Bittorent on University LAN

[manino1]

I can not get it work, do you know how it will work?

[ducttapeBigSexy]

No, I do not know.

Seriously, we need a bit more info then that.

[sToNeD_rApToR]

hey manino give more details. do u have a router, i thnk wots happening is since u r on a LAN bittorrent is having trouble wth the port and NAT. first of all which u need to look which port ur bt client is using(6881 in case of azureus), anyways try these commands:
open RUN.
telnet 192.168.1.1
this should open a 'cmd' screen.
-->console enable
192.168.1.1>nat inbound add (WAN name) port number/tcp 192.168.1.2
example of above command:
192.168.1.1>nat inbound add yoon-0 6881/tcp 192.168.1.2
now in this example yoon-0 is my WAN name, i m opening port 6881 enabling TCP data tranfer thru 6881 and telling the router to route the data traffic to computer with internal ip 192.168.1.2.
now to check if this port forwaarding worked:
192.168.1.1>nat inbound list
this shouls show a list whish should look like this:
yoon-0(here u should c ur WAN name) 6881/tcp
this list will have one more field FLAGS, which should not have any value when this list is shown.
now this is the basic port-forwarding, but if someone else is using same ports which u open thryu these commands then it will not work, but for starters try this as i have written. if it doesnt works, try putting 16881 instead of 6881, everything else remaing same. and disable UnPn.

[cpugeniusmv]

I'd be willing to bet that your university is blocking it.

[manino1]

I am using a library PC connected to a LAN which is probably firewalled. Running Win2K. Bittorent is also firewalled and i need a way to get through it. Ive tried using a fresh installation of WinXP but that didnt help(Cant connect to network). Any ideas what i should do? If you do then we could chat though messenger or you can also use the forum if u feel like it.

[wonderboy2005]

I'd be willing to bet that your university is blocking it. I think so too. If I'm not mistaken CPU, you are in college now, right? If so, have you been lucky enough to continue your filesharing while contending with the blockade in place?

[moneoa]

Ive tried using a fresh installation of WinXP but that didnt help(Cant connect to network). Any ideas what i should do? If you do then we could chat though messenger or you can also use the forum if u feel like it.
wow you can install windows fresh on a library p.c?
If you can do that then it might not be so stupid to think that it does NOT connect to a firewall. Though everyone is right, need more info on your setup

[MPXX]

I know a few universities are using OpenFT servers...basically in a LAN you don't really need BT as the speed will be 200-400Kb/s anyways.
Search for some OpenFT clients like rezX and see if you school has an OpenFT server...if not you can make one.

[cpugeniusmv]

I think so too. If I'm not mistaken CPU, you are in college now, right? If so, have you been lucky enough to continue your filesharing while contending with the blockade in place?
To a limited extent, yes. Bittorrent is a no-go, though. If I had a box on the outside with a fast connection...I could pull off some neat tricks, but my connection at home sucks.

manino1, are you trying to do fileshairng on one of the University's computers? Or one of your own?

[manino1]

Reply to

hey manino give more details. do u have a router, i thnk wots happening is since u r on a LAN bittorrent is having trouble wth the port and NAT. first of all which u need to look which port ur bt client is using(6881 in case of azureus), anyways try these commands:
open RUN.
telnet 192.168.1.1
this should open a 'cmd' screen.
-->console enable
192.168.1.1>nat inbound add (WAN name) port number/tcp 192.168.1.2
example of above command:
192.168.1.1>nat inbound add yoon-0 6881/tcp 192.168.1.2
now in this example yoon-0 is my WAN name, i m opening port 6881 enabling TCP data tranfer thru 6881 and telling the router to route the data traffic to computer with internal ip 192.168.1.2.
now to check if this port forwaarding worked:
192.168.1.1>nat inbound list
this shouls show a list whish should look like this:
yoon-0(here u should c ur WAN name) 6881/tcp
this list will have one more field FLAGS, which should not have any value when this list is shown.
now this is the basic port-forwarding, but if someone else is using same ports which u open thryu these commands then it will not work, but for starters try this as i have written. if it doesnt works, try putting 16881 instead of 6881, everything else remaing same. and disable UnPn.
__________________
i M A FOOL





aShEs To AsHeS, dUsT tO dUsT







There system i am on is one which is in the university library, it has many restrictions on it and i have not got the admin rights.
I have tried the command, i am unsure about what it is meant to do? Any way i typed in telnet 192.168.1. , i got a dos type screen for 30 seconds and then it closed itself.


