eMule, Kad, NAT, and Reboots in D-Link

eMule, Kad, NAT, and Reboots in D-Link http://www.dslreports.com/forum/r12602610 en Mon, 01 Dec 2008 21:04:07 EDT Mon, 01 Dec 2008 21:04:07 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,13335053 Bwuutje : How hard is it to do a search in this forum ?

»[Util] "D-Link Connection Monitor" utility

Bwuutje.]]> http://www.dslreports.com/forum/remark,13335053 Thu, 05 May 2005 09:02:11 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,13335026 anon : Where did u get that little app from??
I like it and I want it
Would u be so kind to pass the link?]]> http://www.dslreports.com/forum/remark,13335026 Thu, 05 May 2005 08:53:48 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,13315408 Talon88 : :::

P.S. :
FW Ver. 2.52b60
I don't use Super-G Static or Dynamic.
I use BT Daily as well. :D

:::

]]> http://www.dslreports.com/forum/remark,13315408 Mon, 02 May 2005 21:39:20 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,13311579 anon : Latest firmware
DNS Relay Disabled
DMZ Host Enabled
Discard PING from WAN side Disabled
uPnp Disabled
Gaming Mode Enabled
VPN Pass-through all enabled
Wan Select auto
ipconfig \renew

WinXP
firewall on
emule unblocked

eMule
ports : TCP: 9662 UDP:9672
download limit: 96
upload limit: 10
KAD: Off
reconnect on loss: on
Max sources/file: 400
Max connections: 300
Razorback2 is the onlyone in static list
Autoconnect to server in static list only: on

Seems to be working fine]]> http://www.dslreports.com/forum/remark,13311579 Mon, 02 May 2005 13:53:29 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,13206070 KadOff : I completely agree with Your "But maybe...", but it could be interesting to test this router having Watch Dog = 0 in CHKLIST anyway or try less strict according to security special firmware.]]> http://www.dslreports.com/forum/remark,13206070 Tue, 19 Apr 2005 07:08:17 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,13206030 Talon88 : :::

But maybe if WatchDog is not sitting there (WatchDog=0),
the router just hang like other brand. If so, it's
better to reboot itself instead of the router just
stand still....

:::
--
[=Talon88=]
»DI-624 Firmware update w/ Crash Recovery Step by S --
»[Info] Some Clue about DI-624 Reboot]]> http://www.dslreports.com/forum/remark,13206030 Tue, 19 Apr 2005 06:50:09 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,13205960 KadOff : I think Gaming mode being enabled turns on NAPT (possible for UDP only), I had no idea DI-624 supports it, but this could explain my previous test results.

DI-624 C3; 2.52 B46; 4672 UDP forwarded throught Virtual server.

Gaming mode enabled: Default eMule UDP port is 4672 and most of the time I have only one UDP entry in NATLIST 0.0.0.0:0 - eMule internal IP:4672 (0.0.0.0:0 I read as any:any).

Gaming mode disabled: Lots of UDP entries in NATLIST with different IP's and ports - eMule internal IP:4672.

Unlikely NAPT usage for UDP will overfill NAT table and timeouts not the cause of router reboot in this case.

I can assume, that router reboots caused by the amount of UDP packets router receiving in certain time (short one). Kad could be a reason to increase such volume to recognizable by router as attack state causing "watch dog" style reboot. It could be interesting to test this router having Watch Dog = 0 in CHKLIST.

I hope I undertood DI-624 reboot issues right.]]> http://www.dslreports.com/forum/remark,13205960 Tue, 19 Apr 2005 06:08:18 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,13166625 ERSTD3 : Dl-604 rev A2
Firmware 2.20
Gaming mode on
DMZ on
BT works pretty good, a little bit slow, but can't know for sure if it's router or seed(s) that holding their UL speed...
ed2k works with out reboots, don't know about speed, cause i tend to get rare files on emule
when KAD is on, reboots in next 1 or 2min...
Any news on this bloody bug of D-Link...?
Thanks in advance...]]> http://www.dslreports.com/forum/remark,13166625 Thu, 14 Apr 2005 04:39:59 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,13052602 fade11 : I don't really care about getting KAD to work, I have lived without it for so long, I can continue to.

