[gentoo-user] No torrent upload

[gentoo-user] No torrent upload

[Florian Philipp]

[-- Attachment #1: Type: text/plain, Size: 799 bytes --]

Hi!

Currently I'm downloading some stage3-tarballs using rtorrent. 

As it seems I can't upload anything. My downstream is at 120k as it sould be 
but upstream stays at 0. 

My router redirects everything on port 21 (TCP/UDP) to my IP. rtorrent is 
started like this: "rtorrent -n -p 21-21 stage3[blah].torrent"

I have to use port 21 because my provider slows everything down as soon as he 
recognizes traffic on any port except those typically in use.

It works while using Ubuntu, Knoppix or Windows. 

Do you have any hints?

Oh and by the way: I have to start rtorrent with super user permissions in 
order to avoid this error, "rtorrent: Could not open/bind a port for 
listening: Permission denied"

Do I have any other choice?

Thanks in advance!

Florian Philipp

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] No torrent upload

[Albert Hopkins]

On Tue, 2007-06-12 at 15:49 +0200, Florian Philipp wrote:
> 
> I have to use port 21 because my provider slows everything down as
> soon as he 
> recognizes traffic on any port except those typically in use. 

AFAIK the bitrorrent protocol is for ports starting at 6882.  It's
likely that clients won't connect to your port (21) esp. since it is a
lower port # reserved for FTP. 

But if you say it works on other setups then it should work also with
Gentoo.  Have you tried running netstat?  Have you ensured rtorrent is
listning on TCP 21 (in Linux you usually have to be running as root to
do this) Are you running something on your end that may be blocking
incoming TCP/21?
--
Albert W. Hopkins

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] No torrent upload

[Mike Mazur]

Hi,

On 6/12/07, Albert Hopkins <marduk@gentoo.org> wrote:
> Are you running something on your end that may be blocking
> incoming TCP/21?

Port 21 is the default FTP server, do you have one running?

Mike
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] No torrent upload

[Florian Philipp]

[-- Attachment #1: Type: text/plain, Size: 1417 bytes --]

Am Dienstag 12 Juni 2007 16:04 schrieb Albert Hopkins:
> On Tue, 2007-06-12 at 15:49 +0200, Florian Philipp wrote:
> > I have to use port 21 because my provider slows everything down as
> > soon as he
> > recognizes traffic on any port except those typically in use.
>
> AFAIK the bitrorrent protocol is for ports starting at 6882.  It's
> likely that clients won't connect to your port (21) esp. since it is a
> lower port # reserved for FTP.
>
> But if you say it works on other setups then it should work also with
> Gentoo.  Have you tried running netstat?

netstat
Active Internet connections (w/o servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      1 HOMER_GENTOO64.PHHE:ftp 212-87-13-68.sds.:40202 FIN_WAIT1

Active UNIX domain sockets (w/o servers)
Proto RefCnt Flags       Type       State         I-Node Path
unix  2      [ ]         DGRAM                    975    
@/org/kernel/udev/udevd
[...]
nothing interesting except the first line.



> Have you ensured rtorrent is 
> listning on TCP 21 (in Linux you usually have to be running as root to
> do this)

Yes. It runs as root (not that I would like it, maybe I should chroot it...) 
and port 21 is rtorrent's only chance to download. So, it works.

> Are you running something on your end that may be blocking 
> incoming TCP/21?

You mean stuff like iptables? No.

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] No torrent upload

[Florian Philipp]

[-- Attachment #1: Type: text/plain, Size: 277 bytes --]

Am Dienstag 12 Juni 2007 16:12 schrieb Mike Mazur:
> Hi,
>
> On 6/12/07, Albert Hopkins <marduk@gentoo.org> wrote:
> > Are you running something on your end that may be blocking
> > incoming TCP/21?
>
> Port 21 is the default FTP server, do you have one running?
>
> Mike

No.

