🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.pl.comp.os.linux.newbie
Article #138867

rTorrent+iptables

#138867
From: skandal
Date: Fri, 11 Feb 2011 07:34
175 lines
6393 bytes
Witam.

Problem jest taki. Mam od bardzo dawna skonfigurowanego rtorrenta.
Wcześniej, gdy klient torrenta stał za NATem, a przekierowanie portu
było na routerze, wszystko było z pobieraniem i wysyłaniem ok. Dziś
pierwszy raz od dawien dawna użyłem torrenta, a już na pewno pierwszy
raz odkąd klient torrent stanął w DMZ i jest na nim postawiony
iptables. No i wszystko ładnie się ściąga, ale już rzadko kiedy się
wrzuca, a jak się wrzuca to marnie.

Pytanie moje, czy te wpisy w iptables są dobre, a jak nie to jak je
zrobić? Poniżej konfiguracje...

Konfiguracja iptables:

IP="iptables"

#############
#CZYSZCZENIE#
#############

$IP -F INPUT
$IP -F OUTPUT
$IP -F FORWARD

#####################
#POLITYKA POCZATKOWA#
#####################

$IP -P INPUT ACCEPT
$IP -P OUTPUT ACCEPT
$IP -P FORWARD ACCEPT

$IP -P INPUT DROP
$IP -P OUTPUT ACCEPT
$IP -P FORWARD DROP

#######
#INPUT#
#######

$IP -A INPUT -p tcp --dport 6882:6890 -j ACCEPT #rTorrent TCP
$IP -A INPUT -p udp --dport 6882:6890 -j ACCEPT #rTorrent UDP
$IP -A INPIT -p udp --dport 6881 -j ACCEPT #rTorrent DHT

--
Konfiguracja rTorrent:

# This is an example resource file for rTorrent. Copy to
# ~/.rtorrent.rc and enable/modify the options as needed. Remember to
# uncomment the options you wish to enable.

# Maximum and minimum number of peers to connect to per torrent.
# min_peers = 40
# max_peers = 200

# Same as above but for seeding completed torrents (-1 = same as
downloading)
# min_peers_seed = 10
# max_peers_seed = 50

# Maximum number of simultanious uploads per torrent.
# max_uploads =15

# Tu ustawiamy prdko wysyania (upload) i pobierania (download)
0=bez ogranicze
# Zalecana prdko uploadu to 75% maksymalnej prdkoci cza
download_rate = 0
upload_rate = 224

# Domylny katalog do zapisu pobranych plikw:
directory = /home/andrzej/rtorrent/pobrane

# Katalog gdzie zapisywana bdzie sesja
session = /home/andrzej/.session

# Przeszukiwanie danego katalogu na obecno torrentw do pobrania
# Zatrzymywanie gdy torrent (plik ziarna) zostanie usuniety (nie
sprawdzone - zahaszowane)
schedule = watch_directory,5,5,load_start=/home/andrzej/rtorrent/
zrodla/*.torrent
# schedule = untied_directory,5,5,stop_untied=/home/andrzej/rtorrent/
zrodla/*.torrent

# Close torrents when diskspace is low.
# schedule = low_diskspace,5,60,close_low_diskspace=100M

# Stop torrents when reaching upload ratio in percent,
# when also reaching total upload in bytes, or when
# reaching final upload ratio in percent.
# example: stop at ratio 2.0 with at least 200 MB uploaded, or else
ratio 20.0
# schedule = ratio,60,60,stop_on_ratio=200,200M,2000

# The ip address reported to the tracker.
# ip = 127.0.0.1
# ip = rakshasa.no

# The ip address the listening socket and outgoing connections is
# bound to.
# bind = 127.0.0.1
# bind = rakshasa.no

# Port range to use for listening.
port_range = 6882-6890

# Start opening ports at a random position within the port range.
port_random = yes

# Check hash for finished torrents. Might be usefull until the bug is
# fixed that causes lack of diskspace not to be properly reported.
check_hash = yes