It's the general Emule speeds after the router gets a ping of death, it just goes to crap...]]> http://www.dslreports.com/forum/remark,13052602 Thu, 31 Mar 2005 11:51:34 EDT Re: eMule, Kad, NAT, and Reboots http://www.dslreports.com/forum/remark,13023006 anon : Sounds like there might be a solution in finding some way to reduce the amount of time that the router 'holds' onto a UDP connection. This thread has a bit to say about this - »forum.emule-project.net/lofivers···687.html - but my DI-624+ doesn't have this option. Sounds like firmware update time with a few new options.

epigout]]> http://www.dslreports.com/forum/remark,13023006 Mon, 28 Mar 2005 06:35:44 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12949172 maciste : Here you will find old firmware for DI-624 rev.C

»ftp://ftp.dlink.com/Gateway/di624_revC/Firmware/]]> http://www.dslreports.com/forum/remark,12949172 Sat, 19 Mar 2005 11:07:37 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12878924 KadOff : There are so many factors/things in eD2K (since you turned KAD OFF already) network according download speed as you can't even imagine.]]> http://www.dslreports.com/forum/remark,12878924 Thu, 10 Mar 2005 14:24:10 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12877827 fade11 : I dunno what it is, with the computer directly connected to the modem, I get far better speeds of Emule or BT. But with the router in, with KAD disabled, and nothing seemingly going wrong (stable) i just don't get the speeeds at all.]]> http://www.dslreports.com/forum/remark,12877827 Thu, 10 Mar 2005 11:58:02 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12873607 Tsume : Info on gaming mode:

»azureus.aelitis.com/wiki/index.p···netyNine]]> http://www.dslreports.com/forum/remark,12873607 Wed, 09 Mar 2005 21:50:06 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12870620 Talon88 : :::

When [Gaming mode enabled], SPI is off.

:::]]> http://www.dslreports.com/forum/remark,12870620 Wed, 09 Mar 2005 17:00:04 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12867264 KadOff : Can you check eMule Statistics page -> Transfer -> Downloads -> Session -> Download Sessions -> Successful/Failed Download Sessions entries? What are your numbers in percents?]]> http://www.dslreports.com/forum/remark,12867264 Wed, 09 Mar 2005 10:10:18 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12867219 KadOff : I have read D-Link knowledge base about SPI in DI-624. It is from there: As an added security measure against port scanning, stateful inspection firewalls close off ports until connection to the specific port is requested. Here is my example. Running eMule 5 client uploading from me and I downloading from 3 sources (~3 Kb each). Now I getting Ping of Death Detect message in the router's log and still uploading/downloading at same speeds as before. No drop outs, no interruption. Maybe I don't understand this issue completely. Maybe some settings involved. Personally I have Gaming mode enabled at this moment, since there are some information in this thread about SPI and Gaming mode dependence. Could be it. Will try to catch the difference with Gaming mode disabled someday.]]> http://www.dslreports.com/forum/remark,12867219 Wed, 09 Mar 2005 10:03:31 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12866705 fade11 : I have the UK version of the 624 router(624+ I think), but even with the different firmware and country, I'm getting the exact same problem as other people in here.

Firstly, I Don't care about KAD. I like emule without it, just fine. So I turn it off to stop the router periodically rebooting....all good so far.

But nope, someone's onto something here, when you get a ping of death "attack" on the router (normally happens within 5 minutes) it blocks a port, and emule stops downloading. Might get 5kb/sec out of it once in a while, but that's it. Usually 0kb/sec download.

Rebooting the router, resets this, but it only lasts for 30 seconds - a few muntes before the port gets "attacked" and blocked again.

Is there really no solution to this? I'm very close to calling D-Link Tech Support for a return authorisation. Sick of this.

What wireless Router does work fine with Emule / BTorrent?]]> http://www.dslreports.com/forum/remark,12866705 Wed, 09 Mar 2005 08:50:54 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12862803 funchords :

said by KadOff

:

Theories, theories... It is fine then theories will create some productive results according DI-624 C3 usage. I can't find the solution to avoid router reboots using eMule with Kad ON at this moment. No offence, but I'm stuck.

You -- are not alone.

But you have been a big help in this forum and also in providing information on this particular problem.

If Kad is the only functionality that is prevented --

HOLY CRAP, MT SAINT HELENS JUST BLEW as I type this.

-- anyway, if KAD is the only only thing that is prevented, it may never get fixed.
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12862803 Tue, 08 Mar 2005 20:36:15 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12860795 KadOff : Theories, theories... It is fine then theories will create some productive results according DI-624 C3 usage. I can't find the solution to avoid router reboots using eMule with Kad ON at this moment. No offence, but I'm stuck.]]> http://www.dslreports.com/forum/remark,12860795 Tue, 08 Mar 2005 17:15:41 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12854691 funchords :

said by KadOff

:

It were same amount (300-500 total; 3-5 UDP) of entries in NATLIST.TXT during reboots. Not even close to 2000. eMule reports about 100 simultaneous connections, Kad already went to 730 contacts about 7-15 min before reboot.

So it is even more interesting to know how Kad causing reboots.

Yep, I think the UDP theory is difficult to accept. I also found (not using eMule, but with other connections) that the NAT table does not hold UDP connections for a long time nor does it accumulate to anywhere close to maximum.
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12854691 Mon, 07 Mar 2005 23:22:49 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12852713 Tsume : I use azureus, rev C3. Router resets, contrary to whate Trip said.]]> http://www.dslreports.com/forum/remark,12852713 Mon, 07 Mar 2005 18:56:56 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12849601 TripmasterG : I have the DI-624 C3 also and I have no problems with bittorrent. I use the Azureus client so that may be something to try out. With enough connections I can get 400+kB/s for a single torrent. In case you haven't tried it yet try using a different port. The default was fine for me but I switched it to 50815 anyway.]]> http://www.dslreports.com/forum/remark,12849601 Mon, 07 Mar 2005 11:32:14 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12848504 anon : Wonderful tool.

I've been playing with eMule having Kad OFF for 16 days. I put lots of files to be downloaded, creating lots of sources (~12000) and connections (eMule reports about nearly 900 simultaneous connections some times). Limits in eMule were highly exceeded (1000 sources, 2000 max connections, 100 connections in 5sec, 450 half-open), but no router reboot. DNS relay ON; only logging system activities, not attacks; 2.52 co.il; TCPIP.SYS patch to hold 500 half-open connections.

Lets come back to NATLIST.TXT reader. First of all my first discovery was about Gaming mode. If it is disabled I getting all UDP connections in NATLIST.TXT. My NAT list increased from usual ~500 entries, to huge amount ~2000 (~700 were UDP). I have read somewhere about hard limit of 2500 entries in some D-Link products, but I wasn't able to push NAT entries over 2000. No router reboot. Having Gaming mode enabled changes the picture, Reader reports only 2-5 UDP entries, one of them 0.0.0.0:0 - my IP:my eMule UDPport, rest with different ports and total entries in the NATLIST.TXT is about ~500. No router reboot.

Now I turned Kad ON. Three reboots in 4 hours. Gaming mode enabled, DNS relay off/on (doesn't matter), only system activities in the router log. It were same amount (300-500 total; 3-5 UDP) of entries in NATLIST.TXT during reboots. Not even close to 2000. eMule reports about 100 simultaneous connections, Kad already went to 730 contacts about 7-15 min before reboot.

So it is even more interesting to know how Kad causing reboots.]]> http://www.dslreports.com/forum/remark,12848504 Mon, 07 Mar 2005 07:41:31 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12751165 funchords :

said by KadOff:

It is interesting to know how Kad causing reboots anyway.

The story goes that since UDP is connectionless, the NAT table fills up and each of these UDP connections has to time out.

I'm beginning to have my doubts about that theory. Scree's handy NATLIST.TXT reader / Connection Monitor is showing me that some TCP connections actually hang around in the NATLIST longer than the UDP connections.

If I used eMule with any regularity, I'd probably have sniffed this out by now. But since I don't...

Robb
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12751165 Wed, 23 Feb 2005 18:14:53 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12745904 anon : I can't confirm that reboots caused by Ping of Death, I got lots of pages in router log about Ping of Death Attacks running eMule with Kad Off for a week (6 days 23:31), no reboot still. It is interesting to know how Kad causing reboots anyway. Because UDP used to exchange sources or whatever extended protocol is up to, but UDP used by Kad meanwhile. Disabling UDP in eMule means disabling the Kad. So here is so experience of mine (The network is dinamically change so during some runs I downloaded some files and set some new to be downloaded; uploading files remains the same amount plus freshly downloaded):

Casual usage:

1 - 6 files downloading (2000+ sources); eD2K/Kad on; first reboot after 7-10 hours, during the further run (about 5 days) I got a number of router reboots (17). (nodes.dat not new).

Stress test:

2 - 30 files downloading (8000+ sources); eD2K/Kad on; instant reboot, less than a second; another one as soon as I connect to ISP (Dynamic PPPoE set in D-Link router's WAN page to connect); and so on... (nodes.dat is empty/new).
3 - same as before; eD2k on/Kad off. Still runs... No reboots...

DNS relay - disabled, Gaming Mode - enabled, uPnP - disabled; 2.52 co.il; other stats from my previous posts.

Still experimenting and looking for feedback...]]> http://www.dslreports.com/forum/remark,12745904 Wed, 23 Feb 2005 06:32:30 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12743237 funchords : Those are really causing reboots?

I know they cause the log to be mailed -- but the fact the log is getting mailed is telling me that the router is handling it.

BTW, with eMule, I've found that it's usually the same handful of IPs that cause this "Ping of Death" to come up. I think it's a hacked version of eMule -- but other than these scary looking messages, I haven't found any real issues related to them.
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12743237 Tue, 22 Feb 2005 21:34:48 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12740511 ikester59 : Not running kad, and the reboots have popped up again.
Feb/22/2005 15:04:44 Ping of Death Detect 217.186.22.234:32968 24.197.249.33:27015 Packet Dropped
Feb/22/2005 14:54:37 Ping of Death Detect 84.178.93.198:33323 24.197.249.33:27015 Packet Dropped
Feb/22/2005 14:48:52 Ping of Death Detect 220.255.81.45:33407 24.197.249.33:27015 Packet Dropped
working on it]]> http://www.dslreports.com/forum/remark,12740511 Tue, 22 Feb 2005 16:19:46 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12684876 anon : Turning DNS Relay to disabled doesn't help either. Router still reboots under Kad load.]]> http://www.dslreports.com/forum/remark,12684876 Wed, 16 Feb 2005 06:57:12 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12682071 funchords : This is great news!

If you wouldn't mind -- If you return to the old adapter, do the reboots return? Are you running KAD? Can you determine how many simultaneously connected users you are having?
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12682071 Tue, 15 Feb 2005 21:40:29 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12681830 ikester59 : Get this, I am new to this forum, and found an unreal fix for the apparent dropout problems. I simply found a 5V 2A power supply and my DI 624 has been happily connected since. I suffered 2 days of setting/resetting my emule, router, etc, until i just plugged it in with a different adapter (!) I am running rev b 1.28.
NO drops at all in last 30 hours, getting FAST speeds on emule.
Try the adapter if you are ready to toss the thing, good luck!]]> http://www.dslreports.com/forum/remark,12681830 Tue, 15 Feb 2005 21:16:29 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12681746 anon : I'm having same sort of problem with a DI-524...if I turn Kad on in emule, I get reboots. If I turn it off, everything's fine... I used to use edonkey2k and never had any problems... What is Kad exactly and do I need it?]]> http://www.dslreports.com/forum/remark,12681746 Tue, 15 Feb 2005 21:08:48 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12679498 funchords : Hi ComPas,

Your English is fine.

You should use Advanced / Virtual Server to open a P2P port. Here are the step-by-step instructions.
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12679498 Tue, 15 Feb 2005 17:38:18 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12679290 anon : I use eDonkey and aMule on MAC OS X. No reboot with up to 500 connections.
Any idea how to open port (4662 - p2p , sure). The applications rules do not work. Or application name should be precisely specified?
Thanks!
P.S, sorry , English is not native :) ]]> http://www.dslreports.com/forum/remark,12679290 Tue, 15 Feb 2005 17:15:52 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12671819 anon : I can turn off attacks in the log settings but that only spruces up my log files. I still can't download anything with bittorrent through the router even after doing what is recommend so the ports wont be blocked. I just have to connect directly to the cable modem if i want to download. Oh well.

For anyone with the same problem: I have the DI-624 with the single antenna (latest model) and when I use bittorrent (I use G3 torrent but I've tried others too) it usually stays at 0 kb/s for awhile or goes up to 5 or so. Only IP numbers of people on the list shows in the logs so I know its bittorrent. I think there are more problems than just the ping of death because hardly anything downloads/uploads and i don't get a ton of ping of death messages, hardly any in fact. When I go direct to the modem it is fast so I know its the router. I have even left it on overnight with the router connected and get 10kb/s at most instead of 40 or more when directly connected.]]> http://www.dslreports.com/forum/remark,12671819 Mon, 14 Feb 2005 20:43:22 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12668154 anon : First reboot after 14 hours. There are some changes in Kad code in eMule 0.45 causing Kad being firewalled very often.]]> http://www.dslreports.com/forum/remark,12668154 Mon, 14 Feb 2005 13:45:35 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12649774 anon : eMule 0.45a with Kad OFF was running for 3+ days not causing router reboot. Now testing eMule 0.45b with Kad ON and firmware 2.52...]]> http://www.dslreports.com/forum/remark,12649774 Sat, 12 Feb 2005 07:23:46 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12646533 funchords : Just turn off attack logging. As far as I can tell, it's as inaccurate as hell, anyway. I've never gotten anything except false hits from it.
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12646533 Fri, 11 Feb 2005 19:32:58 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12646333 anon : the same thing happens when I try to use bittorrent. in the log I get a Ping of Death on bittorrent's incoming port (6881) repeatedly. ping of death is almost 10 years old now, if it still affects OSes that would be pitiful. it is just a buffer overflow. i wish i could turn this "feature" of the router off or somehow get bittorrent to stay within the official packet size limit.]]> http://www.dslreports.com/forum/remark,12646333 Fri, 11 Feb 2005 19:08:55 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12643367 adamofwales :

said by Micke F

:

Hi!

I have borrowed a DI-614+ from a friend. (Yes, I fried my Netgear and having it exchanged for free.)

Frequent reboots, i.e. every five seconds or so, just as I remembered.

Tried to disable "DNS relay" in the router (and ran "ipconfig /renew" on the machine). It worked! :-)

No reboots anymore, and higher transfer speed. If I succeeded in attaching an image, you'll have a very unscientific proof.

I guess the router doesn't get as badly stressed when the DNS requests go directly to my ISP. I assume it tried to cache them previously.

Might work on other routers as well.

What's been the result of this DNS Relay OFF?

Has that indeed fixed the problems?

Will this work on a DI-624 also?]]> http://www.dslreports.com/forum/remark,12643367 Fri, 11 Feb 2005 13:00:53 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12643140 funchords :

said by Gabriel Blum:

As long as SPI is running, it should be possible, theoretically, to craft a packet that causes the software to fail, because, again theoretically, all software have failures.

Routers are **NOT** supposed to do SPI. That's a feature of the firewall. Routing software is simple. SPI software is not.

This is a problem with the technology itself. It could be cisco, checkpoint, d-link... SPI has a risk of failing and crashing, just like any software. In this case, you have to trust the vendor.

Looks like D-link SPI software is crap.

If you have "Gaming Mode" on, then SPI is off. This is the default.

The problem isn't SPI, it's NAT.

And while you're technically right, nobody would buy one device that acts as a WAP, another that is a switch, another that is a router, and another that is a firewall -- not to mention DHCP, DNS caching, and etc. etc.

That consumer "routers" do all of these things is simply the reality of the marketplace.
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12643140 Fri, 11 Feb 2005 12:33:42 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12641080 anon : As long as SPI is running, it should be possible, theoretically, to craft a packet that causes the software to fail, because, again theoretically, all software have failures.

Routers are **NOT** supposed to do SPI. That's a feature of the firewall. Routing software is simple. SPI software is not.

This is a problem with the technology itself. It could be cisco, checkpoint, d-link... SPI has a risk of failing and crashing, just like any software. In this case, you have to trust the vendor.

Looks like D-link SPI software is crap. ]]> http://www.dslreports.com/forum/remark,12641080 Fri, 11 Feb 2005 06:21:08 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12611992 Basher13 : Is emule a destructive application ?

Not exactly a killer app, mind you, in the right sense
of the word.]]> http://www.dslreports.com/forum/remark,12611992 Tue, 08 Feb 2005 02:44:02 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12607712 anon : Even if they try to jump my queue it is impossible because I'm filtering them adding their IP into eMule's IP filter as soon as such IP appears in the router's log. Such filtering stops them to be in my "On Queue" or "Known Clients", but they still try to send or receive some data using 30000+ port. Firewall rule in DI-624 can't get rid of them, they still appears as Ping of Death despite such IP is rejected by making "Firewall Rules" in DI-624 setup. Quite annoying...]]> http://www.dslreports.com/forum/remark,12607712 Mon, 07 Feb 2005 17:57:55 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12607390 funchords : No, but that seems to confirm my suspicion about that.

I've found that you can't filter them out with the client, nor could you do anything about it with a firewall filter (since the router evaluates the packet before dropping it and issues the attack notice).

I'm thinking that if you dropped them from your queue, you'd actually get more hits from them because you have the files that they went. But that's just a theory -- it could be searches that do it -- but my guess is that if they hacked it, they were trying to jump the queue.
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12607390 Mon, 07 Feb 2005 17:16:18 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12606621 anon : Testing eMule 0.45a with Kad OFF...]]> http://www.dslreports.com/forum/remark,12606621 Mon, 07 Feb 2005 15:41:25 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12605821 anon : I got first router reboot after 9 hours testing new eMule 0.45a with Kad ON. I didn't try to install 2.52 firmware yet.

I'm also getting a number of Ping of Death in the router log running eMule. All of them from different users having 30000+ port in common. I found one on them in my queue finally. It was eMule 0.30 according to a identification string, High ID and had default port for connections (4662). Looks like a custom made client to produce such Ping of Death attacks, because SAME client from SAME IP was using 30000+ ports (different every time) to connect very often (10+ times in 30 min, couple connections in 30 sec interval, etc) according to the router log (Ping of Death Detect).

Any suggestions???

Thank you.]]> http://www.dslreports.com/forum/remark,12605821 Mon, 07 Feb 2005 14:07:23 EDT eMule, Kad, NAT, and Reboots http://www.dslreports.com/forum/remark,12602610 funchords : By the way, a note on the KAD reboots.

KAD works by using UDP to transfer eMule information instead of TCP connections.

When the connections are TCP, the NAT table can open, track, and close the connection -- even if there are many of them simultaneously.

However, UDP is connectionless. The NAT table basically has to hold the entry for a while and then close it after some (undetermined) timeout. The timeout has to be long enough to avoid shutting down active communication. There is no way to know when communication is over.

As a consequence, it seems that the NAT table just builds and overflows with open UDP entries coming from everywhere.

There are many routers that exhibit this behavior, and many that do not -- and, no, I don't know the solution. But after reading up on this problem today, I thought I'd share what I've learned.
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12602610 Mon, 07 Feb 2005 02:11:51 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12598214 funchords : I know the Israel team has been working on these KAD reboots.

Any chance this helps? »www.dlink.co.il/firmware/DI624_v252_nml.bin
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12598214 Sun, 06 Feb 2005 16:06:52 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12596776 anon : D-Link DI-624 C3 Firmware: 2.50

I still get router reboots having Kad ON using the latest eMule despite it is supposed to be fixed by 2.50 firmware. This router rock stable under ed2k load (weeks without any reboot), but Kad makes it go crazy. About 20 router reboots in 4 days. I'm WIRED only, 2 PC. First one for eMule only (24/7, High ID, no browsing, no extra soft, Win XP SP2), second for browsing e.t.c. (no p2p, Win XP SP2). So ed2k = fine, Kad only = reboot, ed2k+Kad = reboot. I hope it will be fixed finally.

