azureus + shorewall =

[newmario]

Hi,

with shorewall started i've always get a "ConnectException:Connection refused" from the trackers, but the NAT is ok (green). with shorewall stopped i can connect to the trackers:

my shorewall config:

ACCEPT fw net tcp 80 #http
ACCEPT fw net udp 80 #http
ACCEPT fw net tcp 443 #https
ACCEPT fw net udp 443 #https
ACCEPT fw net tcp 21 #ftp
ACCEPT fw net tcp 53 #DNS
ACCEPT fw net udp 53 #DNS
ACCEPT fw net tcp 110 #unsecure Pop3
ACCEPT fw net tcp 995 #Secure Pop3
ACCEPT fw net tcp 873 #rsync
ACCEPT fw net tcp 25 #unsecure SMTP
ACCEPT fw net tcp 465 #SMTP over SSL
ACCEPT fw net tcp 5190 #AIM/ICQ
DROP net fw tcp 23 #TELNET - wir erlauben es einfach nicht

ACCEPT fw net tcp 6112 #Azureus
ACCEPT fw net udp 6112 #Azureus



i'am using port 6112 in azureus.

maybe someone can help me.


p.s: azureus log for the example torrent:

[11:04:53.981] {tracker} Tracker Announcer Created using url : [[http://tracker.bitreactor.to:2710/announce]]; | Torrent: 'www.bitreactor.to_Die.Simpsons.S17E18.Drei.nasse.Geschichten.German.SATRip.XviD-c0nFuSed'
[11:04:53.982] {tracker} TRTrackerClient: imported 37 cached peers; | Torrent: 'www.bitreactor.to_Die.Simpsons.S17E18.Drei.nasse.Geschichten.German.SATRip.XviD-c0nFuSed'
[11:04:54.011] {disk} Saving state for download 'www.bitreactor.to_Die.Simpsons.S17E18.Drei.nasse.Geschichten.German.SATRip.XviD-c0nFuSed'; | Torrent: 'www.bitreactor.to_Die.Simpsons.S17E18.Drei.nasse.Geschichten.German.SATRip.XviD-c0nFuSed'
[11:04:54.089] {disk} valid=true,not done=719,done=0,started=0,recheck=0,rc all=false,full=false; | TorrentDM: 'www.bitreactor.to_Die.Simpsons.S17E18.Drei.nasse.Geschichten.German.SATRip.XviD-c0nFuSed'
[11:04:54.090] {disk} Saving state for download 'www.bitreactor.to_Die.Simpsons.S17E18.Drei.nasse.Geschichten.German.SATRip.XviD-c0nFuSed'; | Torrent: 'www.bitreactor.to_Die.Simpsons.S17E18.Drei.nasse.Geschichten.German.SATRip.XviD-c0nFuSed'
[11:04:54.549] {tracker} Forcing tracker announce now via TRTrackerBTAnnouncerImpl::update::544,DownloadManagerImpl::informStarted::2494,DownloadManagerController::startDownload::433; | Torrent: 'www.bitreactor.to_Die.Simpsons.S17E18.Drei.nasse.Geschichten.German.SATRip.XviD-c0nFuSed'
[11:04:54.572] {tracker} Tracker Announcer is sending a start Request; | Torrent: 'www.bitreactor.to_Die.Simpsons.S17E18.Drei.nasse.Geschichten.German.SATRip.XviD-c0nFuSed'
[11:04:54.578] {tracker} Tracker Announcer is Requesting: http://tracker.bitreactor.to:2710/announce?info_hash=%5C%E4F%09%8C8%0FL%87%93QY%AF%14%A7%E2%F5%FDb%CD&peer_id=-AZ2504-brk80QwGsVYq&supportcrypto=1&port=6112&azudp=6112&uploaded=0&downloaded=0&left=188297257&event=started&numwant=100&no_peer_id=1&compact=1&key=SpKRxsgp&azver=3; | Torrent: 'www.bitreactor.to_Die.Simpsons.S17E18.Drei.nasse.Geschichten.German.SATRip.XviD-c0nFuSed'
[11:04:54.631] {tracker} Exception while processing the Tracker Request : ConnectException:Connection refused; | Torrent: 'www.bitreactor.to_Die.Simpsons.S17E18.Drei.nasse.Geschichten.German.SATRip.XviD-c0nFuSed'

[embobo]

It is trying to connect to tracker.bitreactor.to port 2710 and shorewall is denying it.

[newmario]

but why ?


my rules file is ok i think.

[newmario]

Jun 26 16:08:22 localhost Shorewall:all2all:REJECT:IN= OUT=eth1 SRC=10.0.0.1 DST=72.36.195.170 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=18404 DF PROTO=TCP SPT=42787 DPT=6969 WINDOW=5840 RES=0x00 SYN URGP=0
Jun 26 16:08:23 localhost Shorewall:all2all:REJECT:IN= OUT=eth1 SRC=10.0.0.1 DST=72.36.195.173 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=7654 DF PROTO=TCP SPT=43686 DPT=6841 WINDOW=5840 RES=0x00 SYN URGP=0
Jun 26 16:08:42 localhost Shorewall:all2all:REJECT:IN= OUT=eth1 SRC=10.0.0.1 DST=72.36.195.170 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=35829 DF PROTO=TCP SPT=42790 DPT=6969 WINDOW=5840 RES=0x00 SYN URGP=0
Jun 26 16:08:43 localhost Shorewall:all2all:REJECT:IN= OUT=eth1 SRC=10.0.0.1 DST=72.36.195.173 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=36155 DF PROTO=TCP SPT=43689 DPT=6841 WINDOW=5840 RES=0x00 SYN URGP=0


here is my shorewall log, when i click on connect

[newmario]

solved.

i forgotten " FW net ACCEPT" in the policy file