Problema con porte di emule

miko2003 · lun 06 nov , 2006 7:27 pm

Ecco la mia situazione senza la access-list:

Current configuration:                      
! 
version 12.0            
no service pad              
service timestamps debug uptime                               
service timestamps log uptime                             
service password-encryption                           
! 
hostname router               
! 
logging buffered 8192 debugging                               
enable secret 5 $1$Ea07$/rMSgutMCt3vcjY                                     
! 
username router password 7 141B071B03102E22                                           
! 
dial-peer voice 1 pots                      
 call-waiting             
 ring 0       
 port 1       
 destination-pattern 087256418                              
! 
pots country IT               
ip subnet-zero              
no ip source-route                  
! 
isdn switch-type basic-net3                           
! 
! 
! 
interface Ethernet0                   
 ip address 192.168.1.1 255.255.255.0                                     
 ip access-group 121 out                        
 no ip directed-broadcast                         
 no ip proxy-arp                
 ip nat inside              
! 
interface BRI0              
 no ip address              
 no ip directed-broadcast                         
 encapsulation ppp                  
 dialer pool-member 1                     
 isdn switch-type basic-net3                            
 isdn incoming-voice modem                          
 ppp authentication chap pap callin                                   
! 
interface Dialer1                 
 description ISP                
 ip address negotiated                      
 ip access-group 121 in                       
 no ip directed-broadcast                         
 no ip proxy-arp                
 ip nat outside               
 encapsulation ppp                  
 no ip split-horizon                    
 dialer remote-name Cisco1                          
 dialer idle-timeout 300                        
 dialer string 7022334455 class DialClass                                         
 dialer hold-queue 10                     
 dialer pool 1              
 dialer-group 1               
 pulse-time 0             
 ppp authentication chap pap callin                                   
 ppp chap hostname [email protected]                                               
 ppp chap password 7 151E1E1C0B3E2F2D                                     
 ppp pap sent-username [email protected] password 7 141B071B03102E22                                                                               
! 
ip nat inside source list 18 interface Dialer1 overload                                                       
ip nat inside source static tcp 192.168.1.10 4711 0.0.0.0 4711 extendable                                                                         
ip nat inside source static udp 192.168.1.10 4672 0.0.0.0 4672 extendable                                                                         
ip nat inside source static tcp 192.168.1.10 4662 0.0.0.0 4662 extendable                                                                         
ip classless            
ip route 0.0.0.0 0.0.0.0 Dialer1                                
! 
! 
map-class dialer DialClass
access-list 18 permit 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
!
line con 0
 exec-timeout 120 0
 transport input none
 stopbits 1
line vty 0 4
 exec-timeout 0 0
 login local
!
time-range TIME
 periodic daily 0:00 to 23:59
!
end

Le porte che devo aprire sono la 4662 TCP, 4672 UDP, 4711 TCP, l'indirizzo ip del mio pc è 192.168.1.10.
Grazie.

Giovino · lun 06 nov , 2006 8:18 pm

Mi aggiungo alla lista di chi ha problemi con emule.
Premetto che non ho idea di come si possa impostare un router.
Grazie a Fast Step riesco a connettermi a un canale, e per il momento mi basta. Vorrei impostare le porte per emule.... Ma non riesco.
Di seguito la mia configurazione.
Per fare le modifiche vado da fast step, modifico con il blocco note e poi carico la nuova configurazione.... Non so se è la procedura corretta.

