Re: pf and bittorrent

Dave wrote:
Hello,
I've got an obsd pf gateway. Behind it is a centos5 client that i want to be able to use bittorrent. I've added rules to my pf.conf redirecting incoming bittorrent ports 6881 through 6999 to the centos box, and allowing outgoing traffic, yet i get no downloads, and errors when trying to connect to the trackerless server or something like that. Does anyone have this working?

I see you are discussing this else-thread, but for reference, here are the germane parts of my pf.conf for BitTorrent:

BitTorrent="50001"

# BitTorrent
rdr on $ext_if inet proto { udp, tcp } from any to $ext_if port $BitTorrent -> ($int_if:network) port $BitTorrent

# Allow BitTorrent traffic, and shortcut the rest of the rules
pass in quick on $ext_if inet proto { tcp, udp } from any to any port $BitTorrent

I'm not sure if this is ideal or not, but it works. In the past I had to redirect to specific internal hosts, but the wildcarding seem to work ok. Note I changed the BitTorrent port to 50001. I found I did not seem to need a range. I'm probably not letting myself connect to as many peers, but (as I said) this works Good Enough for me.

--
clvrmnky <mailto:spamtrap@xxxxxxxxxxxxxxxx>

Direct replies will be blacklisted. Replace "spamtrap" with my name to
contact me directly.
.

Relevant Pages

  • Re: BitTorrent not slow, but users are clueless
    ... router that's doing NAT, the router has no protocol helper for ... BitTorrent and does not forward the BitTorrent ports to the correct ... Saying "BitTorrent sucks" has a pretty high probability of being ...
    (Fedora)
  • Re: pf and bittorrent
    ... I'd prefer to use the standard ports, ... I've added the rules, which bittorrent client ... Direct replies will be blacklisted. ...
    (comp.unix.bsd.openbsd.misc)