The uni PC is on a fast connection and i wanted to take advatge of this. I think it is possible but how do i open up the 6881 etc ports???

[manino1]

will other networks like edonkey work quickly?

[sToNeD_rApToR]

go to RUN ->cmd
c:\>ipconfig

now u will c 3 ip addresses, telnet default gateway i.e:
c:\>telnet xxx.xxx.xxx.xxx(default gateway)

this will ask u login=admin, password=admin
->console enable
xxx.xxx.xxx.xxx>nat inbound add (WAN name) port number/tcp 192.168.1.2
example of above command:
xxx.xxx.xxx.xxx>nat inbound add yoon-0 6881/tcp 192.168.1.2
now in this example yoon-0 is my WAN name, i m opening port 6881 enabling TCP data tranfer thru 6881 and telling the router to route the data traffic to computer with internal ip 192.168.1.2.
now to check if this port forwaarding worked:
xxx.xxx.xxx.xxx>nat inbound list
this should show a list which should look like this:
yoon-0(here u should c ur WAN name) 6881/tcp
this list will have one more field FLAGS, which should not have any value when this list is shown.
now this is the basic port-forwarding, but if someone else is using same ports which u open thryu these commands then it will not work, but for starters try this as i have written. if it doesnt works, try putting 16881 instead of 6881, everything else remaing same. and disable UPnP.

[cpugeniusmv]

go to RUN ->cmd
c:\>ipconfig

now u will c 3 ip addresses, telnet default gateway i.e:
c:\>telnet xxx.xxx.xxx.xxx(default gateway)

this will ask u login=admin, password=admin
->console enable
xxx.xxx.xxx.xxx>nat inbound add (WAN name) port number/tcp 192.168.1.2
example of above command:
xxx.xxx.xxx.xxx>nat inbound add yoon-0 6881/tcp 192.168.1.2
now in this example yoon-0 is my WAN name, i m opening port 6881 enabling TCP data tranfer thru 6881 and telling the router to route the data traffic to computer with internal ip 192.168.1.2.
now to check if this port forwaarding worked:
xxx.xxx.xxx.xxx>nat inbound list
this should show a list which should look like this:
yoon-0(here u should c ur WAN name) 6881/tcp
this list will have one more field FLAGS, which should not have any value when this list is shown.
now this is the basic port-forwarding, but if someone else is using same ports which u open thryu these commands then it will not work, but for starters try this as i have written. if it doesnt works, try putting 16881 instead of 6881, everything else remaing same. and disable UPnP.
You honestly think a university network admin would allow someone to telnet into the gateway and mess with settings?

You won't be messing with any port settings on the library computers.

[policy_editor]

You honestly think a university network admin would allow someone to telnet into the gateway and mess with settings?

You won't be messing with any port settings on the library computers.

This is becoming common practice for unis blocking multiple ports and you can thank my enemies at the mpaa for it. I would download a free version of port detect which basically tells you what ports are blocked ill search for a link and post it later.

So the next time you decide to take your girlfriend to the movies DONT SUPPORT THE CHICANERY OF THE MPAA/RIAA there ruining your life! When you buy a movie or a music cd your only supporting there efforts.

I hope you can find a way around the block im paying close attention to this thread!

[policy_editor]

Pretty good arguement

Here are the flaws,

Mel I have a monthly membership at Blockbuster however not everything is available to me especially shows aired on BBC tele so im forced to download! is this my fault? certainly not I have no control over the movie/television industry and what is decided to air in certain countries. So until EVERYTHING is available ill always complain.
Now as far as music is concerned Radio is fine for me I dont download music so the RIAA isnt a problem.

I dont like commercials either everytime I visit the grocery store im marketed to bloody death when I download commercials are cut out which is right up my alley.

[manino1]

I have got it to work, now i am getting down max 200K and up 1.3M. Shame about the ratio, i have found a department that has no firewall. But it is closed on weekends and May Days as well. Tommorow ill be using it.

