Suse Firewall And Azureus, In Suse 10.2

[Red Knuckles]

I have trouble getting the Suse [10.2] firewall to work consistantly with Azureus. I follow these instructions to set up the firewall but the NAT connection only works sometimes:


http://www.azureuswiki.com/index.php/Good_settings
http://www.azureuswiki.com/index.php/NAT_problem
http://www.azureuswiki.com/index.php/Firewalling


Other times it gives the error:

NAT ERROR - connection to<my IP:my port> refused

When I get that error Azureus still downloads/uploads but downloads are much slower.
Any ideas on how to correct this???

[park_ridge_dave]

Hi:

Still a newbie myself,but maybe I can help.

What if any router are you using? (linksys etc.)

Model number?

Are you using a fixed IP? (easier I think)

I am using a Linksys 4 port router and it was quite easy to set up as a fixed IP address using the on screen functions via my firefox browser.

[Red Knuckles]

Hi:

Still a newbie myself,but maybe I can help.

What if any router are you using? (linksys etc.)

Model number?

Are you using a fixed IP? (easier I think)

I am using a Linksys 4 port router and it was quite easy to set up as a fixed IP address using the on screen functions via my firefox browser.

I'm currently using DHCP. I have the Davicom Tulip [using dmfe driver] Ethernet card, D-Link DM-201 cable modem, and a Motorola V-2442 phone router. The phone router does have an Azureus port forwarded for TCP and UDP. The port is also listed in 'Approved Services' in the Suse Firewall in the External and Internal Zones.

Thanks in advance for the help!

[park_ridge_dave]

I'm currently using DHCP. I have the Davicom Tulip [using dmfe driver] Ethernet card, D-Link DM-201 cable modem, and a Motorola V-2442 phone router. The phone router does have an Azureus port forwarded for TCP and UDP. The port is also listed in 'Approved Services' in the Suse Firewall in the External and Internal Zones.

Thanks in advance for the help!

Ok "Red"

I'm afraid I may have a little "bad" news. I think you must use a fixed IP address (or a MAC address assigned IP). Go to the Azureus web site and look at the Help file

http://www.azureuswiki.com/index.php/NAT_problem

From the Website:

Routers/Broadband modems
a) Devices without UPnP or NAT-PMP
you have to set your PC to a static IP (i.e. don't use DHCP) or use your router's MAC-address binding to allocate a specific IP to your network card
log into your router (if you don't know its address read the manual or determine the gateway address, which should be the address of your router)
Setup port forwarding by setting up rules to forward azureus' listening ports (UDP and TCP) as external port to the IP of your computer and the same port on your computer.

Note: The exact wording is different for each router, thus it might be called port forwarding, NAT rules, virtual server or

b) Devices with UPnP/NAT-PMP

I have a Linksys as I said, it was real easy to set up a block of 50 addresses for DHCP and I set up blocks of fixed addresses for printservers, wifi points, TIVOs, CD servers, and other network devices.

I am not familiar with your router, but, most of the new routers have the provision for fixed IP address and port forwarding. setup using your browser. The Linksys set itself up (UPNP), but at first I had DHCP and it would shut down all the time. Everytime it does that, your up/download speed starts all over at Zero (not good )

I believe that the DHCP re-assigns mine when it sees the PPPOE "refresh" so the packets get lost. Somebody more knowledgable than I could probably explain it better. I noticed that my UDP and TCP ports were being re-assigned to different IP addresses and that's why I changed it to fixed.

Anyway, I switched it to fixed IP (took 5 minutes) and it was great! just finished a Suse Linux 10.2 DVD down load, now I am providing upload bandwidth. It's like Earl (Tv show My Name Is Earl) says, "Karma can't be denied.... what goes around comes around" . I have to pay back for all the download BW.

Let me know if I can be of help. I could get a download of the phone modem manual and look it over if you think that would help. Mine was real easy to fix though.

Best of luck!

[Red Knuckles]

Ok "Red"

I'm afraid I may have a little "bad" news. I think you must use a fixed IP address (or a MAC address assigned IP). Go to the Azureus web site and look at the Help file

http://www.azureuswiki.com/index.php/NAT_problem

From the Website:

Routers/Broadband modems
a) Devices without UPnP or NAT-PMP
you have to set your PC to a static IP (i.e. don't use DHCP) or use your router's MAC-address binding to allocate a specific IP to your network card
log into your router (if you don't know its address read the manual or determine the gateway address, which should be the address of your router)
Setup port forwarding by setting up rules to forward azureus' listening ports (UDP and TCP) as external port to the IP of your computer and the same port on your computer.

Note: The exact wording is different for each router, thus it might be called port forwarding, NAT rules, virtual server or

b) Devices with UPnP/NAT-PMP

I have a Linksys as I said, it was real easy to set up a block of 50 addresses for DHCP and I set up blocks of fixed addresses for printservers, wifi points, TIVOs, CD servers, and other network devices.

I am not familiar with your router, but, most of the new routers have the provision for fixed IP address and port forwarding. setup using your browser. The Linksys set itself up (UPNP), but at first I had DHCP and it would shut down all the time. Everytime it does that, your up/download speed starts all over at Zero (not good )

I believe that the DHCP re-assigns mine when it sees the PPPOE "refresh" so the packets get lost. Somebody more knowledgable than I could probably explain it better. I noticed that my UDP and TCP ports were being re-assigned to different IP addresses and that's why I changed it to fixed.

Anyway, I switched it to fixed IP (took 5 minutes) and it was great! just finished a Suse Linux 10.2 DVD down load, now I am providing upload bandwidth. It's like Earl (Tv show My Name Is Earl) says, "Karma can't be denied.... what goes around comes around" . I have to pay back for all the download BW.

Let me know if I can be of help. I could get a download of the phone modem manual and look it over if you think that would help. Mine was real easy to fix though.

Best of luck!

Thanks Dave. Instead I installed Guarddog [easy] and Firestarter [not so easy] and both work quite fine with Azureus merely by opening up a port for Azureus.

The link for info to install Firestarter is here:

http://www.suseforums.net/index.php?showtopic=28388

[Red Knuckles]

I just got a post from Jim at:

http://forums.suselinuxsupport.de/in...p;#entry205923

I've been asking this question for a long time and no one mentioned that you have to add 'TCP' and 'UDP' to 'IP Protocols'. So I reopened the 'Yast>Security>Firewall>Advanced' gui to see if I was such a blithering idiot I missed it in the instructions. Here are the instructions:

Here, enter additional ports or protocols to enable in the firewall zone.
TCP Ports and UDP Ports can be entered as a list of port numbers, port names, or port ranges separated by spaces, such as 22, http, or 137:139.
RPC Ports is a list of RPC services, such as nlockmgr, ypbind, or portmap, separated by spaces.
IP Protocols is a list of protocols, such as esp, smp, or chaos, separated by spaces. Find the current list of protocols at http://www.iana.org/assignments/protocol-numbers.
Port Range is two numbers with a colon in between that represents all numbers inside the range including the numbers themselves. The first port number must be lower than the second one, for example, 200:215.

I didn't get out of that that I needed, in addition to listing port under 'TCP' and 'UDP', that I also needed to add 'TCP' and 'UDP' to 'IP Protocols'. Now I know and now Azureus appears to work fine with the Suse/Yast firewall. Thanks Jim.