Open port for BitTorrent

[markadewet (Mark de Wet)]

Hi all,
Sheesh, I really feel like a total dummy here now. I am trying to get BitTorrent to connect to download a Linux ISO and for the life of me I cannot get it to connect. The port is 59197 and I have the follwing rule set up:
Source: Any | port 59197
NAT enabled : Destination NAT (port forwarding)
Destination: [client-ip-address] | port 59197

I have created rules for both TCP and UDP.

However, it seems from the firewall logs that that port is still being dropped for some reason as I see a pile of DROP_INPUT for port 59197. So no luck whatsoever in connecting to get the ISO listed or to download. Where am I going wrong please?

---

EDIT: I updated this line: Destination: [client-ip-address] | port 59197
-moderator

[bbitsch (Bernhard Bitsch)]

Have you defined a destination IP for this port forwarding rule?
Don’t forget to restart the firewall for the rule become active.

[markadewet (Mark de Wet)]

@bbitsch Apologies, yes I did define a destination IP for the rule, I tried to put it in brackets as client_IP_address but it seems to have been removed from my post somehow.
As regards restarting, no, I did not restart the whole firewall, as I have set up rules previously for other ports and just clicked “apply changes” and they worked. Is it really necessay to restart the whole firewall each time one adds a firewall rule?

[bbitsch (Bernhard Bitsch)]

Sorry, restart firewall was meant as apply changes.

[markadewet (Mark de Wet)]

@bbitsch Ah Ok, then yes I did.

[markadewet (Mark de Wet)]

OK, update, I changed the port and now all is working as it should. Seems port 59197 is a port that is blacklisted by one of the IDS rules (no, I have NOT selected the emerging P2P rule)

[peppetech]

@markadewet

Seems port 59197 is a port that is blacklisted by one of the IDS rules

Do you remember what IDS rule was blocking this port.

If that helps in future, one of the connection settings in BT clients is “use different port on each startup”

[bbitsch (Bernhard Bitsch)]

@peppetech

If that helps in future, one of the connection settings in BT clients is “use different port on each startup”

This settings isn’t really helpful for port forward rules.

[arne_f]

@markadewet

However, it seems from the firewall logs that that port is still being dropped for some reason as I see a pile of DROP_INPUT for port 59197. So no luck whatsoever in connecting to get the ISO listed or to download. Where am I going wrong please?

Heve you specified the Source port also as 59197? If yes remove this, bittorent use a random source port.

[arne_f]

@markadewet

Seems port 59197 is a port that is blacklisted by one of the IDS rules

This should not the reason here because if suricata blocks it, the connection not reach the DROP_INPUT.

[markadewet (Mark de Wet)]

Hi all, sincerest apologies, I did not update my post, I changed the port to 13118 and all is working now. Thank you to all that replied.