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] No torrent upload

[Albert Hopkins]

On Tue, 2007-06-12 at 16:27 +0200, Florian Philipp wrote:
> > Have you tried running netstat?
> 
> netstat
> Active Internet connections (w/o servers)
> Proto Recv-Q Send-Q Local Address           Foreign Address         State
> tcp        0      1 HOMER_GENTOO64.PHHE:ftp 212-87-13-68.sds.:40202 FIN_WAIT1
> 
> Active UNIX domain sockets (w/o servers)
> Proto RefCnt Flags       Type       State         I-Node Path
> unix  2      [ ]         DGRAM                    975    
> @/org/kernel/udev/udevd
> [...]
> nothing interesting except the first line.

So you see no SYN requests to your server on port 21
> 
> 
> > Have you ensured rtorrent is 
> > listning on TCP 21 (in Linux you usually have to be running as root to
> > do this)
> 
> Yes. It runs as root (not that I would like it, maybe I should chroot it...) 
> and port 21 is rtorrent's only chance to download. So, it works.

Chrooting is not going to get around needding root access to listen on
port 21.  Plus don't you still need to be root to chroot?
> 
> You mean stuff like iptables? No.

This is my theory but I haven't verified it.  Bittorrent clients are
programmed to listen/connect to a range of ports by default (I think it
starts at 6882).  Your client is connecting and saying "connect to me on
port 21".  The other clients see this but it's not in their IP range so
they refuse to connect to you.  You might be able to tell your client to
listen on tcp/21 but that doesn't mean everyone else has told their
clients to connect.

But if you are sure this *has* worked then that would make my theory
incorrect.  Like I said I've never verified it, but that seems like the
likely scenario.

The other scenario is if you're not even seeing SYN requests is that
requests are being blocked to your computer from that port, possibly by
your ISP.  But again if this were the case then it should also be the
case for Windows, Knoppix, etc.

Can you verify your claim (i.e. go into knoppix or whatever, run
rtorrent on tcp/21 and verify via netstat that clients are connecting to
you on that port)?

--
Albert W. Hopkins

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] No torrent upload

[Hans-Werner Hilse]

Hi,

On Tue, 12 Jun 2007 16:27:35 +0200 Florian Philipp
<f.philipp@addcom.de> wrote:

> > But if you say it works on other setups then it should work also
> > with Gentoo.  Have you tried running netstat?
> 
> netstat
> Active Internet connections (w/o servers)
                              ^^^^^^
try "netstat -a". (and possibly "netstat -an", or just "netstat -tan",
which will only show TCP connections.)

-hwh
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] No torrent upload

[Florian Philipp]

[-- Attachment #1: Type: text/plain, Size: 2575 bytes --]

Am Dienstag 12 Juni 2007 16:44 schrieb Albert Hopkins:
> On Tue, 2007-06-12 at 16:27 +0200, Florian Philipp wrote:
> > > Have you tried running netstat?
> >
> > netstat
> > Active Internet connections (w/o servers)
> > Proto Recv-Q Send-Q Local Address           Foreign Address         State
> > tcp        0      1 HOMER_GENTOO64.PHHE:ftp 212-87-13-68.sds.:40202
> > FIN_WAIT1
> >
> > Active UNIX domain sockets (w/o servers)
> > Proto RefCnt Flags       Type       State         I-Node Path
> > unix  2      [ ]         DGRAM                    975
> > @/org/kernel/udev/udevd
> > [...]
> > nothing interesting except the first line.
>
> So you see no SYN requests to your server on port 21
>
> > > Have you ensured rtorrent is
> > > listning on TCP 21 (in Linux you usually have to be running as root to
> > > do this)
> >
> > Yes. It runs as root (not that I would like it, maybe I should chroot
> > it...) and port 21 is rtorrent's only chance to download. So, it works.
>
> Chrooting is not going to get around needding root access to listen on
> port 21.  Plus don't you still need to be root to chroot?

Yes, but rtorrent would be jailed in that chroot, wouldn't it? Therefore it 
could break nothing but it self if it goes crazy.