[manino1]

Hey Ogi

I am really interested on how you used Linux to bypass the firewall. Can tell me more?

Is the system in you college or maybe at you residential hall (the hostel the university puts students in)?

Did you use a live operating system?

I am thinking of doing the same here.

[cpugeniusmv]

Hey Ogi

I am really interested on how you used Linux to bypass the firewall. Can tell me more?

Is the system in you college or maybe at you residential hall (the hostel the university puts students in)?

Did you use a live operating system?

I am thinking of doing the same here.
You would have to have priveleged access a box outside the University LAN on a fast connection.

SSH Tunneling.

[manino1]

what do you mean? I do have a PC at home but with only someone elses line.

[cpugeniusmv]

what do you mean? I do have a PC at home but with only someone elses line.
Think of SSH Tunneling as "port forwarding over the internet". Very much comparable to a proxy.

The computer behind the tunnel will only be able to download as fast as the SSH machine can upload.

[manino1]

Im not exactly sure what SSH tunnelling is but i have heard about it. What systems would i need????

[cpugeniusmv]

Im not exactly sure what SSH tunnelling is but i have heard about it. What systems would i need????
Just Linux with openssh.

But let me reiterate: if it is not on a fast connection, you won't have an enjoyable experience (if you intend to use p2p apps through the tunnel(s) ).

[celendin]

I have got it to work, now i am getting down max 200K and up 1.3M. Shame about the ratio, i have found a department that has no firewall. But it is closed on weekends and May Days as well. Tommorow ill be using it.

Did you try the methods that they told you by telneting into the school, or did you just go around til you found a department without a firewall?

cause I am having the same problem on campus as well

Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\Valued Customer>ipconfig

Windows IP Configuration


Ethernet adapter Local Area Connection:

Media State . . . . . . . . . . . : Media disconnected

Ethernet adapter Wireless Network Connection:

Connection-specific DNS Suffix . : wireless.rmit.edu.au
IP Address. . . . . . . . . . . . : 10.0.7.80
Subnet Mask . . . . . . . . . . . : 255.0.0.0
Default Gateway . . . . . . . . . : 10.0.1.3
10.0.0.1

Ethernet adapter {639EF761-1029-49AB-A50A-78603FF53BF6}:

Connection-specific DNS Suffix . : wireless.rmit.edu.au
IP Address. . . . . . . . . . . . : 172.16.226.153
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 172.16.226.153

C:\Documents and Settings\Valued Customer>telnet 172.16.226.153
Connecting To 172.16.226.153...Could not open connection to the host, on port 23
: Connect failed

C:\Documents and Settings\Valued Customer>telnet 10.0.1.3
Connecting To 10.0.1.3...Could not open connection to the host, on port 23: Conn
ect failed

Help what do I do?

[cpugeniusmv]

A network administrator would be BRAINLESS if he allowed you to adjust router settings.

Don't count on changing anything. I'm sure he just found a WAP without a firewall.

[celendin]

I thought the sysadmin would set all WAP to the same config.

What gives? the Sysadmin allows ports to go through one WAP and not the others? Dont think so..

So how do you trade files.. just from your connection at home?

BTW on your blog, what blog software do you use? CPUGeniusMV

[cpugeniusmv]

I thought the sysadmin would set all WAP to the same config.

What gives? the Sysadmin allows ports to go through one WAP and not the others? Dont think so..

So how do you trade files.. just from your connection at home?

BTW on your blog, what blog software do you use? CPUGeniusMV
Not all admins are smart/organized. It could very well be that it's just not configured like the rest of them on campus.

Re: blog
I coded it myself.

[celendin]

Not all admins are smart/organized. It could very well be that it's just not configured like the rest of them on campus.

Re: blog
I coded it myself.

Im accessing the WAP from my laptop...not a library computer anyhow ..

How do I run a port scan on the WAP connection

I tried http://www.broadbandreports.com/scan

but it wont load properly because its a Java VM

[cpugeniusmv]

Try Shields Up (https://grc.com/x/ne.dll?bh0bkyd2). (All service ports)

Make sure to take down any firewall you may be running, that way you can see only the effects of what the university is firewalling.

