Gtk-Gnutella On Mdk9.1 Behind HW NAT&IPTablesFW

fortezza · 07-23-2003, 07:15 PM

I am running gtk-gnutella 0.9.21on my Mdk 9.1 worstation behind my DSL Router ( which handle NAT )
and behind a transparent bridging firewall running Mdk 9.1 and IP Tables. The problem is that despite the fact that I can download fine and people are downloading from me, gtk-gnutella has that cute little firewall icon in the lower right corner of the screen and says "Gtk-gnutella thinks you're firewalled..." and subsequently blocks push requests from my computer. Anyhow, I have port 6346 and 6347 ( both tcp/udp protocols) forwarded to my gnutella system and I allowed all packets with destinations of both ports and both protocols through the firewall...the problem persists.

This post is part security, part network, and part software, but I think I scoured the net for examples of firewall scripts that enable gnutella clients and cannot find any that do more than I have done. Either I am missing something or the software is buggy.

Any ideas on what steps I can take to resolve this issue?

svv · 07-27-2003, 02:26 PM

The latest release changed the port number, with the command below you can allow access to port 7182 (on Redhat8), see iptables howto if you need more info. The simplest approach is to change all DENY into LOG and then see what you are refusing in the syslogd output.

iptables -I RH-Lokkit-0-50-INPUT 1 -p tcp -m tcp --dport 7182 -j ACCEPT

fortezza · 07-28-2003, 12:41 PM

Turns out that this morning after rebooting my Linux system for a hardware change, that I was having problems sending out email. After some troubleshooting, I discovered my IPTables was blocking incoming packets from my SMTP server. Anyhow, I turned off the workstation's firewall as my bridging firewall is processing all in/out packets allready, and not only was I able to send mail again, but the "gnutella has detected you are behind a firewall" icon disappeared and now I can send/recieve push requests.

Yes, I feel like an idiot for not doing more troubleshooting, but at least I know I need to edit my firewall script or just disable IP Tables all together. I mean, I really only need one firewall for my network, hehe.