Thank you.]]> http://www.dslreports.com/forum/remark,12596776 Sun, 06 Feb 2005 13:01:49 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12596196 funchords :

said by adamofwales

:

Why not just turn off pinging on the router, so that it will not respond to any ping requests?

Even if it was a real PoD, this might not work because the firewall might still evaluate the packet before dropping it (the problem in a PoD is it's size).

But this isn't the case here. This "PoD" is sent to the eMule port. It also doesn't seem to have any negative impact other than showing up in the log and sending out an "AttackLog" if you have email enabled.
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12596196 Sun, 06 Feb 2005 11:44:02 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12594219 adamofwales :

said by funchords

:

I tried this last night because of this thread.

Shareaza needed a restart after I changed the firewall. Seems that it remembered its initial state.

So perhaps if you get a low-id and make a firewall change, exit and restart your software.

I think the Ping of Death may be a hack, not a bug. Someone is trying to jump the queue.

Why not just turn off pinging on the router, so that it will not respond to any ping requests?]]> http://www.dslreports.com/forum/remark,12594219 Sun, 06 Feb 2005 01:51:39 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12590834 funchords : I tried this last night because of this thread.

Shareaza needed a restart after I changed the firewall. Seems that it remembered its initial state.

So perhaps if you get a low-id and make a firewall change, exit and restart your software.

I think the Ping of Death may be a hack, not a bug. Someone is trying to jump the queue.
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12590834 Sat, 05 Feb 2005 17:49:18 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12587679 Chip Zero :

quote:
I remember someone say here before, turn on
"gaming Mode" will disable SPI
(stateful packet inspection).

Good suggestion, that is exactly what gaming mode does (turn of SPI). Unfortunately although the gaming mode may help with stability it does not fix the 'ping of death' detection bug :( It's just yet another bug that us users can't do anything about. I'm getting a lot of false low-id detections these days, with the firewall set up correctly for all clients and port ranges.]]> http://www.dslreports.com/forum/remark,12587679 Sat, 05 Feb 2005 09:44:28 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12585502 funchords :

said by Rocky_pt:

Unfortunately, the level of security on D-Link DI-624 rev.C firmware v2.50 and older is so high that when the router detects this:

Ping of Death Detect src:217.229.97.80:33328 dst:81.84.86.169:4662 Packet Dropped

it blocks the 4662 port permanently until you request the router to reopen the port, causing the LowID problem...

I used Shareaza, which supported eDonkey and I'd get these about 2-3 times a day. Reviewing the logs, I found that they were all from the same few IP addresses. The funny thing was, I couldn't make client rules nor firewall rules that would block them.

I wrote them off as poorly configured clients, turned off "Attacks" in my logging options, and continued to operate happily.

It never blocked the port permanently. I did get a LowID from time to time but I was always able to fix it one way or another -- by creating a rule.
--
Robb Topolski
http://www.funchords.com/
Hillsboro, Oregon USA]]> http://www.dslreports.com/forum/remark,12585502 Fri, 04 Feb 2005 23:00:49 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12578122 anon : I don't think so... i've always had Gaming Mode enabled and it doesent work anyway, enabled or disabled...]]> http://www.dslreports.com/forum/remark,12578122 Fri, 04 Feb 2005 07:12:50 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12572345 Talon88 : :::

I remember someone say here before, turn on
"gaming Mode" will disable SPI
(stateful packet inspection).

I maybe wrong but you can give it a try....!

:::
--
[=Talon88=]
»DI-624 Firmware update w/ Crash Recovery Step by S --
»[Info] Some Clue about DI-624 Reboot]]> http://www.dslreports.com/forum/remark,12572345 Thu, 03 Feb 2005 16:19:48 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12568609 anon : Unfortunately, the level of security on D-Link DI-624 rev.C firmware v2.50 and older is so high that when the router detects this:

Ping of Death Detect src:217.229.97.80:33328 dst:81.84.86.169:4662 Packet Dropped

it blocks the 4662 port permanently until you request the router to reopen the port, causing the LowID problem...
The router does that in any other port, even if the DMZ is activated, the router still uses SPI(stateful packet inspection) to secure the intranet and drops this so called "Attacks" blocking the port.

Seems like the fact of wanting to buy a better thing resulted in lower quality of service...
Unless D-Link manages a way to turn of this security features we will be unable to use eMule decently...

Best regards. Joel Rocha.]]> http://www.dslreports.com/forum/remark,12568609 Thu, 03 Feb 2005 09:13:12 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12568560 anon : Yes, welcome to the club!

