pf or ipf rules to allow p2p Limewire through

[Bernt Hansson]

Fbsd1 said the following on 2008-11-28 07:24:
> Bernt Hansson wrote:
>> Fbsd1 said the following on 2008-11-27 09:56:
>>> What pf or ipf firewall keep-state rules needed to allow p2p 
>>> application such as limewire through? Using same firewall rules as in 
>>> handbook example.
>>
>> Put this in your /etc/ipnat.rules
>>
>> rdr rl0 0.0.0.0/0 port port# -> internal-ip port port# tcp
>> rdr rl0 0.0.0.0/0 port port# -> internal-ip port port# udp
>>
>>
>>
>>
> 
> 
> How about explaining just why this is going to allow p2p limewire work?

Read the handbook on ipfilter.
http://coombs.anu.edu.au/~avalon/

> I think you are missing the fact that limewire does not use dedicated 
> port numbers. Every session uses different port numbers and the remote 
> computers come in on different hight port numbers.

Change port# to port range, then. Or you can skip the firewall.