Brandon Holland wrote:

> Let me clarify: m0n0 even logs my dropped packets.  Now, I'm not using
> bittorrent either, but the concept is the same.
> 
> By the way, I should have finished reading your message before I asked
> if you had tried any other firewalls :)

Logged dropped packets? Well if they are logged then there was a reason 
to drop them - a block rule (or no matching pass rule). Common reason:

- TCP packets that ipfilter considers to be out-of-window or otherwise 
unacceptable (it checks various things such as flags, 3-way handshake 
adherance, sequence/ACK numbers, etc.) and that therefore don't match an 
entry in the state table but don't have only SYN set either --> blocked 
(stateful filtering!)

Otherwise you'll have to use the rule numbers in the logs to find out 
which rule actually caused the packet to be dropped (ipfstat -hnio on 
status.php).

And to those with asymmetric links: remember that any uncapped upload 
can easily "kill" your connection (render it extremely slow) - use the 
traffic shaper or limit the outbound speed in your P2P filesharing tools! ;)

- Manuel