Unfortunately, the level of security on D-Link DI-624 rev.C firmware v2.50 and older is so high that when the router detects this:

Ping of Death Detect src:217.229.97.80:33328 dst:81.84.86.169:4662 Packet Dropped

it blocks the 4662 port permanently until you request the router to reopen the port, causing the LowID problem...
The router does that in any other port, even if the DMZ is activated, the router still uses SPI(stateful packet inspection) to secure the intranet and drops this so called "Attacks" blocking the port.

Seems like the fact of wanting to buy a better thing resulted in lower quality of service...
For me it is time to buy a newone, maybe a crappy one with less security... have you heard about URS9106? USRobotics SureConnect i've heard that he flies on eMule. Got to check it out.]]> http://www.dslreports.com/forum/remark,12568560 Thu, 03 Feb 2005 09:06:05 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12461945 stas_u : Right,
I have the same issue.
Connecting the PC directly to modem accelerates eMule significantly.
I also noticed that max.connections now is around 150 (it was 70 when connected to DI-624).
It looks like the router limits number of max.connections.]]> http://www.dslreports.com/forum/remark,12461945 Sun, 23 Jan 2005 04:56:08 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12455320 king_elves : Mike, i don't think my ISP is blocking 4662/4672, since if i connect the cablemodem directly to the PC, eMule will work properly (in terms of download speed).

I've just upgraded firmware to 2.52 and eMule has been running for 3-4 hours straight... 3,5 kb/s avg :(]]> http://www.dslreports.com/forum/remark,12455320 Sat, 22 Jan 2005 13:24:20 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12434340 Mike Great : Hi
To accelerate emule change the ports. Never use 4661-4672. Your ISP blocks the traffic. Select others.I have done this (selected 20.000 - 20.001) and my traffic are betwen 20 to 90 deppending of the fonts.]]> http://www.dslreports.com/forum/remark,12434340 Thu, 20 Jan 2005 04:41:15 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12371483 stas_u : Hey king_elves,

Here is a link:
»ftp://ftp.dlink.se/Products/di-product···820).zip

Enjoy]]> http://www.dslreports.com/forum/remark,12371483 Thu, 13 Jan 2005 06:19:52 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12366144 king_elves : Hi stas,

Yeah, i meant DI-624.

Where can i download firmware 2.52 ? I can only see the 2.50 version on the dlink page.

Thanks for the suggestions, i'll try them this weekend.]]> http://www.dslreports.com/forum/remark,12366144 Wed, 12 Jan 2005 17:07:54 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12364738 stas_u : yep, didn;t help :(]]> http://www.dslreports.com/forum/remark,12364738 Wed, 12 Jan 2005 14:40:02 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12362477 Oouter : have you tried disabling the UDP function in emule? Apparently that fixes the problem with the USR8054..]]> http://www.dslreports.com/forum/remark,12362477 Wed, 12 Jan 2005 10:19:51 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12361344 stas_u : Welcome to the club. Did you mean DI-624?
Do the following:
2. Upgrade to 2.52
3. Use the DMZ for your LAN IP and set eMule to max 400 connections.
This won't help you download faster but at least save you from rebooting.]]> http://www.dslreports.com/forum/remark,12361344 Wed, 12 Jan 2005 06:06:17 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12361240 king_elves : Hi,

I've bought a DL-624 (revC) a couple of weeks ago and i've been having problems with eMule too.

The router is upgraded to firmware 2.50, WAN is 640Kbit/s cable with dynamic IP, and i'm connecting with a wired cable to this PC (the only PC on the network so far) which has a Intel CSA Gbit port. PC has Windows XP SP1 without sw firewall.

All eMule ports are properly forwarded to this PC, which i've assigned a static IP address of 192.168.0.2.

Problems:
1- After hooking up the router, i've noticed random reboots. These only happen every other two or three days, and only when eMule is on.

2- "Random" Low ID's. The router and eMule seem to connect fine (High ID) when all of a sudden i start connecting with Low ID. The only half "scientific" test i did with this was:

- re-connected wires, rebooted both PC and router.
- renewed IP on local PC (192.168.0.2).
- started eMule, didn't connect to any server.
- asked a friend on internet to telnet to my WAN IP, port 4662.

He did manage to connect through telnet, so the router is forwarding correctly...so i thought. A day later, i've noticed several Low ID messages when eMule tries to reconnect, so i asked my friend again to telnet. This time connection refused. :S
I had to reboot the modem, and then renew the IP again.

3- This is the most annoying problem, since i can't debug it properly. Basically, download speeds with eMule have dropped dramatically.
Connecting the WAN directly to my PC i have download speeds of 20-25 kb/s, which seem average and OK for eMule.
Connecting the router, my download speed dependes on the session, ranging from 3 kb/s to 10 kb/s.

The tests i've done have been running emule every other 2 days with and without the router, and recording the average speeds.

I think this problem is related to problem 2. After some time, the router just stops forwarding, so i get low speeds.