> > You mean stuff like iptables? No.
>
> This is my theory but I haven't verified it.  Bittorrent clients are
> programmed to listen/connect to a range of ports by default (I think it
> starts at 6882).  Your client is connecting and saying "connect to me on
> port 21".  The other clients see this but it's not in their IP range so
> they refuse to connect to you.  You might be able to tell your client to
> listen on tcp/21 but that doesn't mean everyone else has told their
> clients to connect.
>
> But if you are sure this *has* worked then that would make my theory
> incorrect.  Like I said I've never verified it, but that seems like the
> likely scenario.
>
> The other scenario is if you're not even seeing SYN requests is that
> requests are being blocked to your computer from that port, possibly by
> your ISP.  But again if this were the case then it should also be the
> case for Windows, Knoppix, etc.
>
> Can you verify your claim (i.e. go into knoppix or whatever, run
> rtorrent on tcp/21 and verify via netstat that clients are connecting to
> you on that port)?
>

I'll verify it as soon as I can reboot again (I'm currently emerging a lot of 
stuff in three chroots - what a headache...). Maybe my ISP changed his 
policies in the last few months ...

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] No torrent upload

[Florian Philipp]

[-- Attachment #1: Type: text/plain, Size: 1500 bytes --]

Am Dienstag 12 Juni 2007 16:53 schrieb Hans-Werner Hilse:
> Hi,
>
> On Tue, 12 Jun 2007 16:27:35 +0200 Florian Philipp
>
> <f.philipp@addcom.de> wrote:
> > > But if you say it works on other setups then it should work also
> > > with Gentoo.  Have you tried running netstat?
> >
> > netstat
> > Active Internet connections (w/o servers)
>
>                               ^^^^^^
> try "netstat -a". (and possibly "netstat -an", or just "netstat -tan",
> which will only show TCP connections.)
>
> -hwh


dsl@HOMER_GENTOO64 ~ $ netstat -a
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0      0 localhost:783           *:*                     LISTEN
tcp        0      0 *:ftp                   *:*                     LISTEN
tcp        0      0 localhost:ipp           *:*                     LISTEN
tcp        0      0 HOMER_GENTOO64.PH:55957 pop.tiscali.de:pop3     TIME_WAIT
tcp        0      0 HOMER_GENTOO64.PH:55958 pop.tiscali.de:pop3     TIME_WAIT
tcp        0      0 HOMER_GENTOO64.PH:34303 pop.addcom.de:pop3      TIME_WAIT
tcp        0      0 HOMER_GENTOO64.PH:34304 pop.addcom.de:pop3      TIME_WAIT
udp        0      0 *:ipp                   *:*

Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State         I-Node Path
unix  2      [ ACC ]     STREAM     LISTENING     
8380   /var/run/dbus/system_bus_socket

[...]

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] No torrent upload

[Hans-Werner Hilse]

Hi,

On Tue, 12 Jun 2007 17:17:04 +0200 Florian Philipp
<f.philipp@addcom.de> wrote:

> tcp  0  0  *:ftp     *:*   LISTEN

That's it. Now better make sure that you were right when you stated
your provider doesn't block it. BTW, if I as a provider had a no file
sharing policy, I'd definitely block Port 21. Maybe I would leave Port
20 open (ftp-data), but on Port 21 only the ftp server is supposed to
listen, not really the client.

The other clients are supposed to use whatever port you specify, BTW.
I'm using 50000-50400 myself, and others work fine, too.

If you want to know whether incoming connections reach your site at all
(not taking server software and firewall into account), run
"tcpdump -vvns 1600 dst port 21" (I guess it wouldn't reveal anything
at all).

You're not by chance behind a router?

-hwh
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] No torrent upload

[Florian Philipp]

[-- Attachment #1: Type: text/plain, Size: 2141 bytes --]

Am Dienstag 12 Juni 2007 17:36 schrieb Hans-Werner Hilse:
> Hi,
>
> On Tue, 12 Jun 2007 17:17:04 +0200 Florian Philipp
>
> <f.philipp@addcom.de> wrote:
> > tcp  0  0  *:ftp     *:*   LISTEN
>
> That's it. Now better make sure that you were right when you stated
> your provider doesn't block it. BTW, if I as a provider had a no file
> sharing policy, I'd definitely block Port 21. Maybe I would leave Port
> 20 open (ftp-data), but on Port 21 only the ftp server is supposed to
> listen, not really the client.
>
> The other clients are supposed to use whatever port you specify, BTW.
> I'm using 50000-50400 myself, and others work fine, too.
>
> If you want to know whether incoming connections reach your site at all
> (not taking server software and firewall into account), run
> "tcpdump -vvns 1600 dst port 21" (I guess it wouldn't reveal anything
> at all).
>
> You're not by chance behind a router?
>
> -hwh

