Network port configuration through a firewall - Resolved

[IaMaDog1914]

Hi all,

As per below I was having trouble with SABnzbd not downloading when sitting behind the Forefront Threat Management Gateway 2010 firewall.

The resolving action was to create a Network Object associated with my Computer and then re-configure the SABnzbd network policy to listen to the Computer on port 119 instead of the Internal network.

Thanks to all who assisted!

Cheers,


============================================================================================

Hi,

I searched and could not find what I was after, hopefully it is not a case of being a poor searcher.

I have a firewall where I am, not local, that cannot just say allow SABnzbd.exe; what are all the ports or used going out and in?

Thanks in advance,

IaMaDog1914

[sander]

most used port for news connections:

ntp 119/tcp readnews untp # USENET News Transfer Protocol
nntps 563/tcp snntp # NNTP over SSL

[IaMaDog1914]

Hi Sander,

Thanks, 119 is enabled but it is not working and I am presuming that SABnzbd requires other ports to be configured.

For example, ICQ requires 4000 UDP send and 0 TCP in, 1025-5000 TCP in/out and 0 UDP receive.

Thanks,

IaMaDog1914

[sander]

"I am presuming that SABnzbd requires other ports to be configured." yes, that's correct: normally it's port 8080

But: is your own SABnzbd-machine behind a firewall that is not yours, and you want to access SABnzbd remotely?

Do you have local access to the machine running SABnzbd? If so, is SABnzbd running OK? Can it download?

[shypike]

Is it just a regular router-with-firewall or a local software firewall?
Or are you talking about a proxy (like companies and some schools have)?
SABnzbd does not support proxies.

For simple firewalls (routers and Windows Firewall) outside traffic
(so just downloading) is always possible.
Some more sophisticated firewalls require you to enable ALL traffic per program.

SABnzbd's user interface presents itself as a web server.
Many firewalls don't like that and you need to enable port 8080 and SABnzbd.exe itself.

If you want to expose SABnzbd's UI to the internet,
then you need to setup port-forwarding on your router.
If you are not familiar with that, don't try!

[IaMaDog1914]

"I am presuming that SABnzbd requires other ports to be configured." yes, that's correct: normally it's port 8080

But: is your own SABnzbd-machine behind a firewall that is not yours, and you want to access SABnzbd remotely?

Do you have local access to the machine running SABnzbd? If so, is SABnzbd running OK? Can it download?

Hi sander,

The firewall is on my LAN, i.e. I am the admin. Port 8080 is local, and currently I have mine set on 8095 and it works i.e. downloads successfully when I configure a gateway of the router's IP in DHCP and have a connection between the switch and the router. This is not how I want the network as I then cannot monitor for malware, as it was only after the firewall went in that I discovered that AltBinz was spoofing IP's and communicating in ways not advertised.

The firewall is MS Threat Management Gateway 2010.

Sorry for the vagueness, but to clarify, SABnzbd works as advertised, very impressive product, but it is not downloading when it does not have a direct connection to the internet.

[sander]

Sorry, I don't understand what you're asking for nor what works / doesn't work for you.

As said by Shypike: if you're asking for remote management of SABnzbd, it's probably wiser not to do that.

[IaMaDog1914]

I do not want remote management; at this time anyway. That will come later with the HTPC.

SABnzbd is installed on my personal computer, I can access SABnzbd and SABnzbd downloads when my personal computer has a direct connection to the internet.

SABnzbd does not download when sitting behind the firewall; the firewall is "Forefront Threat Management Gateway 2010"

I wish to know what ports SABnzbd  needs to have entered into the firewall that will allow it to download when sitting behind the firewall.

As previously noted, it is not always just the obvious port that needs to be configured.

Thanks,

IaMaDog1914

[IaMaDog1914]

Alternatively, can SABnzbd be configured to use the router, that is, can I configure SABnzbd to access the router directly by defining the gateway IP in a config file?


Thanks,

IaMaDog1914

[IaMaDog1914]

bump... hoping one of the developers could advise which ports are being used and need to be configured in the firewall; thanks.

Surely someone must know?

Cheers,

IaMaDog1914

[shypike]

SABnzbs always uses an internal IP address of your local network.
For outside access you need to setup port-forwarding in your router.
You tell the router to send all incoming traffic to (e.g.) port 8080
to the internal address (e.g.) 192.168.1.4:8080.
Assuming that the system SABnzbd is running on has address 192.168.1.4