Set Port on Passive

xfernal · Post by **xfernal** » 2003-03-15 19:04

I really need to be able to set the port to be used on passive. Our company has a firewall and if I could set the port number, rather than random, it would be easy to configure the firewall to allow for that port number. Instead, we see tons of log entries for the random port numbers coming from DC++. I understand why it is set to random, but there really should be an option like there are for Active setting.

Post by **GargoyleMT** » 2003-03-15 19:13

I believe you have something mixed up. In passive mode, DC++ does not listen to any ports (it does [but that's a misfeature], it just doesn't advertise it, and only issues commands to connect outward through your firewall). Only in Active mode does DC++ use the IP address and port in the settings.

So you see requests originating from outside the firewall to the machine running DC++ and presumably to the IP that it's using at the time. What kind of traffic is it, TCP or UDP? It sounds more like a bug, either on the local client or the remote ones.

xfernal · Post by **xfernal** » 2003-03-18 20:10

You wrote: "DC++ does not listen to any ports " ...I am talking about outbound traffic, not listening ports.
For example:
Source: 192.168.0.26
Destination: 80.195.131.19
Port: 31720

Source: 192.168.0.26
Destination: 81.49.80.102
Port: 23279

Source: 192.168.0.26
Destination: 66.136.201.65
Port: 1412

Etc.

If I try to grab a list from someone I see random ports for OUTBOUND TCP traffic:
23695
31613
31332
4180
25000

This is not good! There needs to be a way to specify which port for outbound TCP traffic so we can lockdown OUTBOUND traffic on the firewall.

Post by **GargoyleMT** » 2003-03-19 01:16

Ah, sorry, I didn't realize that you were talking about the source port. Yes, I have no idea how to accomplish this. File an RFE on the sourceforge page? (WinSock just ain't my thing... yet).

Sedulus · Post by **Sedulus** » 2003-03-19 01:53

nono, he does mean destport,
but he wants a
$xRevCTM <myNick> <yourNick> <yourPort>|

xfernal,
what you're asking is not only not currently possible, but also it's totally unfair.
why should _you_ have all ports locked, and the guy you're leeching from _all listening ports_ available?
nah.. doesn't sound quite right.

xfernal · Post by **xfernal** » 2003-03-19 04:09

GargoyleMT & Sedulus,
I can believe that it MIGHT not be possible to do but I would like to note that it is a firewall nightmare to have it using random ports. I work in the IT department as a Web Developer so I have some say so on what ports should be open but our company is cracking down on "file-sharing" programs and one that uses random ports will be a big problem. I think this will be an issue that will be brought up again and again as companies become more secure with their networks and begin locking down OUTBOUND traffic as well as inbound.

Off topic question:
Any chance of protocol association for DC++ during setup? Meaning, Direct Connect Protocol and DC++ as default program? I know I can go to Windows Explorer>Tools>Folder Option>File Tyes>URL - Direct Connect Protocol and associate DC++ to be the default program. It would be nice if setup/installation did this for me. Seems like just a registry setting change. I run a website that has account registration/login, and wrote a script to sync the accounts in my SQL Server to update the Hubs registered user list. I would love to tell newbies to simply download the program/install/config and click on the link/anchor tag that points to dhcp://mydomain.com. I already have scripts that show who is in the hub/how much shared on the website and would really like to integrate the hub and website even more. Just and idea...

Sedulus,
If it makes you fell any better, I do not consider myself a leech. I run a website and SHN-Trading hub that has been running since 2001 and I leave my DC++ running all the time. I rarely download anything anymore from my home computer due to the amount of traffic I receive on the website and hub (shhh don't tell my ISP ;-)

). I feel that it is only fair for me to take advantage of my companies very fast/low usage connection to download SHN files at great speeds to add to my collection while I am coding away on the latest project. As much time I have spent on the website and hub, I have had no complaints from anyone allowing me to download from them and in fact they frequently offer their slots to me as a token of appreciation. So in all fairness it seems logical for me to take advantage of 100 - 200k upload speeds ;-)

Anyway, thanks for your responses guys!

Post by **GargoyleMT** » 2003-03-19 12:53

Well, if you really want to be able to specify the port you connect to on a remote computer, there's just no way to do it with the current DC protocol. And I would be surprised if we could extend the $ReverseConnectToMe syntax and have the hub software merrily pass it along to another client.

On an aside, have you seen the trouble in the forums with people configuring their firewalls and port forwarding appropriately? If the downloader was able to suggest what port they want to come in on (with no veto power by the uploader), the current system would likely suffer quite a bit... At least those people who are behind NAT'ing boxes.

The solution is to bribe the firewall admin and turn on inbound TCP/UDP access on some arbitrary port for your machine so you can run it in active mode. Or, at least, that's a more workable solution IMHO. But I'm just a one man IT department, so whatever.

xfernal · Post by **xfernal** » 2003-03-26 17:42

Is there a finite list of ports that DC++ uses as random? Meaning, does DC++ use a list of ports to use as random for listening? If so I could config the firewall to allow outbound packets to the other client on any of the "listed" random ports, or is it completely random meaning any possible combination, excluding known ports like port 80? Just trying to figure out other ways to limit the amount of outbound traffic without opening everything up.

Sedulus · Post by **Sedulus** » 2003-03-26 22:01

to prove my goodwill =)

Code: Select all

setDefault(IN_PORT, Util::rand(1025, 32000));

but this doesn't mean that individuals can't set their own port. for instance 80. (this has been known to cause problems with transparent http-proxies though)

one option would be to use _one_ active port for yourself and reply with a CTM on every CTM. but if both parties do this, this would result in the same situation as passives trying to connect to eachother.

DC++

Set Port on Passive

Set Port on Passive

Re: Set Port on Passive

Who is online