Problems about CPF2 with P2P soft(eMule,Bitcomet) [SOLVED]

I use DHCP to connect internet by an ADSL modem.

eMule 0.47a
I use CPF in default rules , I only add a application control rule about eMule its:
emule.exe any any tcp/udp in/out allow

I think in this way when eMule running ,the TCP porst 4662 and UDP port 4672 should open, because eMule has unlimited connection. but when i use eMule to loggin the server it has the low id . next ,I turn off network monitor then I have High ID. Kad opened.
Kad Network
Status: Open

ok, I wroted another rules in network control rules its:
Allow IP In 62.241.53.2 Zone:my local network where ipproto is any

then I turn on network monitor ,I have HighID. but I have Kad problems always firewalled
Kad Network
Status: Firewalled

any idea? I found application rules dont have local port select ,so i only can change network rules,but I dont like to turn off it. anyone can help me writing a rules to solve this problem?

Bitcomet is a BT client. when i use it , i gave it unlimted conections, but its like eMule’s problem. I only can linking to other people from local, but people outside cannot link my computer from remote.

I see a rule in network monitor block all ip in , who have good idea about it?

Hi,

The default installation of CPF is designed to provide full invisibility to the outside world. This means nobody from the outside network will be able to contact with you unless :

1- You have initiated the connection so that the outside party sends a reply,
2- You explicitly allow some specific traffic,

P2P servers try to connect to your host without waiting for you to initiate the connection. Their behavior is exactly the same as if someone tries to connect to your PC. So case 1 is not applicable for P2P networking.

You need to configure the Network monitor for P2P networking. Usually, allowing the traffic to incoming TCP or UDP port will be sufficient. But to better understand what CPF is blocking, you need to do following :

1- Goto Security->Network Monitor
2- Double click on the last block rule i.e (BLOCK IP IN FROM IP ANY TO IP ANY WHERE IPPROTO IS ANY) the rule id = 1 if default configuration is maintained,
3- Select “Create an alert if this rule is fired” option to force CPF show you what it blocks.

after following these steps, you can run P2P application and see what CPF blocks. CPF will show you alerts in Activity->Logs section.

Then you need to add an allow rule for TCP/UDP ports that are being blocked. But remember to add these rules before the blocking rule(BLOCK IP IN FROM IP ANY TO IP ANY WHERE IPPROTO IS ANY). Because the network rules are searched from top to bottom.

Hope this helps.

Hi egemen thx for ur help!
I set network rules again, the problem solved. I will write all rules here when I have time.

Yes please do that,hopefully to help someone else in the future. :slight_smile:

eMule Network control rules

1 set eMule use TCP Port:4662,UDP Port:4672 in eMule
2 CPF–>Network Monitor Add 2 rules

[b]ALLOW TCP IN FROM IP [Any] TO IP 192.168.1.2 WHERE SOURCE PORT IS [Any] AND REMOTE PORT IS 4662

ALLOW UDP IN FROM IP [Any] TO IP 192.168.1.2 WHERE SOURCE PORT IS [Any] AND REMOTE PORT IS 4672[/b]

Dont use 192.168.1.2 Change it to ur IP

Bitcomet Network control rules

  1. Set ur Bitcomet or other BT client 's listening port. I set it 26215

  2. CPF–>Network Monitor Add 2 rules

[b]ALLOW TCP IN FROM IP [Any] TO IP 192.168.1.2 WHERE SOURCE PORT IS [Any] AND REMOTE PORT IS 26215

ALLOW UDP IN FROM IP [Any] TO IP 192.168.1.2 WHERE SOURCE PORT IS [Any] AND REMOTE PORT IS 26215[/b]

Dont use 192.168.1.2 Change it to ur IP

Remember to add these rules before the blocking rule(BLOCK IP IN FROM IP ANY TO IP ANY WHERE IPPROTO IS ANY). Because the network rules are searched from top to bottom.

Hopefully to help someone else in the future. :slight_smile:

Hopefully to help someone else in the future. Smiley

I’m sure it will.

Thanks for posting this,

Mike

THANKS i resolved my problem with low id (:WAV)

[b]ALLOW TCP IN FROM IP [Any] TO IP 192.168.1.2 WHERE SOURCE PORT IS [Any] AND REMOTE PORT IS 26215

ALLOW UDP IN FROM IP [Any] TO IP 192.168.1.2 WHERE SOURCE PORT IS [Any] AND REMOTE PORT IS 26215[/b]

Same rules worked fine for Azureus! Thanx…
Drammetje

(:CLP)

ALLOW TCP IN FROM IP [Any] TO IP 192.168.1.*** WHERE SOURCE PORT IS [Any] AND REMOTE PORT IS *****

ALLOW UDP IN FROM IP [Any] TO IP 192.168.1.*** WHERE SOURCE PORT IS [Any] AND REMOTE PORT IS *****

Excellent thread, still helping people get their Azureus config sorted!!! Thanks everyone!!!

I will lock this thread, so it wont be cluttered.