please login or register.

Login with username, password and session length
Advanced search  

News:

We're back! (IN POG FORM)

Author Topic: Low Id - Iptables question  (Read 4114 times)

Adent

  • Newbie
  • Karma: 0
  • Offline Offline
  • Posts: 4
Low Id - Iptables question
« on: December 12, 2004, 11:24:23 AM »

Hello all,

Before I start I wish to state 2 things :
1) I have just started using aMule and I am delighted with it! Well done team!
2) I have RTFM on Low ID and firewall configuration (but I am, I'm afraid a bit of a newbie...).

I am running aMule 2.0.0rc7 on RH Fedora Core 2.

My problem is that is that downloads are very slow and I am getting Low ID every time I connect.

Before I launch aMule I try to configure iptables (as root) and then check it - and get the following result:

[root@localhost sbin]# ./iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:4662
ACCEPT     udp  --  anywhere             anywhere            udp dpt:4665
ACCEPT     udp  --  anywhere             anywhere            udp dpt:4672
 
Chain FORWARD (policy ACCEPT).... etc...

So as far as I can see I have set the firewall correctly (?)

Despite this I still get Low ID.  Is there anything else I can do?

Incidentally - I have Downloads set to 90Kb/sec and Uploads set to 50Kb/sec and So far today I have had at least two uploads fly out, but I have received precisely 0 bytes of the files I was hoping to download

Any ideas?

Best Regards

ADent
Logged

GonoszTopi

  • The current man in charge of most things.
  • Administrator
  • Hero Member
  • *****
  • Karma: 169
  • Offline Offline
  • Posts: 2685
Re: Low Id - Iptables question
« Reply #1 on: December 12, 2004, 12:43:26 PM »

Khmm...
Quote
Originally posted by Adent
So as far as I can see I have set the firewall correctly (?)
No.

Code: [Select]
Chain INPUT (policy ACCEPT)
target prot opt source destination
RH-Firewall-1-INPUT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp dpt:4662
ACCEPT udp -- anywhere anywhere udp dpt:4665
ACCEPT udp -- anywhere anywhere udp dpt:4672

The three ACCEPT statements should appear before the firewall chain, because in this case these packets may get filtered out before the would be accepted.

So, instead of doing
Code: [Select]
# iptables -A INPUT you should
Code: [Select]
# iptables -I INPUT 1 to insert these rules before the firewall chain.
Logged
concordia cum veritate

Adent

  • Newbie
  • Karma: 0
  • Offline Offline
  • Posts: 4
Re: Low Id - Iptables question
« Reply #2 on: December 12, 2004, 03:25:50 PM »

Well thanks for trying...

I just did this:
Code: [Select]
[root@localhost adent]# /sbin/iptables -I INPUT 1 -p tcp --dport 4662 -j ACCEPT
[root@localhost adent]# /sbin/iptables -I INPUT 1 -p udp --dport 4665 -j ACCEPT
[root@localhost adent]# /sbin/iptables -I INPUT 1 -p udp --dport 4672 -j ACCEPT

and got this :
Code: [Select]
[root@localhost adent]# /sbin/iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             anywhere            udp dpt:4672
ACCEPT     udp  --  anywhere             anywhere            udp dpt:4665
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:4662
RH-Firewall-1-INPUT  all  --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:4662
ACCEPT     udp  --  anywhere             anywhere            udp dpt:4665
ACCEPT     udp  --  anywhere             anywhere            udp dpt:4672
 
Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
RH-Firewall-1-INPUT  all  --  anywhere             anywhere
 
Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
 
Chain RH-Firewall-1-INPUT (2 references)
target     prot opt source               destination
ACCEPT     udp  --  clock3.redhat.com    anywhere            udp spt:ntp dpt:ntp                                                                                
ACCEPT     udp  --  clock1.redhat.com    anywhere            udp spt:ntp dpt:ntp                                                                                
ACCEPT     udp  --  clock2.redhat.com    anywhere            udp spt:ntp dpt:ntp                                                                                
ACCEPT     udp  --  clock1.redhat.com    anywhere            udp spt:ntp dpt:ntp                                                                                
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere            icmp any
ACCEPT     ipv6-crypt--  anywhere             anywhere
ACCEPT     ipv6-auth--  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere            state RELATED,ESTABLISHED
REJECT     all  --  anywhere             anywhere            reject-with icmp-host-prohibited

BUT ...