dsl@HOMER_GENTOO64 ~ $ sudo tcpdump -vvns 1600 dst port 21
Password:
tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 1600 
bytes
18:37:12.543965 IP (tos 0x8, ttl  64, id 27970, offset 0, flags [DF], proto: 
TCP (6), length: 60) 192.168.1.2.45269 > 89.57.3.60.21: S, cksum 0x8013 
(correct), 1866573467:1866573467(0) win 5840 <mss 1460,sackOK,timestamp 
6212569 0,nop,wscale 5>
18:37:12.544426 IP (tos 0x8, ttl  64, id 17977, offset 0, flags [DF], proto: 
TCP (6), length: 60) 192.168.1.2.45288 > 89.57.3.60.21: S, cksum 0x98ab 
(correct), 1867615712:1867615712(0) win 5840 <mss 1460,sackOK,timestamp 
6212569 0,nop,wscale 5>
19:07:52.537852 IP (tos 0x8, ttl  64, id 17709, offset 0, flags [DF], proto: 
TCP (6), length: 60) 192.168.1.2.36423 > 89.57.3.60.21: S, cksum 0x3a4e 
(correct), 3820262832:3820262832(0) win 5840 <mss 1460,sackOK,timestamp 
6672541 0,nop,wscale 5>
[...]
27 packets captured
54 packets received by filter
0 packets dropped by kernel

In the past Tiscali (my ISP) did not stop file sharing, they just slowed it 
down to 10-12k.

Yes, I am behind a router, NAT is activated, UPnP deactivated. That was no 
problem up to now...

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] No torrent upload

[Hans-Werner Hilse]

Hi,

On Tue, 12 Jun 2007 20:09:06 +0200
Florian Philipp <f.philipp@addcom.de> wrote:

> In the past Tiscali (my ISP) did not stop file sharing, they just slowed it 
> down to 10-12k.

Hm, OK. So the port doesn't really matter here... Your tcpdump excerpt
didn't show any incoming connection -- just as I expected.

> Yes, I am behind a router, NAT is activated, UPnP deactivated. That was no 
> problem up to now...

Is there still a forwarding rule configured that routes incoming
traffic on port 21 to 192.168.1.2? Check if it works, e.g. using netcat:
$ nc -l -p 21
and in another terminal
$ nc <your external IP> 21
(if you really want to make shure, then do the latter step from a
different machine on the internet outside your LAN)
and see whether data is getting through (type some garbage and press
ENTER, then abort using CTRL-C).

-hwh
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] No torrent upload

[Albert Hopkins]

On Tue, 2007-06-12 at 20:09 +0200, Florian Philipp wrote:
> dsl@HOMER_GENTOO64 ~ $ sudo tcpdump -vvns 1600 dst port 21
> Password:
> tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size
> 1600 
> bytes
> 18:37:12.543965 IP (tos 0x8, ttl  64, id 27970, offset 0, flags [DF],
> proto: 
> TCP (6), length: 60) 192.168.1.2.45269 > 89.57.3.60.21: S, cksum
> 0x8013 
> (correct), 1866573467:1866573467(0) win 5840 <mss
> 1460,sackOK,timestamp 
> 6212569 0,nop,wscale 5>
> 18:37:12.544426 IP (tos 0x8, ttl  64, id 17977, offset 0, flags [DF],
> proto: 
> TCP (6), length: 60) 192.168.1.2.45288 > 89.57.3.60.21: S, cksum
> 0x98ab 
> (correct), 1867615712:1867615712(0) win 5840 <mss
> 1460,sackOK,timestamp 
> 6212569 0,nop,wscale 5>
> 19:07:52.537852 IP (tos 0x8, ttl  64, id 17709, offset 0, flags [DF],
> proto: 
> TCP (6), length: 60) 192.168.1.2.36423 > 89.57.3.60.21: S, cksum
> 0x3a4e 
> (correct), 3820262832:3820262832(0) win 5840 <mss
> 1460,sackOK,timestamp 
> 6672541 0,nop,wscale 5>
> [...]
> 27 packets captured
> 54 packets received by filter
> 0 packets dropped by kernel
> 
It's been a while since I looked at tcpdump, but this looks like
yourself connecting *to* an FTP server (or I should say an external
connection on port 21).