Grazie

! Cisco IOS router configuration file
! Automatically made by Cisco Fast Step v2.5
! Designed for Cisco C803
! November 05, 2006
! Cisco Fast Step Template

no service udp-small-servers
no service tcp-small-servers
service password-encryption
hostname Cisco803
username Cisco803 password
enable secret
no ip source-route
isdn switch-type basic-net3

ip routing
ip classless
ip subnet-zero
service dhcp
ip dhcp pool DHCPPoolLAN_0
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
lease 1 0 0

interface ethernet 0
keepalive
no shutdown
ip address 192.168.1.1 255.255.255.0
ip route-cache
no ip proxy-arp
no ip directed-broadcast
ip nat inside
ip access-group 121 in

interface bri 0
encapsulation ppp
ppp authentication chap pap callin
no ppp multilink
isdn switch-type basic-net3
dialer pool-member 1
no shutdown

interface dialer 1
dialer remote-name Cisco1
dialer pool 1
no ip split-horizon
description ISP
encapsulation ppp
dialer idle-timeout 300
dialer hold-queue 10
dialer-group 1
dialer string 7020191191 class DialClass
ppp authentication chap pap callin
ppp chap hostname telecom
ppp chap password telecom
ppp pap sent-username telecom password telecom
no ppp multilink
ip address negotiated
ip route-cache
no ip proxy-arp
no ip directed-broadcast
ip nat outside
ip access-group 121 in

map-class dialer DialClass
no dialer isdn speed 56
dialer-list 1 protocol ip permit

no router rip
ip route 0.0.0.0 0.0.0.0 dialer 1
ip nat translation timeout 900
ip nat translation tcp-timeout 900
ip nat translation udp-timeout 600
ip nat translation finrst-timeout 300
ip nat translation syn-timeout 120
ip nat translation dns-timeout 300
ip nat translation icmp-timeout 120
ip nat translation max-entries 8192
ip nat inside source list 18 interface dialer 1 overload
ip nat inside source static tcp 192.168.1.2 4662 interface Dialer1 4662
ip nat inside source static udp 192.168.1.2 4672 interface Dialer1 4672
access-list 18 permit 192.168.1.0 0.0.0.255
access-list 121 deny udp any eq 138 any
access-list 121 deny udp any eq 137 any
access-list 121 deny udp any eq 139 any
access-list 121 deny tcp any eq 137 any
access-list 121 deny tcp any eq 138 any
access-list 121 deny tcp any eq 139 any
access-list 121 permit tcp any any eq 4662
access-list 121 permit udp any any eq 4672

access-list 121 permit ip any any time-range TIME
time-range TIME
periodic daily 00:00 to 23:59

line console 0
exec-timeout 120
line vty 0 4
exec-timeout 0
login local

end

donnamp3 · lun 06 nov , 2006 8:41 pm

fiuuu fatto....tolto tutto....smodatamente grata

me

miko2003 · mer 08 nov , 2006 12:52 pm

Qualcuno ora non è in grado di aiutarmi dopo che ho eliminato le access-list????
Ne ho molto bisogno grazie

TheIrish · mer 08 nov , 2006 1:08 pm

miko2003 ha scritto:Qualcuno ora non è in grado di aiutarmi dopo che ho eliminato le access-list????
Ne ho molto bisogno grazie

Comincio a pensare che mi prendi in giro.
IO HO DETTO: LEVA GLI ACCESS-GROUP
e guarda cosa trovo:

ip access-group 121 in

...

miko2003 · mer 08 nov , 2006 5:10 pm

Non è mia intenzione assolutamente prenderti in giro, anzi rispetto la tua pazienza.
Mi puoi indicare quale comando devo usare per eliminare gli access group?
E poi indicarmi i comandi per aprire quelle benedette porte????
Grazie.

!gabri! · mer 08 nov , 2006 5:43 pm

devi mettere un no davanti alla riga che vuoi eliminare.

quindi:

Codice: Seleziona tutto

en
conf t
int dialer 1
no ip access-group 121 in

miko2003 · ven 10 nov , 2006 3:09 pm

ok, questo comando l'ho inserito ed è andato a buon fine, ora posso sapere cosa devo fare per aprire le porte citate nel messaggio sopra???
Grazie

TheIrish · sab 11 nov , 2006 9:03 am

Voglio vedere la configurazione com'è adesso. Scusa la sfiducia, ma visto i precedenti...

miko2003 · mar 14 nov , 2006 7:19 pm

Questa è la situazione attuale del mio router:

