Listening ports - vpn, proxy + p2p.

2007-10-15 Thread Aminuddin
Hi,
I'm running a large scale OpenVPN + proxy services on 6.2, mostly users are
those using P2P clients such as emule and bittorrent protocols.

Connections are made as follows:

Users  Openvpn(rl0)  Socks5 (tun0)  Internet (rl0)

Most of them have no problem in downloading or uploading but none of them
are able to get high ID for emule and connectable status in the bittorrent
trackers.

All servers are configured with Firewall_enable=NO and when I run netstat
it will shows so many ports are connected BUT nmap says none of the ports
are open.

How do I get FreeBSD open and listen to those connections so that P2P
clients can broadcast and listen using the proxy? With firewall off, all
ports should be open but still p2p clients keep saying ports firewalled.

TIA.



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Listening ports - vpn, proxy + p2p.

2007-10-15 Thread Norberto Meijome
On Mon, 15 Oct 2007 19:24:44 +0800
Aminuddin [EMAIL PROTECTED] wrote:

 How do I get FreeBSD open and listen to those connections so that P2P
 clients can broadcast and listen using the proxy? With firewall off, all
 ports should be open but still p2p clients keep saying ports firewalled.

are you doing nat? or actually providing REAL , routable IPs for your users? 

if you are doing NAT, the only thing you may be able to do is to port forward
specific ports to each client. That may not work for all clients - emule may be
different to, say, limewire.
B

_
{Beto|Norberto|Numard} Meijome

Never attribute to malice what can adequately be explained by incompetence.

I speak for myself, not my employer. Contents may be hot. Slippery when wet.
Reading disclaimers makes you go blind. Writing them is worse. You have been
Warned.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]