# Set whetever the client should try to connect to UDP trackers.
use_udp_trackers = yes

# Alternative calls to bind and ip that should handle dynamic ip's.
# schedule = ip_tick,0,1800,ip=rakshasa
# schedule = bind_tick,0,1800,bind=rakshasa

# Encryption options, set to none (default) or any combination of the
following:
# allow_incoming, try_outgoing, require, require_RC4, enable_retry,
prefer_plaintext
#
# The example value allows incoming encrypted connections, starts
unencrypted
# outgoing connections but retries with encryption if they fail,
preferring
# plaintext to RC4 encryption after the encrypted handshake
#
# encryption = allow_incoming,enable_retry,prefer_plaintext

#
# Do not modify the following parameters unless you know what you're
doing.
#

# Hash read-ahead controls how many MB to request the kernel to read
# ahead. If the value is too low the disk may not be fully utilized,
# while if too high the kernel might not be able to keep the read
# pages in memory thus end up trashing.
# hash_read_ahead = 10

# Interval between attempts to check the hash, in milliseconds.
# hash_interval = 100

# Number of attempts to check the hash while using the mincore status,
# before forcing. Overworked systems might need lower values to get a
# decent hash checking rate.
# hash_max_tries = 10

# Max number of files to keep open simultaniously.
# max_open_files = 128

# Number of sockets to simultaneously keep open.
# max_open_sockets = <no default>


# Example of scheduling commands: Switch between two ip's every 5
# seconds.
# schedule = "ip_tick1,5,10,ip=torretta"
# schedule = "ip_tick2,10,10,ip=lampedusa"

# Remove a scheduled event.
# schedule_remove = "ip_tick1"

# scgi_port=127.0.0.1:5000

# UDP port to use for DHT.
 dht_port = 6881

--
Pozdrawiam,
Andrzej Krawczyk
Technical Details
Message-ID: <972f9423-ae03-4720-84a1-cfa88d088947@u3g2000vbe.googlegroups.com>
Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.rmf.pl!nf1.ipartners.pl!ipartners.pl!plix.pl!newsfeed1.plix.pl!news-out2.kabelfoon.nl!newsfeed.kabelfoon.nl!bandi.nntp.kabelfoon.nl!198.186.194.249.MISMATCH!transit3.readnews.com!news-out.readnews.com!news-xxxfer.readnews.com!postnews.google.com!u3g2000vbe.googlegroups.com!not-for-mail

Show Full Headers
Complete Article Headers
Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.rmf.pl!nf1.ipartners.pl!ipartners.pl!plix.pl!newsfeed1.plix.pl!news-out2.kabelfoon.nl!newsfeed.kabelfoon.nl!bandi.nntp.kabelfoon.nl!198.186.194.249.MISMATCH!transit3.readnews.com!news-out.readnews.com!news-xxxfer.readnews.com!postnews.google.com!u3g2000vbe.googlegroups.com!not-for-mail
From: skandal <a.r.krawczyk@gmail.com>
Newsgroups: alt.pl.comp.os.linux.newbie
Subject: rTorrent+iptables
Date: Thu, 10 Feb 2011 23:34:53 -0800 (PST)
Organization: http://groups.google.com
Lines: 177
Message-ID: <972f9423-ae03-4720-84a1-cfa88d088947@u3g2000vbe.googlegroups.com>
NNTP-Posting-Host: 87.199.19.18
Mime-Version: 1.0
X-Trace: posting.google.com 1297409693 31074 127.0.0.1 (11 Feb 2011 07:34:53 GMT)
X-Complaints-To: groups-abuse@google.com
NNTP-Posting-Date: Fri, 11 Feb 2011 07:34:53 +0000 (UTC)
Complaints-To: groups-abuse@google.com
Injection-Info: u3g2000vbe.googlegroups.com; posting-host=87.199.19.18; posting-account=cSUBuwoAAAA-06fZaj2b5pWIiWfL4xSs
User-Agent: G2/1.0
X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13,gzip(gfe)
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit