How to properly open port through OpenSuSE firewall?

Hi, all:

I have properly configured my router to open a port for Transmission and Vuze. The OpenSuSE firewall settings are somewhat confusing, however. How do I add a port specifically for the BT protocol? I know it’s the firewall causing issues, because when I shut it down, my BT apps roar to life, and die with a whimper when I turn it back on. In Ubuntu, opening a port in the router is automatically configured in the firewall; that is apparently not the case with this distro.

So, when I go to Yast Firewall, I see “allowed services” under the tabs available. When I hit that tab, I see a dropdown menu that contains services such as NetBios Server and Samba Server. Am I choosing one of those available and adding a port to it? Am I adding a custom service via the Advanced settings, and if so, why isn’t there a way to label the service so that it shows up under allowed services?

You are right, it’s under advanced settings.

I get that it’s under advanced settings. HOW do I set them?

Just enter a range like 6881:6889 in TCP and you should be fine.

If it was taht simple, I would already have fixed it. My question is more specific than that: I need to (a) create a custom allowed service, (b) assign it the TCP/UDP port number I opened in my router, and (c) check that it’s actually open. I can handle the second and third if I can figure out how to create a custom service. ‘Just add the port number’ doesn’t tell me how to create the custom service so I CAN enter the port number.

Sorry, I can’t help you with this. What would be the difference between a range of open ports and an extra service?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

That will work for some defined services, but BitTorrent can use any port
for transfers so you need to define a port (or ports) explicitly. Click
on ‘Advanced’ and then enter the TCP/UDP port(s) you would like open.

Good luck.

On 09/27/2010 12:06 PM, tarahmarie wrote:
>
> Hi, all:
>
> I have properly configured my router to open a port for Transmission
> and Vuze. The OpenSuSE firewall settings are somewhat confusing,
> however. How do I add a port specifically for the BT protocol? I know
> it’s the firewall causing issues, because when I shut it down, my BT
> apps roar to life, and die with a whimper when I turn it back on. In
> Ubuntu, opening a port in the router is automatically configured in the
> firewall; that is apparently not the case with this distro.
>
> So, when I go to Yast Firewall, I see “allowed services” under the tabs
> available. When I hit that tab, I see a dropdown menu that contains
> services such as NetBios Server and Samba Server. Am I choosing one of
> those available and adding a port to it? Am I adding a custom service
> via the Advanced settings, and if so, why isn’t there a way to label the
> service so that it shows up under allowed services?
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=Gx9g
-----END PGP SIGNATURE-----

(1) I wanted to specify a BT service that I can enable/disable through the firewall, but oh well. I guess that functionality isn’t extant for OpenSuSE yet.

(2) I allowed the relevant port (and to that earlier poster–NEVER use a 6000-level port for the BT protocol. They’re default and monitored; use something above 40K), and now at least Vuze is working properly.

Thanks to all; it turns out that the feature I was trying to find doesn’t actually exist here yet. At least I have a port configured.

and to that earlier poster–NEVER use a 6000-level port for the BT protocol. They’re default and monitored; use something above 40K

good advice. thanks

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I’m not sure a lack of response in thirty minutes means the answer is not
known or the capability is not there.

You should be able to create your own customizations:

Go into /etc/sysconfig/SuSEfirewall2.d/services and create a file similar
to the TEMPLATE and then customize it with the following lines

Name: Vuze

Description: opens ports for bittorrent stuff in order to allow file

transfers, etc.

space separated list of allowed TCP ports

TCP=“45333”

Good luck.

On 09/27/2010 01:36 PM, tarahmarie wrote:
>
> supertimorplusfort;2229265 Wrote:
>> Sorry, I can’t help you with this. What would be the difference between
>> a range of open ports and an extra service?
>
> (1) I wanted to specify a BT service that I can enable/disable through
> the firewall, but oh well. I guess that functionality isn’t extant for
> OpenSuSE yet.
>
> (2) I allowed the relevant port (and to that earlier poster–NEVER use
> a 6000-level port for the BT protocol. They’re default and monitored;
> use something above 40K), and now at least Vuze is working properly.
>
> Thanks to all; it turns out that the feature I was trying to find
> doesn’t actually exist here yet. At least I have a port configured.
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=GH9C
-----END PGP SIGNATURE-----

EXCELLENT. Thanks–that was the answer I was looking for !