Codice: Seleziona tutto

Current configuration:                      
! 
version 12.0            
no service pad              
service timestamps debug uptime                               
service timestamps log uptime                             
service password-encryption                           
! 
hostname router               
! 
logging buffered 8192 debugging                               
enable secret 5 $1$Ea07$/rMSgutMCt3vcjYpTgd0n/                                              
! 
username router password 7 141B071B03102E22                                           
! 
dial-peer voice 1 pots                      
 call-waiting             
 ring 0       
 port 1       
 destination-pattern 087256418                              
! 
pots country IT               
ip subnet-zero              
no ip source-route                  
! 
isdn switch-type basic-net3                           
! 
! 
! 
interface Ethernet0                   
 ip address 192.168.1.1 255.255.255.0                                     
 ip access-group 121 out                        
 no ip directed-broadcast                         
 no ip proxy-arp                
 ip nat inside              
! 
interface BRI0              
 no ip address              
 no ip directed-broadcast                         
 encapsulation ppp                  
 dialer pool-member 1                     
 isdn switch-type basic-net3                            
 isdn incoming-voice modem                          
 ppp authentication chap pap callin                                   
! 
interface Dialer1                 
 description ISP                
 ip address negotiated                      
 no ip directed-broadcast                         
 no ip proxy-arp                
 ip nat outside               
 encapsulation ppp                  
 no ip split-horizon                    
 dialer remote-name Cisco1                          
 dialer idle-timeout 300                        
 dialer string 7022334455 class DialClass                                         
 dialer hold-queue 10                     
 dialer pool 1              
 dialer-group 1               
 pulse-time 0             
 ppp authentication chap pap callin                                   
 ppp chap hostname [email protected]                                               
 ppp chap password 7 151E1E1C0B3E2F2D                                     
 ppp pap sent-username [email protected] password 7 141B071B03102E22                                                                               
! 
ip nat inside source list 18 interface Dialer1 overload                                                       
ip nat inside source static tcp 192.168.1.10 4711 0.0.0.0 4711 extendable                                                                         
ip nat inside source static udp 192.168.1.10 4672 0.0.0.0 4672 extendable                                                                         
ip nat inside source static tcp 192.168.1.10 4662 0.0.0.0 4662 extendable                                                                         
ip classless            
ip route 0.0.0.0 0.0.0.0 Dialer1                                
! 
! 
map-class dialer DialClass                          
access-list 18 permit 192.168.1.0 0.0.0.255                                           
dialer-list 1 protocol ip permit                                
!
line con 0
 exec-timeout 120 0
 transport input none
 stopbits 1
line vty 0 4
 exec-timeout 0 0
 login local
!
time-range TIME
 periodic daily 0:00 to 23:59
!
end

Grazie.

[Dj][DMX] · mar 14 nov , 2006 11:44 pm

miko2003 ha scritto:interface Ethernet0
ip address 192.168.1.1 255.255.255.0
ip access-group 121 out
no ip directed-broadcast
no ip proxy-arp
ip nat inside

Non so se l'hai notato ma qui c'è ancora un ip access-group 121 out, toglilo con il comando "no ip access-group 121 out".

Jackal84 · mer 15 nov , 2006 4:14 pm

Salve raga, leggendo il forum son riuscito a risolvere i problemi che avevo con amule e azureus.. ora però chiedo un vs parere sulla mia configurazione attuale... come sono messo come firewall? c'è qualcosa da modificare? grazie

Codice: Seleziona tutto

Building configuration...

Current configuration : 4294 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname 

logging queue-limit 100
no logging buffered
enable secret 5 $1$3TYC$SVgmK7wJSU7uHhn0UNi4k.
!
username CRWS_Santhosh privilege 15 password 7 09081F4D2E5411334F03552518013832627B415E44565006
username jackal password 7 06571573541D0A4D13
username CRWS_Venky privilege 15 password 7 114D484120430D2D40257A2B1B162523425F4551560E0E0E0702
username CRWS_Srini privilege 15 password 7 1453434F3B552C0A6027623A113617175253060B0C0B025C504E
clock timezone PCTime 1
clock summer-time PCTime date Mar 30 2003 2:00 Oct 26 2003 3:00
ip subnet-zero
ip name-server 85.37.17.44
ip name-server 85.38.28.90
ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool CLIENT
   import all
   network 192.168.1.0 255.255.255.0
   default-router 192.168.1.1 
   lease 0 2
!
!
ip inspect name SDM_LOW cuseeme
ip inspect name SDM_LOW ftp
ip inspect name SDM_LOW h323
ip inspect name SDM_LOW icmp
ip inspect name SDM_LOW netshow
ip inspect name SDM_LOW rcmd
ip inspect name SDM_LOW realaudio
ip inspect name SDM_LOW rtsp
ip inspect name SDM_LOW sqlnet
ip inspect name SDM_LOW streamworks
ip inspect name SDM_LOW tftp
ip inspect name SDM_LOW tcp
ip inspect name SDM_LOW udp
ip inspect name SDM_LOW vdolive
ip audit notify log
ip audit po max-events 100
no ftp-server write-enable
!
!
! 
!
!
!
!
interface Ethernet0
 description CRWS Generated text. Please do not delete this:192.168.1.1-255.255.255.0$ETH-LAN$$FW_INSIDE$
 ip address 192.168.1.1 255.255.255.0 secondary
 ip address 10.10.10.1 255.255.255.0
 ip access-group 100 in
 ip nat inside
 no ip mroute-cache
 hold-queue 100 out
!
interface ATM0
 no ip address
 no ip mroute-cache
 atm vc-per-vp 64
 no atm ilmi-keepalive
 pvc 8/35 
  encapsulation aal5mux ppp dialer
  dialer pool-member 1
 !
 dsl operating-mode auto
!
interface Dialer1
 description $FW_OUTSIDE$
 ip address negotiated
 ip nat outside
 ip inspect SDM_LOW out
 encapsulation ppp
 dialer pool 1
 dialer-group 1
 ppp authentication chap pap callin
 ppp chap hostname aliceadsl
 ppp chap password 7 14161E020F012B2F3724
 ppp pap sent-username aliceadsl password 7 045A070F0C244D4A1A15
 ppp ipcp dns request
 ppp ipcp wins request
 hold-queue 224 in
!
ip nat inside source list 102 interface Dialer1 overload
ip nat inside source static tcp 192.168.1.2 5901 interface Dialer1 5901
ip nat inside source static tcp 192.168.1.2 80 interface Dialer1 80
ip nat inside source static tcp 192.168.1.2 4662 interface Dialer1 4662
ip nat inside source static udp 192.168.1.2 4672 interface Dialer1 4672
ip nat inside source static tcp 192.168.1.2 6881 interface Dialer1 6881
ip classless
ip route 0.0.0.0 0.0.0.0 Dialer1
ip http server
no ip http secure-server
!
access-list 23 permit 192.168.1.0 0.0.0.255
access-list 100 remark auto generated by SDM firewall configuration
access-list 100 remark SDM_ACL Category=0
access-list 100 deny   ip host 255.255.255.255 any
access-list 100 deny   ip 127.0.0.0 0.255.255.255 any
access-list 100 permit ip any any
access-list 101 remark auto generated by SDM firewall configuration
access-list 101 remark SDM_ACL Category=1
access-list 101 permit tcp any any eq 6881
access-list 101 permit udp any any eq 4672
access-list 101 permit tcp any any eq 4662
access-list 101 permit tcp any any eq www
access-list 101 permit udp host 85.38.28.90 eq domain any
access-list 101 permit udp host 85.37.17.44 eq domain any
access-list 101 deny   ip 10.10.10.0 0.0.0.255 any
access-list 101 permit icmp any any echo-reply
access-list 101 permit icmp any any time-exceeded
access-list 101 permit icmp any any unreachable
access-list 101 deny   ip 10.0.0.0 0.255.255.255 any
access-list 101 deny   ip 172.16.0.0 0.15.255.255 any
access-list 101 deny   ip 192.168.0.0 0.0.255.255 any
access-list 101 deny   ip 127.0.0.0 0.255.255.255 any
access-list 101 deny   ip host 255.255.255.255 any
access-list 101 deny   ip host 0.0.0.0 any
access-list 101 deny   ip any any log
access-list 102 permit ip 192.168.1.0 0.0.0.255 any
dialer-list 1 protocol ip permit
!
line con 0
 exec-timeout 120 0
 no modem enable
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 access-class 23 in
 exec-timeout 120 0
 login local
 length 0
!
scheduler max-task-time 5000
!
end

miko2003 · mer 15 nov , 2006 6:19 pm

Adesso credo proprio di aver levato tutti gli access group:

Codice: Seleziona tutto

version 12.0            
no service pad              
service timestamps debug uptime                               
service timestamps log uptime                           
service password-encryption                           
! 
hostname router               
! 
logging buffered 8192 debugging                               
enable secret 5 $1$Ea07$/rMSgutMCt3vcjYpTgd0n/                                              
! 
username router password 7 141B071B03102E22                                           
! 
dial-peer voice 1 pots                      
 call-waiting             
 ring 0       
 port 1       
 destination-pattern 087256418                              
! 
pots country IT               
ip subnet-zero              
no ip source-route                  
! 
isdn switch-type basic-net3                           
! 
! 
! 
interface Ethernet0                   
 ip address 192.168.1.1 255.255.255.0                                     
 ip access-group 121 out                        
 no ip directed-broadcast                         
 no ip proxy-arp                
 ip nat inside              
! 
interface BRI0              
 no ip address              
 no ip directed-broadcast                         
 encapsulation ppp                  
 dialer pool-member 1                     
 isdn switch-type basic-net3                            
 isdn incoming-voice modem                          
 ppp authentication chap pap callin                                   
! 
interface Dialer1                 
 description ISP                
 ip address negotiated                      
 no ip directed-broadcast                         
 no ip proxy-arp                
 ip nat outside               
 encapsulation ppp                  
 no ip split-horizon                    
 dialer remote-name Cisco1                          
 dialer idle-timeout 300                        
 dialer string 7022334455 class DialClass                                         
 dialer hold-queue 10                     
 dialer pool 1              
 dialer-group 1               
 pulse-time 0             
 ppp authentication chap pap callin                                   
 ppp chap hostname [email protected]                                               
 ppp chap password 7 151E1E1C0B3E2F2D                                     
 ppp pap sent-username [email protected] password 7 141B071B03102E22                                                                               
! 
ip nat inside source list 18 interface Dialer1 overload                                                       
ip nat inside source static tcp 192.168.1.10 4662 0.0.0.0 4662 extendable                                                                         
ip nat inside source static udp 192.168.1.10 4672 0.0.0.0 4672 extendable                                                                         
ip nat inside source static tcp 192.168.1.10 4711 0.0.0.0 4711 extendable                                                                         
ip classless            
ip route 0.0.0.0 0.0.0.0 Dialer1                                
! 
! 
map-class dialer DialC                     
access-list 18 permit 192.168.1.0 0.0.0.255                                           
dialer-list 1 protocol ip permit                                
! 
line con 0          
 exec-timeout 120 0                   
 transport input none                     
 stopbits 1           
line vty 0 4            
 exec-timeout 0 0                 
 login local            
! 
time-range TIME               
 periodic daily 0:00 to 23:59                             
! 
end   

router#conf t             
Enter configuration commands, one per line.  End with CNTL/Z.                                                             
router(config)#no ip access-group 121                                     
                            ^                             
% Invalid input detected at '^' marker.                                       

router(config)#no ip access 121                               
                            ^                             
% Invalid input detected at '^' ma                                 

router(config)#ip access-group 121                                  
                         ^                          
% Invalid input detected at '^' marker.                                       

router(config)#int ethernet0                            
router(config-if)#no ip access-group 121 out                                            
router(config-if)#exit                      
router(config)#wr mme                     
               ^                
% Invalid input detected at '^' marker.                                       

router(config)#wr mem                     
               ^                
% Invalid input detected at '^' marker.                                       

router(config)#exit                   
router#wr mem             
Building configuration...                         

router#sh run             
Building configuration...                         