[celendin]

It says

Your Connection to Our Web
Server is Probably 'Proxied'

The ShieldsUP! system incorporates technology designed to circumvent many common web browser proxies so that most of our visitors never encounter this special interception page. This built-in circumvention technology is one of several reasons why ShieldsUP!'s tests are often more accurate than other web-based online security tests.

However, in this case, it appears that our automatic proxy circumvention system has failed to determine your machine's true IP address, so the results of further tests would not be trustworthy.

The "reverse DNS lookup" of your connection's public IP address is:

*****.****.***.**

As you can see, this looks suspiciously like the name of an intermediate proxy, as discussed above. We are unable to bypass this proxy, since even your browser's secure SSL connections are being intercepted. If you are able to disable your browser's use of this proxy we'll be able to check your system, but until then we are unable to proceed.

[celendin]

I connect to the WAP through a VPN

I ran a scan from the Sygate site http://scan.sygatetech.com/tcpscan.html
It gave this

Service Ports Status Additional Information
Scanning ports 1 to 10 . . .
Scanning ports 11 to 20 . . .
Scanning ports 21 to 30 . . .
SSH 22 OPEN Secure Shell, a encrypted type of Telnet. If misconfigured it can allow for brute-force attacks on your administration account.
Scanning ports 31 to 40 . . .
Scanning ports 41 to 50 . . .
Scanning ports 51 to 60 . . .
Scanning ports 61 to 70 . . .
Scanning ports 71 to 80 . . .
WEB 80 OPEN HTTP web services publish web pages. A misconfigured web server can not only offer an attacker needed information about his target, but it can allow for various security breaches.
Scanning ports 81 to 90 . . .
Scanning ports 91 to 100 . . .
Scanning ports 101 to 110 . . .
Scanning ports 111 to 120 . . .
Scanning ports 121 to 130 . . .
Scanning ports 131 to 140 . . .
Scanning ports 141 to 150 . . .
Scanning ports 151 to 160 . . .
Scanning ports 161 to 170 . . .
Scanning ports 171 to 180 . . .
Scanning ports 181 to 190 . . .
Scanning ports 191 to 200 . . .
Scanning ports 201 to 210 . . .
Scanning ports 211 to 220 . . .
Scanning ports 221 to 230 . . .
Scanning ports 231 to 240 . . .
Scanning ports 241 to 250 . . .
Scanning ports 251 to 260 . . .
Scanning ports 261 to 270 . . .
Scanning ports 271 to 280 . . .
Scanning ports 281 to 290 . . .
Scanning ports 291 to 300 . . .
Scanning ports 301 to 310 . . .
Scanning ports 311 to 320 . . .
Scanning ports 321 to 330 . . .
Scanning ports 331 to 340 . . .
Scanning ports 341 to 350 . . .
Scanning ports 351 to 360 . . .
Scanning ports 361 to 370 . . .
Scanning ports 371 to 380 . . .
Scanning ports 381 to 390 . . .
Scanning ports 391 to 400 . . .
Scanning ports 401 to 410 . . .
Scanning ports 411 to 420 . . .
Scanning ports 421 to 430 . . .
Scanning ports 431 to 440 . . .
Scanning ports 441 to 450 . . .
Scanning ports 451 to 460 . . .
Scanning ports 461 to 470 . . .
Scanning ports 471 to 480 . . .
Scanning ports 481 to 490 . . .
Scanning ports 491 to 500 . . .
Scanning ports 501 to 510 . . .
Scanning ports 511 to 520 . . .
Scanning ports 521 to 530 . . .
Scanning ports 531 to 540 . . .
Scanning ports 541 to 550 . . .
Scanning ports 551 to 560 . . .
Scanning ports 561 to 570 . . .
Scanning ports 571 to 580 . . .
Scanning ports 581 to 590 . . .
Scanning ports 591 to 600 . . .
Scanning ports 601 to 610 . . .
Scanning ports 611 to 620 . . .
Scanning ports 621 to 630 . . .
Scanning ports 631 to 640 . . .
unknown 631 OPEN none
Scanning ports 641 to 650 . . .
Scanning ports 651 to 660 . . .
Scanning ports 661 to 670 . . .
Scanning ports 671 to 680 . . .
Scanning ports 681 to 690 . . .
Scanning ports 691 to 700 . . .
Scanning ports 701 to 710 . . .
Scanning ports 711 to 720 . . .
Scanning ports 721 to 730 . . .
Scanning ports 731 to 740 . . .
Scanning ports 741 to 750 . . .
Scanning ports 751 to 760 . . .
Scanning ports 761 to 770 . . .
Scanning ports 771 to 780 . . .
Scanning ports 781 to 790 . . .
Scanning ports 791 to 800 . . .
Scanning ports 801 to 810 . . .
Scanning ports 811 to 820 . . .
Scanning ports 821 to 830 . . .
Scanning ports 831 to 840 . . .
Scanning ports 841 to 850 . . .
Scanning ports 851 to 860 . . .
Scanning ports 861 to 870 . . .
Scanning ports 871 to 880 . . .
Scanning ports 881 to 890 . . .
Scanning ports 891 to 900 . . .
Scanning ports 901 to 910 . . .
Scanning ports 911 to 920 . . .
Scanning ports 921 to 930 . . .
Scanning ports 931 to 940 . . .
Scanning ports 941 to 950 . . .
Scanning ports 951 to 960 . . .
Scanning ports 961 to 970 . . .
Scanning ports 971 to 980 . . .
Scanning ports 981 to 990 . . .
Scanning ports 991 to 1000 . . .
Scanning ports 1001 to 1010 . . .
Scanning ports 1011 to 1020 . . .
Scanning ports 1021 to 1024 . . .

