LatestVersion: 0.50a | Community: 0.70a
 Deutsch English Français Hebrew Chinese Traditional Spanish Italian Polish Lithuanian Estonian Danish Swedish Dutch (Netherlands) Portuguese (Brazil) Czech Portuguese - Portuga Russian Catalan Turkish Finnish Romanian Greek Serbian Chinese Simplified 




Get eMule at SourceForge.net. Fast, secure and Free Open Source software downloads
Firewalled On Kad No More! HelpNAV

This entry is a user-made guide and not verified by any eMule developer, but is still a helpfull addition for most users. You you can find questions and comments on this topic in a dedicated thread on our forum.



Hi friends,

Let me share with you what I've learned from my successfully fighting "firewalled" status on the Kad network. As most folks reporting the problem do, I run eMule on a Windows host with a private IP, behind NAT.

Thank the Holy Mule, I'm the admin at my site, so I've been able to investigate the problem in detail. The story began as usual: I had opened needed ports on the WinXP host running eMule and forwarded the TCP and UDP ports from my border router to it, but yet my Kad status was "firewalled". To tease me further, it flipped to "open" and back once, when I was not touching my configuration at all. smile.gif At the same time I was getting High ID on Ed2k.

Later I found that mapping the private IP to a dedicated public IP instead of just forwarding the ports would give me "open" status on Kad instantly. Then I returned to port forwarding configuration and tcpdumped on the internal and external interfaces simultaneously. Imagine my surprise when I saw that my NAT still was translating the source port in UDP datagrams initiated by my eMule, i.e., sent not in responce to a UDP request from the remote node.

That is, port forwarding configuration, at least in some routers, doesn't work in the opposite direction. You may have to configure your NAT additionally for it to keep the UDP source port when your eMule tries to contact a node outside. Keeping the UDP port is crucial for Kad because info on your IP and port is spread over the whole network.

Example:

Assume your eMule host is 10.1.1.10 on your intranet and gets NAT'ed to 2.2.2.2 on the Internet. The UDP port initially is 4672.

When your eMule tries to contact a Kad node with IP 3.3.3.3, your NAT translates its IP 10.1.1.10 to IP 2.2.2.2 and port 4672 to port, say, 65000. As long as your NAT keeps the translation entry, node 3.3.3.3 can contact you back at port 65000, too. However, other Kad nodes that have learned about you from 3.3.3.3 will believe that your UDP port is 65000, not 4672. Undoubtedly, they will fail to contact you at this port because the translation entry is valid for IP 3.3.3.3 only.

The solution is to tell your NAT to keep the source port, usually 4672, in outgoing Kad "sessions" (NAT entries created from outgoing UDP datagrams.)

I use PF in *BSD. The configuration now is as follows:

nat on $extif proto udp from 10.1.1.10 port 4672 -> $realip port 4672
nat on $extif from 10.1.1.0/24 to any -> $realip
rdr pass on $extif proto tcp from any to $realip port 4662 -> 10.1.1.10 port 4662
rdr pass on $extif proto udp from any to $realip port 4672 -> 10.1.1.10 port 4672

The 1st line makes sure my Kad port still is 4672 on the outside. The 2nd line does general NAT. The 3rd and 4th lines do port forwarding for incoming Ed2k connections and Kad datagrams, respectively.

Of course, you will need to consult the manual for your router/NAT to find out how to set it up properly.

Hope this helps.

Translate this page Last Update: 23.11.2005 21:28
The GUI
The Preferences
FAQ
General Information
Ports, Firewalls & Router
Servers
Features
Troubleshooting
User Made Guides and FAQs
 
  Getting And Keeping Reliable Server List And Ipfilter
How To Recover Corrupt Downloads
How To Get A Reliable Server List & A Good Ipfilter
Setting Up Notification Encryption
Internet Worm Protection
Open/close Emule, At A Specified Time
Do You Want To Recover The List Of Servers?
Firewalled On Kad No More!
How To Avoid Fake Files
Emule And Internet Connection Sharing
Discover Fake Files Using Webservices And Preview
Ipfilter.dat And Guarding.p2p
How To Save "corrupt" Downloads!
Emule Tells Me I Have A Low-id!
Important Links Associated With Emule!
A4af - What Does It Mean?
Ed2k Links Are Not Added To Emule!
I Need A New Server.met File!
Why Is Emule Trying To Send An E-mail?
How To Clear Emule's Search History!
How To Install Or Update Your Emule!
Emule On Linux With Wine Mini-howto
Why Are My Downloads So Slow. (7/22/03)
Emule Options To Lower Cpu/resources. (7/25/03)
How To Filter Ips With Emule
Problematic Software List
  Beginner's Guide
Network Guide


Privacy Policy