Current configuration:                      
! 
version 12.0            
no service pad              
service timestamps debug uptime                               
service timestamps log uptime                             
service password-encryption                           
! 
hostname router               
! 
logging buffered 8192 debugging                               
enable secret 5 $1$Ea07$/rMSgutMCt3vcjYpTgd0n/                                              
! 
username router password 7 141B071B03102E22                                           
! 
dial-peer voice 1 pots                      
 call-waiting             
 ring 0       
 port 1       
 destination-pattern 087256418                              
! 
pots country IT               
ip subnet-zero              
no ip source-route                  
! 
isdn switch-type basic-net3                           
! 
! 
! 
interface Ethernet0                   
 ip address 192.168.1.1 255.255.255.0                                     
 no ip directed-broadcast                         
 no ip proxy-arp                
 ip nat inside              
! 
interface BRI0              
 no ip address              
 no ip directed-broadcast                         
 encapsulation ppp                  
 dialer pool-member 1                     
 isdn switch-type basic-net3                            
 isdn incoming-voice modem                          
 ppp authentication chap pap callin                                   
! 
interface Dialer1                 
 description ISP                
 ip address negotiated                      
 no ip directed-broadcast                         
 no ip proxy-arp                
 ip nat outside               
 encapsulation ppp                  
 no ip split-horizon                    
 dialer remote-name Cisco1                          
 dialer idle-timeout 300                        
 dialer string 7022334455 class DialClass                                         
 dialer hold-queue 10                     
 dialer pool 1              
 dialer-group 1               
 pulse-time 0             
 ppp authentication chap pap callin                                   
 ppp chap hostname [email protected]                                               
 ppp chap password 7 151E1E1C0B3E2F2D                                     
 ppp pap sent-username [email protected] password 7 141B071B03102E22                                                                               
! 
ip nat inside source list 18 interface Dialer1 overload                                                       
ip nat inside source static tcp 192.168.1.10 4662 0.0.0.0 4662 extendable                                                                         
ip nat inside source static udp 192.168.1.10 4672 0.0.0.0 4672 extendable                                                                         
ip nat inside source static tcp 192.168.1.10 4711 0.0.0.0 4711 extendable                                                                         
ip classless            
ip route 0.0.0.0 0.0.0                     
ip route 0.0.0.0 0.0.0                     
!
map-class dialer DialClass
access-list 18 permit 192.168.1.0 0.0.0.255
dialer-list 1 protocol ip permit
!
line con 0
 exec-timeout 120 0
 transport input none
 stopbits 1
line vty 0 4
 exec-timeout 0 0
 login local
!
time-range TIME
 periodic daily 0:00 to 23:59
!
end

Qualcuno ora sa aiutarmi?

[Dj][DMX] · mer 15 nov , 2006 11:51 pm

Jackal84 ha scritto:Salve raga, leggendo il forum son riuscito a risolvere i problemi che avevo con amule e azureus.. ora però chiedo un vs parere sulla mia configurazione attuale... come sono messo come firewall? c'è qualcosa da modificare? grazie

Direi proprio di si: ci sono 2 access list che non usi più e quindi puoi cancellarle, dopodichè l'unica che usi l'hai applicata alle ethernet in, invece va applicata al dialer in!
Fai pulizia e riposta la configurazione.

Jackal84 · gio 16 nov , 2006 12:28 pm

ci ho rinunciato, è da ieri sera che non va piu nulla per l'ennesima volta.
Il fatto è che non si trova un esempio di firewall da nessuna parte, è possible avere un file di configurazione già fatto, poi uno si modifica man mano le impostazioni?

Problema con porte di emule

Login • Iscriviti