Article View: alt.pl.comp.os.linux.newbie
Article #138867rTorrent+iptables
From: skandal
Date: Fri, 11 Feb 2011 07:34
Date: Fri, 11 Feb 2011 07:34
175 lines
6393 bytes
6393 bytes
Witam. Problem jest taki. Mam od bardzo dawna skonfigurowanego rtorrenta. Wcześniej, gdy klient torrenta stał za NATem, a przekierowanie portu było na routerze, wszystko było z pobieraniem i wysyłaniem ok. Dziś pierwszy raz od dawien dawna użyłem torrenta, a już na pewno pierwszy raz odkąd klient torrent stanął w DMZ i jest na nim postawiony iptables. No i wszystko ładnie się ściąga, ale już rzadko kiedy się wrzuca, a jak się wrzuca to marnie. Pytanie moje, czy te wpisy w iptables są dobre, a jak nie to jak je zrobić? Poniżej konfiguracje... Konfiguracja iptables: IP="iptables" ############# #CZYSZCZENIE# ############# $IP -F INPUT $IP -F OUTPUT $IP -F FORWARD ##################### #POLITYKA POCZATKOWA# ##################### $IP -P INPUT ACCEPT $IP -P OUTPUT ACCEPT $IP -P FORWARD ACCEPT $IP -P INPUT DROP $IP -P OUTPUT ACCEPT $IP -P FORWARD DROP ####### #INPUT# ####### $IP -A INPUT -p tcp --dport 6882:6890 -j ACCEPT #rTorrent TCP $IP -A INPUT -p udp --dport 6882:6890 -j ACCEPT #rTorrent UDP $IP -A INPIT -p udp --dport 6881 -j ACCEPT #rTorrent DHT -- Konfiguracja rTorrent: # This is an example resource file for rTorrent. Copy to # ~/.rtorrent.rc and enable/modify the options as needed. Remember to # uncomment the options you wish to enable. # Maximum and minimum number of peers to connect to per torrent. # min_peers = 40 # max_peers = 200 # Same as above but for seeding completed torrents (-1 = same as downloading) # min_peers_seed = 10 # max_peers_seed = 50 # Maximum number of simultanious uploads per torrent. # max_uploads =15 # Tu ustawiamy prdko wysyania (upload) i pobierania (download) 0=bez ogranicze # Zalecana prdko uploadu to 75% maksymalnej prdkoci cza download_rate = 0 upload_rate = 224 # Domylny katalog do zapisu pobranych plikw: directory = /home/andrzej/rtorrent/pobrane # Katalog gdzie zapisywana bdzie sesja session = /home/andrzej/.session # Przeszukiwanie danego katalogu na obecno torrentw do pobrania # Zatrzymywanie gdy torrent (plik ziarna) zostanie usuniety (nie sprawdzone - zahaszowane) schedule = watch_directory,5,5,load_start=/home/andrzej/rtorrent/ zrodla/*.torrent # schedule = untied_directory,5,5,stop_untied=/home/andrzej/rtorrent/ zrodla/*.torrent # Close torrents when diskspace is low. # schedule = low_diskspace,5,60,close_low_diskspace=100M # Stop torrents when reaching upload ratio in percent, # when also reaching total upload in bytes, or when # reaching final upload ratio in percent. # example: stop at ratio 2.0 with at least 200 MB uploaded, or else ratio 20.0 # schedule = ratio,60,60,stop_on_ratio=200,200M,2000 # The ip address reported to the tracker. # ip = 127.0.0.1 # ip = rakshasa.no # The ip address the listening socket and outgoing connections is # bound to. # bind = 127.0.0.1 # bind = rakshasa.no # Port range to use for listening. port_range = 6882-6890 # Start opening ports at a random position within the port range. port_random = yes # Check hash for finished torrents. Might be usefull until the bug is # fixed that causes lack of diskspace not to be properly reported. check_hash = yes # Set whetever the client should try to connect to UDP trackers. use_udp_trackers = yes # Alternative calls to bind