You are not fully protected:
We have detected that some of our probes connected with your computer.

I changed the port in Azereus to 631 because the test said it was open.. but Azereus gave me

Testing port 631 ... Unable to test

Any thoughts about how I can config Azereus to allow it to accept that port?

[cpugeniusmv]

It says

Your Connection to Our Web
Server is Probably 'Proxied'

The ShieldsUP! system incorporates technology designed to circumvent many common web browser proxies so that most of our visitors never encounter this special interception page. This built-in circumvention technology is one of several reasons why ShieldsUP!'s tests are often more accurate than other web-based online security tests.

However, in this case, it appears that our automatic proxy circumvention system has failed to determine your machine's true IP address, so the results of further tests would not be trustworthy.

The "reverse DNS lookup" of your connection's public IP address is:

*****.****.***.**

As you can see, this looks suspiciously like the name of an intermediate proxy, as discussed above. We are unable to bypass this proxy, since even your browser's secure SSL connections are being intercepted. If you are able to disable your browser's use of this proxy we'll be able to check your system, but until then we are unable to proceed.

I'd say you're stuck then :-\

[cpugeniusmv]

Those ports are likely open on the proxy server, but you won't be able to use them. The proxy wouldn't forward those ports to you.

[celendin]

So my WAP connection
goes from my laptop ->proxy server -> net -> proxy ->laptop

To open the ports i would have to tamper around with the settings on the proxy server right?

[celendin]

From wikipedia.com

Many organizations — including corporations, schools, and families — use proxy servers to enforce network use policies (see censorware) or provide security and caching services. Usually, the web or NAT proxy is not transparent to the client application: it must be configured to use the proxy, manually or with a configuration script. Thus, the user can evade the proxy by simply resetting the client configuration. A transparent proxy or transproxy combines a proxy server with NAT so that connections are routed into the proxy without client-side configuration.

Both NAT and transproxies are somewhat controversial in the Internet technical community, since both violate the end-to-end principle upon which TCP/IP was designed.

I would say I am behind a transparent proxy...

[cpugeniusmv]

From wikipedia.com

Many organizations — including corporations, schools, and families — use proxy servers to enforce network use policies (see censorware) or provide security and caching services. Usually, the web or NAT proxy is not transparent to the client application: it must be configured to use the proxy, manually or with a configuration script. Thus, the user can evade the proxy by simply resetting the client configuration. A transparent proxy or transproxy combines a proxy server with NAT so that connections are routed into the proxy without client-side configuration.

Both NAT and transproxies are somewhat controversial in the Internet technical community, since both violate the end-to-end principle upon which TCP/IP was designed.

I would say I am behind a transparent proxy...
Yes. Don't count on forwarding ports to your computer through it.

[celendin]

Yes. Don't count on forwarding ports to your computer through it.

Is there anything I can do?