I still get a Low ID (sigh...)

Now I know I didn't clear the previous entries, but the new ones are now before the firewall statement as you suggest.

Any other ideas?

Thanks again.

ADent
« Last Edit: December 12, 2004, 04:50:36 PM by Adent »
Logged

Jacobo221

  • Hero Member
  • *****
  • Karma: 3
  • Offline Offline
  • Posts: 2712
Re: Low Id - Iptables question
« Reply #3 on: December 12, 2004, 04:54:29 PM »

and in Preferences -> Connection you have the ports set to 4662, etc?

also, did you forward the ports in your router or external firewall too?
Logged

Adent

  • Newbie
  • Karma: 0
  • Offline Offline
  • Posts: 4
Re: Low Id - Iptables question
« Reply #4 on: December 12, 2004, 05:14:32 PM »

Quote
and in Preferences -> Connection you have the ports set to 4662, etc?

Yes.

Quote
also, did you forward the ports in your router or external firewall too?

er... What does that mean?

Oh wait! I think you may be on to something here. I do have a broadband router and when I look in the "access" section of the configuration there is a screen which allows me to add some rules.

It asks me for a "trigger protocol" (which I assume is TCP right?)
and a "port range" (which I guess is 4662 - 4665 ?)

an "incoming protocol" (UDP?)
and its port (4672 ?)

Have I got that right? As I said I am not exactly an expert at this...

I really appreciate your help.

Thanks

ADent
Logged

Jacobo221

  • Hero Member
  • *****
  • Karma: 3
  • Offline Offline
  • Posts: 2712
Re: Low Id - Iptables question
« Reply #5 on: December 12, 2004, 07:39:00 PM »

please check eMule forums (with an 'E' ;-) )

You'll find info about how to configure almost all typical routers there. You'll have to look which is your router's model.

Also refer to eMule's docs: http://www.emule-project.net/home/perl/help.cgi?l=1&rm=show_entries&cat_id=251

see if there you find the info about how to configure your router.

Each router is a different world. so there's no further help we can offer you. Read your router's docs ;)

Greetings!
Logged

Adent

  • Newbie
  • Karma: 0
  • Offline Offline
  • Posts: 4
Re: Low Id - Iptables question
« Reply #6 on: December 12, 2004, 09:36:56 PM »

Thanks Chaps!

With your help I think I have now got it sorted. Now when I connect I don't get any "Low ID" warning (I don't get a "High ID" message either but I guess that's normal).

I'm still not entirely happy however. I have at the moment about a dozen people uploading my files at anything between 1 and 15Kb/s and the file I'm trying to download (with c. 150 sources) is creeping in at the rate of 1.9 Kb/s, giving an estimated completion time of 2 Days and 4 hours....

sigh...

Everything else grinds along at a snail's pace too. I have looked at the FAQ and it basically says "you just have to experiment with the seetings...." or words to that effect.

I am running a cable modem that will normally download at around 90Kb/s. Any suggestions as to roughly where to start in order to optimise my download capability?

I am currently trying Download of 75 Kb/s and Upload of 30 Kb/s with Slot Allocation of 3 Kb/s

Thanks again

ADent
Logged

Jacobo221

  • Hero Member
  • *****
  • Karma: 3
  • Offline Offline
  • Posts: 2712
Re: Low Id - Iptables question
« Reply #7 on: December 12, 2004, 09:56:59 PM »

there's no more to say than that: "paly with connection settings" and also (ant that is in the wiki too) "reload your patience" ;-)

take a look at what credits are (in the FAQ too). the ed2k network is designed to prevent clients from leeching, so there's no way you can get better download speeds than what you get :-P Only way: Gain credits, set your preferences connections to whatever fits better to you.

what are the best settings yuo can get for your connection? you are the only one who can now. depends on connection type, ISP, modem/router/whatever, status of the lines, and so many other things...

Greetings!
Logged