aMule Forum

Please login or register.

Login with username, password and session length
Advanced search  

News:

We're back! (IN POG FORM)

Author Topic: two security related questions  (Read 3068 times)

mandrake

  • Newbie
  • Karma: 0
  • Offline Offline
  • Posts: 3
two security related questions
« on: December 29, 2004, 02:56:14 PM »

First of all: AMULE is a GEM !

Now a couple of questions.

1) What is UDP port+3 used for I currently have that filtered and AMULE looks in perfect shape (connects happily with an high ID) ?

2) What can I use as an URL to auto update the ipfilter.dat list ? And related to this how can I be absolutely sure that I have the banned IPs loaded ? Looked for a number in the statistic and everywhere else but could not find it. Also, once loaded do the ipfilter.dat data loaded every time I start amule ??? This is very important since in my country some idiotic law is enabling police to seize all of your equipment just because you are sharing something with P2P protocols (and after MANY years if you did not do anything illegal they will return your hardware wich will be totally obsolete)  X( X( X(

Thank you,
Sammy
Logged
Magic Mandrake

Supersnail

  • Full Member
  • ***
  • Karma: 4
  • Offline Offline
  • Posts: 186
Re: two security related questions
« Reply #1 on: December 29, 2004, 04:01:46 PM »

1) The ports used be eMule (and aMule) can be found at http://www.emule-project.net/home/perl/help.cgi?l=1&rm=show_topic&topic_id=122
UDP +3 seems to be this one:
Quote
6)     Local Port:     any
     Remote Port:    4665
     Protocol:    UDP
     Direction:    outgoing
     Purpose:    Source asking on servers
     Note:    

Servers using the default port 4661 TCP (see #5) automatically set their port for source asking to 4665 UDP. If a server uses a different port in #5 the corresponding UDP port is set to [Connection Port + 4]. For firewalls the remote port here is any.

2) I always download my ipfilter.dat from http://www2.openmedia.info:8080/p27.html . They updated it regularly (about once a week), but the server is pretty slow and you first have to unzip the file. So, I don't use the auto-update feature.
The ipfilter is loaded everytime aMule starts. It can be found on the 'aMule log' tab in the 'Servers' tab.
Quote
Loaded ipfilter with 41461 new IP addresses.
« Last Edit: December 29, 2004, 04:02:56 PM by Supersnail »
Logged

Kry

  • Ex-developer
  • Retired admin
  • Hero Member
  • *****
  • Karma: -665
  • Offline Offline
  • Posts: 5795
Re: two security related questions
« Reply #2 on: December 29, 2004, 05:56:16 PM »

Don't get confused: TCP+3 is the UDP socket on aMule, TCP+4 is on the server. So communication is from aMule's TCP+3  to server's TCP+4
Logged

mandrake

  • Newbie
  • Karma: 0
  • Offline Offline
  • Posts: 3
Re: two security related questions
« Reply #3 on: December 29, 2004, 06:19:07 PM »

Thank you !

so given that my firewall grants any outbound connection, for the incoming connections I just have to open the TCP and UDP ports which I explicitely declare in aMule config (in my case 63572 for both).

Correct ?

Take care,
Sammy
Logged
Magic Mandrake

Kry

  • Ex-developer
  • Retired admin
  • Hero Member
  • *****
  • Karma: -665
  • Offline Offline
  • Posts: 5795
Re: two security related questions
« Reply #4 on: December 29, 2004, 06:28:32 PM »

no, you need to open TCP+3 also (UDP)
Logged

mandrake

  • Newbie
  • Karma: 0
  • Offline Offline
  • Posts: 3
Re: two security related questions
« Reply #5 on: December 30, 2004, 11:05:10 AM »

Please be patient sinc eEnglish is anhostile language for me :)

In your earlier append you said the communication goes from amule+3 to server+4.

This would be already granted since I permit any OUTBOUND packet to happen and any related response (for TCP).

I should build a rule to accept new packets on port+3 only if they are new packets coming from the server with source whatever and dest my machine amule-port+3.

Is this what you mean ?

I am asking since amule seems working very well without this port open.

Take care and happy new year.
Logged
Magic Mandrake