I thought all universities have transparent proxies

I cant even connect to a tracker with Bitcomet or Azereus

..i thought you could connect to trackers.. just download very slowly behind a firewalled connection

[cpugeniusmv]

Is there anything I can do?

I thought all universities have transparent proxiesMost do. Some are more invasive than others.


I cant even connect to a tracker with Bitcomet or Azereus

..i thought you could connect to trackers.. just download very slowly behind a firewalled connection
I can on my university connection. But there's nothing I have/can change(d).

[celendin]

Using NetStumbler I found that there are actually two wireless networks operating around Uni.

One for the students and one for the staff.

I think that if I can access the one used by the staff, then maybe the ports will be open for their connection.

How can I access the staff connection. I cant because I dont have the correct login/pass information.

I have heard of Wardriving, where people drive around leeching bandwidth from wireless networks. How does that work. Can I use it to access the staff connection?

[cpugeniusmv]

Using NetStumbler I found that there are actually two wireless networks operating around Uni.

One for the students and one for the staff.

I think that if I can access the one used by the staff, then maybe the ports will be open for their connection.

How can I access the staff connection. I cant because I dont have the correct login/pass information.

I have heard of Wardriving, where people drive around leeching bandwidth from wireless networks. How does that work. Can I use it to access the staff connection?
I'm not familiar with the methodology behind intrusion of wireless networks. But it is very likely that the staff has their ports blocked too.

[celendin]

does your connection go through a proxy? or does it connect you straight to the net .. i cant even access msn with this

[cpugeniusmv]

does your connection go through a proxy? or does it connect you straight to the net .. i cant even access msn with this
I go through a transparent proxy. But the only thing that differs between my access, and a direct connection, is that all my inbound ports are closed. I even have a public IP.

But all transparent proxies are configured differently.

[celendin]

So you basically dont even need to pay for internet access at home?

[cpugeniusmv]

So you basically dont even need to pay for internet access at home?
What do you mean? I don't have access to my university connection when I'm at home. I have Cable.

When I'm at school, part of my housing cost goes to funding this connection, I'm sure.

[manino1]

Sorry for taking so long to reply.

I have found a LAN in a department of the university that has no firewall. Each department has its own technician and no departments have firewall except the central ones like Library, common LAN room where all students(Lawyers, doctors and Accountants) can go in and use it. The central ones are heavy firewalled but not any departmental LANs.

The Download speed i usually get is usually 100-200 KBPS.

I have downloaded 6GB connected for 24 hrs
Uploaded 36Gb tho.

Upload speed is like crazy 200K to 1000K. AVerage 440K

I would also like to crack the central firewalled LANs.

If you have allready done this please tell me how?

Thanks

[cpugeniusmv]

I would also like to crack the central firewalled LANs.

If you have allready done this please tell me how?

Thanks
Leave it alone. You would likely regret it if you did it.

[ConTorTion]

i was hoping for some new information on this topic. didn't really see anything new in a general sense but i will add something

there are devices nowadays (specifically the packeteer (http://www.packeteer.com/prod-sol/) ) which can filter all traffic through the pipe based on a wide assortment of details not the least of which is traffice type. my univeristy chokes all p2p traffic protocols to something like 30k for the whole system. blocking it has the potential for PR headaches so what they do is simply make it so slow as to be useless. this goes way beyond simple firewall blockage. you probably don't have to worry about these kind of devices on a regular ISP, but their presence on university campi are growing. the only sharing we have is via ftp over internet2 but that's not quite the same and has also begun to come under admin scrutiny.

[cpugeniusmv]

the only sharing we have is via ftp over internet2 but that's not quite the same and has also begun to come under admin scrutiny.
Fortunately, they can't block FTP ethically, or even limit it. Even if they did block all inbound ports, preventing one from hosting a server directly on the connection, there is a particularly clever work-around.

The only way to effectively hinder all methods of P2P would be to limit the bandwidth usage for all connections drastically.

[manino1]

Hi

im getting speeds of 1MB/s or 8Mb downloads and up to 4Mb up.
Now the only problem is getting the stuff of the University PC to home, what device should i use?

Cd's are no good, there to small. I need something that handles 10Gb +. Ive tried a normal HDD with a external case but it does not install. Not even at home.

[Greylin]

Try a portable hard drive with usb connection.