[ previous ] [ next ] [ threads ]
 From:  "Chad R. Larson" <clarson at eldocomp dot com>
 To:  Kris Maglione <bsdaemon at comcast dot net>
 Cc:  Fernando Costa <cusquinho at gmail dot com>, "m0n0wall dash dev at lists dot m0n0 dot ch" <m0n0wall dash dev at lists dot m0n0 dot ch>
 Subject:  Re: [m0n0wall-dev] UPNP
 Date:  Wed, 19 Oct 2005 15:01:12 -0700
Kris Maglione wrote:

> The only places that I see a good use for this are in p2p apps like
> BitTorrent (which, by the way, was not designed for movie downloads) and
> Skype (I don't know how Skype works, but I don't imagine that 2 NAT'd
> clients can communicate directly, at least without uPNP).

Skype was designed by the fine folks that brought you Kazaa, and it 
works pretty much the same.  If your system has a non-NAT'd connection 
to the net, it becomes a "super node" and accepts and sends traffic to 
other super nodes.  If the system is firewalled or NAT'd, then it will 
connect to one of the super nodes.

I found that I could blow out the m0n0wall state table if I were a super 
node, especially when my Windoze box would crash leaving unclosed 
connections.  We used sysctl to lower the TCP timeout value from its 
default ten days(!) to a couple of hours.

<aside> Anyone who expects a connection to be up and running after 10 
days of being idle ought to have keepalive on.</aside>

Chad R. Larson (CRL22)    chad at eldocomp dot com
   Eldorado Computing, Inc.   602-604-3100
      5353 North 16th Street, Suite 400
        Phoenix, Arizona   85016-3228


Information transmitted by this e-mail is proprietary to MphasiS and/or its Customers and is
intended for use only by the individual or entity to which it is addressed, and may contain
information that is privileged, confidential or exempt from disclosure under applicable law. If you
are not the intended recipient or it appears that this mail has been forwarded to you without proper
authority, you are notified that any use or dissemination of this information in any manner is
strictly prohibited. In such cases, please notify us immediately at mailmaster at mphasis dot com and
delete this mail from your records.