> In the past Tiscali (my ISP) did not stop file sharing, they just
> slowed it 
> down to 10-12k.
> 
But they don't slow down FTP?  FTP *is* (client/server) file sharing.

--
Albert W. Hopkins

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] No torrent upload

[Florian Philipp]

[-- Attachment #1: Type: text/plain, Size: 1838 bytes --]

Am Dienstag 12 Juni 2007 21:25 schrieb Albert Hopkins:
> On Tue, 2007-06-12 at 20:09 +0200, Florian Philipp wrote:
> > dsl@HOMER_GENTOO64 ~ $ sudo tcpdump -vvns 1600 dst port 21
> > Password:
> > tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size
> > 1600
> > bytes
> > 18:37:12.543965 IP (tos 0x8, ttl  64, id 27970, offset 0, flags [DF],
> > proto:
> > TCP (6), length: 60) 192.168.1.2.45269 > 89.57.3.60.21: S, cksum
> > 0x8013
> > (correct), 1866573467:1866573467(0) win 5840 <mss
> > 1460,sackOK,timestamp
> > 6212569 0,nop,wscale 5>
> > 18:37:12.544426 IP (tos 0x8, ttl  64, id 17977, offset 0, flags [DF],
> > proto:
> > TCP (6), length: 60) 192.168.1.2.45288 > 89.57.3.60.21: S, cksum
> > 0x98ab
> > (correct), 1867615712:1867615712(0) win 5840 <mss
> > 1460,sackOK,timestamp
> > 6212569 0,nop,wscale 5>
> > 19:07:52.537852 IP (tos 0x8, ttl  64, id 17709, offset 0, flags [DF],
> > proto:
> > TCP (6), length: 60) 192.168.1.2.36423 > 89.57.3.60.21: S, cksum
> > 0x3a4e
> > (correct), 3820262832:3820262832(0) win 5840 <mss
> > 1460,sackOK,timestamp
> > 6672541 0,nop,wscale 5>
> > [...]
> > 27 packets captured
> > 54 packets received by filter
> > 0 packets dropped by kernel
>
> It's been a while since I looked at tcpdump, but this looks like
> yourself connecting *to* an FTP server (or I should say an external
> connection on port 21).
>
> > In the past Tiscali (my ISP) did not stop file sharing, they just
> > slowed it
> > down to 10-12k.
>
> But they don't slow down FTP?  FTP *is* (client/server) file sharing.
>
> --
> Albert W. Hopkins

It seems they try to recognize some kind of signature/footprint/whatever which 
is typical for file sharing. Apparently they don't check ports that are 
heavily used due to performance issues or false positives.

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] No torrent upload

[Florian Philipp]

[-- Attachment #1: Type: text/plain, Size: 1183 bytes --]

Am Dienstag 12 Juni 2007 21:12 schrieb Hans-Werner Hilse:
> Hi,
>
> On Tue, 12 Jun 2007 20:09:06 +0200
>
> Florian Philipp <f.philipp@addcom.de> wrote:
> > In the past Tiscali (my ISP) did not stop file sharing, they just slowed
> > it down to 10-12k.
>
> Hm, OK. So the port doesn't really matter here... Your tcpdump excerpt
> didn't show any incoming connection -- just as I expected.
>
> > Yes, I am behind a router, NAT is activated, UPnP deactivated. That was
> > no problem up to now...
>
> Is there still a forwarding rule configured that routes incoming
> traffic on port 21 to 192.168.1.2? Check if it works, e.g. using netcat:
> $ nc -l -p 21
> and in another terminal
> $ nc <your external IP> 21
> (if you really want to make shure, then do the latter step from a
> different machine on the internet outside your LAN)
> and see whether data is getting through (type some garbage and press
> ENTER, then abort using CTRL-C).
>
> -hwh

Thanks hwh! I really appreciate your and Albert Hopkin's help. 

It's been a long day - a bit too long for writing in English and working on 
networks. I'll try it tomorrow. 

Regards

Florian Philipp

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]