and ip that should handle dynamic ip's. # schedule = ip_tick,0,1800,ip=rakshasa # schedule = bind_tick,0,1800,bind=rakshasa # Encryption options, set to none (default) or any combination of the following: # allow_incoming, try_outgoing, require, require_RC4, enable_retry, prefer_plaintext # # The example value allows incoming encrypted connections, starts unencrypted # outgoing connections but retries with encryption if they fail, preferring # plaintext to RC4 encryption after the encrypted handshake # # encryption = allow_incoming,enable_retry,prefer_plaintext # # Do not modify the following parameters unless you know what you're doing. # # Hash read-ahead controls how many MB to request the kernel to read # ahead. If the value is too low the disk may not be fully utilized, # while if too high the kernel might not be able to keep the read # pages in memory thus end up trashing. # hash_read_ahead = 10 # Interval between attempts to check the hash, in milliseconds. # hash_interval = 100 # Number of attempts to check the hash while using the mincore status, # before forcing. Overworked systems might need lower values to get a # decent hash checking rate. # hash_max_tries = 10 # Max number of files to keep open simultaniously. # max_open_files = 128 # Number of sockets to simultaneously keep open. # max_open_sockets = <no default> # Example of scheduling commands: Switch between two ip's every 5 # seconds. # schedule = "ip_tick1,5,10,ip=torretta" # schedule = "ip_tick2,10,10,ip=lampedusa" # Remove a scheduled event. # schedule_remove = "ip_tick1" # scgi_port=127.0.0.1:5000 # UDP port to use for DHT. dht_port = 6881 -- Pozdrawiam, Andrzej Krawczyk
Technical Details
Message-ID:
<972f9423-ae03-4720-84a1-cfa88d088947@u3g2000vbe.googlegroups.com>Path:
mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.rmf.pl!nf1.ipartners.pl!ipartners.pl!plix.pl!newsfeed1.plix.pl!news-out2.kabelfoon.nl!newsfeed.kabelfoon.nl!bandi.nntp.kabelfoon.nl!198.186.194.249.MISMATCH!transit3.readnews.com!news-out.readnews.com!news-xxxfer.readnews.com!postnews.google.com!u3g2000vbe.googlegroups.com!not-for-mailShow Full Headers
Complete Article Headers
Path: mbox-mo1.pugleaf.net!news-archive.icm.edu.pl!news.rmf.pl!nf1.ipartners.pl!ipartners.pl!plix.pl!newsfeed1.plix.pl!news-out2.kabelfoon.nl!newsfeed.kabelfoon.nl!bandi.nntp.kabelfoon.nl!198.186.194.249.MISMATCH!transit3.readnews.com!news-out.readnews.com!news-xxxfer.readnews.com!postnews.google.com!u3g2000vbe.googlegroups.com!not-for-mail From: skandal <a.r.krawczyk@gmail.com> Newsgroups: alt.pl.comp.os.linux.newbie Subject: rTorrent+iptables Date: Thu, 10 Feb 2011 23:34:53 -0800 (PST) Organization: http://groups.google.com Lines: 177 Message-ID: <972f9423-ae03-4720-84a1-cfa88d088947@u3g2000vbe.googlegroups.com> NNTP-Posting-Host: 87.199.19.18 Mime-Version: 1.0 X-Trace: posting.google.com 1297409693 31074 127.0.0.1 (11 Feb 2011 07:34:53 GMT) X-Complaints-To: groups-abuse@google.com NNTP-Posting-Date: Fri, 11 Feb 2011 07:34:53 +0000 (UTC) Complaints-To: groups-abuse@google.com Injection-Info: u3g2000vbe.googlegroups.com; posting-host=87.199.19.18; posting-account=cSUBuwoAAAA-06fZaj2b5pWIiWfL4xSs User-Agent: G2/1.0 X-HTTP-UserAgent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.13 (KHTML, like Gecko) Chrome/9.0.597.94 Safari/534.13,gzip(gfe) Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit