I run Fedora 7. I'm trying to set up Azureus. My setup failed the NAT test. Does anyone see anything obvious that I've missed. (I have no experience with iptables).
The instructions I'm using say: 1. Pick a port between 49152 and 65534 (I picked 60112) 2. Update software firewall to accept TCP and UDP inputs to the selected port 3. Set up port-forwarding on router for TCP and UDP traffic to the selected port I performed the above steps and then ran the Azureus NAT test. The result was: NAT error - connect attempt to 71.169.52.50:60112 (your computer timed out after 20 seconds. This means your port is probably closed) Here is my iptables: [EMAIL PROTECTED] ~]# /sbin/iptables -L Chain INPUT (policy DROP) target prot opt source destination ACCEPT udp -- anywhere anywhere udp dpt:60112 ACCEPT tcp -- anywhere anywhere tcp dpt:60112 ACCEPT tcp -- dslrouter anywhere tcp flags:! FIN,SYN,RST,ACK/SYN ACCEPT udp -- dslrouter anywhere ACCEPT tcp -- dslrouter anywhere tcp flags:! FIN,SYN,RST,ACK/SYN ACCEPT udp -- dslrouter anywhere ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere limit: avg 10/sec burst 5 DROP all -- anywhere 255.255.255.255 DROP all -- anywhere 192.168.1.255 DROP all -- 255.255.255.255 anywhere DROP all -- anywhere localhost DROP all -- anywhere anywhere state INVALID LSI all -f anywhere anywhere limit: avg 10/min burst 5 INBOUND all -- anywhere anywhere LOG_FILTER all -- anywhere anywhere LOG all -- anywhere anywhere LOG level info prefix `Unknown Input' Chain FORWARD (policy DROP) target prot opt source destination ACCEPT icmp -- anywhere anywhere limit: avg 10/sec burst 5 LOG_FILTER all -- anywhere anywhere LOG all -- anywhere anywhere LOG level info prefix `Unknown Forward' Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT tcp -- alweiner.nowhere.invalid dslrouter tcp dpt:domain ACCEPT udp -- alweiner.nowhere.invalid dslrouter udp dpt:domain ACCEPT tcp -- alweiner.nowhere.invalid dslrouter tcp dpt:domain ACCEPT udp -- alweiner.nowhere.invalid dslrouter udp dpt:domain ACCEPT all -- anywhere anywhere DROP all -- 255.255.255.255 anywhere DROP all -- anywhere localhost DROP all -- anywhere anywhere state INVALID OUTBOUND all -- anywhere anywhere LOG_FILTER all -- anywhere anywhere LOG all -- anywhere anywhere LOG level info prefix `Unknown Output' Chain INBOUND (1 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT udp -- anywhere anywhere state RELATED,ESTABLISHED LSI all -- anywhere anywhere Chain LOG_FILTER (5 references) target prot opt source destination Chain LSI (2 references) target prot opt source destination LOG_FILTER all -- anywhere anywhere LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 1/sec burst 5 LOG level info prefix `Inbound ' DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5 LOG level info prefix `Inbound ' DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST LOG icmp -- anywhere anywhere icmp echo-request limit: avg 1/sec burst 5 LOG level info prefix `Inbound ' DROP icmp -- anywhere anywhere icmp echo-request LOG all -- anywhere anywhere limit: avg 5/sec burst 5 LOG level info prefix `Inbound ' DROP all -- anywhere anywhere Chain LSO (0 references) target prot opt source destination LOG_FILTER all -- anywhere anywhere LOG all -- anywhere anywhere limit: avg 5/sec burst 5 LOG level info prefix `Outbound ' REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain OUTBOUND (1 references) target prot opt source destination ACCEPT icmp -- anywhere anywhere ACCEPT tcp -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT udp -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere _______________________________________________ Mid-Hudson Valley Linux Users Group http://mhvlug.org http://mhvlug.org/cgi-bin/mailman/listinfo/mhvlug Upcoming Meetings (6pm - 8pm) MHVLS Auditorium Feb 6 - DBUS Mar 5 - Setting up a platform-independent home/small office network using Linux