Anyone else has had these problems? I'm very dissapointed so far with this router. :(]]> http://www.dslreports.com/forum/remark,12361240 Wed, 12 Jan 2005 04:58:31 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12361101 stas_u : I want to downgrade backto 2.3!
I'm sure that this is a router problem - connecting PC directly to modem solved the problem.
Does anybody have fw 2.3 for ver.C ?
DLINK support said I shall use overnet :) funny, right?]]> http://www.dslreports.com/forum/remark,12361101 Wed, 12 Jan 2005 03:42:44 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12356232 Micke F : Still working...

Forgot to tell:

eMule: no Kad, 600 connections
router: fw 2.33

Turned on DNS relay once more, then turned it off again.

]]> http://www.dslreports.com/forum/remark,12356232 Tue, 11 Jan 2005 18:07:56 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12355992 Micke F : Hi!

I have borrowed a DI-614+ from a friend. (Yes, I fried my Netgear and having it exchanged for free.)

Frequent reboots, i.e. every five seconds or so, just as I remembered.

Tried to disable "DNS relay" in the router (and ran "ipconfig /renew" on the machine). It worked! :-)

No reboots anymore, and higher transfer speed. If I succeeded in attaching an image, you'll have a very unscientific proof.

I guess the router doesn't get as badly stressed when the DNS requests go directly to my ISP. I assume it tried to cache them previously.

Might work on other routers as well.

DNS relay on/off

]]> http://www.dslreports.com/forum/remark,12355992 Tue, 11 Jan 2005 17:39:22 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12355293 michaelzhao : stas_u,

50 for "Max connections"

I think D-link the a limit 256 of concurrent connections.]]> http://www.dslreports.com/forum/remark,12355293 Tue, 11 Jan 2005 16:23:44 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12354607 rewritable :

said by stas_u

:

Yep, I used the DMZ.
Now I'm running at 2.52, no frequent reboots (only few times a day).
The main problem now is with eMule download speed.
If I'm connecting my PC straight to the modem- after few hours my eMule starts to download well.
But with the router - my average DL speed is 5-10 :(
Does the DMZ opens all ports? is there something else I need to configure in my DI-624?

DMZ is supposed to forward all ports to the specified IP. I had really slow emule transfers too with the DI624 but emule was always slow for me even without the router, so it might not be the router's problem at all.]]> http://www.dslreports.com/forum/remark,12354607 Tue, 11 Jan 2005 15:11:42 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12350708 stas_u : Yep, I used the DMZ.
Now I'm running at 2.52, no frequent reboots (only few times a day).
The main problem now is with eMule download speed.
If I'm connecting my PC straight to the modem- after few hours my eMule starts to download well.
But with the router - my average DL speed is 5-10 :(
Does the DMZ opens all ports? is there something else I need to configure in my DI-624?]]> http://www.dslreports.com/forum/remark,12350708 Tue, 11 Jan 2005 04:05:31 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12350246 latinuser_uy : Just in case you want to try some old fw's for the 624 rev c...

Hmm... upload didn't seem to work. Maybe because of my poor upload bandwidth and 90 second limit. Pls leave me a message with your e-mail and I would forward 2.28 and 2.37 fw's to you, if you want them.

di624_firmwa···_228.zip 176 bytes
2.28
(di624_firmware_228.bin)

di624_firmwa···_237.zip 176 bytes
2.37
(di624_firmware_237.bin)

]]> http://www.dslreports.com/forum/remark,12350246 Tue, 11 Jan 2005 01:36:31 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12349645 rewritable : Emule (0.30e) does reboot even with 2.50 firmware, at least for me it did.

There is one way of using Emule without reboots. Turn on DMZ for your ip. I have verified that this way works for sure. You'll get hacked but at least you can emule now :P]]> http://www.dslreports.com/forum/remark,12349645 Tue, 11 Jan 2005 00:03:34 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12343334 stas_u : michaelzhao -
You mean a total numeber of connections to 50?
or sources per file?
Not using KAD.]]> http://www.dslreports.com/forum/remark,12343334 Mon, 10 Jan 2005 11:49:20 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12342711 The Flash : Turn off KAD.]]> http://www.dslreports.com/forum/remark,12342711 Mon, 10 Jan 2005 10:24:14 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12342531 michaelzhao : Set connection number below 100, suggest 50. No reboot any more.]]> http://www.dslreports.com/forum/remark,12342531 Mon, 10 Jan 2005 09:56:57 EDT Re: [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12342154 stas_u : There are frequent unexplained reboots - when eMule is active.
I have no decisive message as to why DI-624 decides to reboot.

There are Pings Of Death to my eMule PC (inside the LAN, mostly port 4662)
being just dropped - no reboot.

The support of dlink cannot solve me the problem - I tried all settings.
I need focus cause of router self-reboot; I know its related to eMule being up. ]]> http://www.dslreports.com/forum/remark,12342154 Mon, 10 Jan 2005 08:41:42 EDT [Help Me] DI-624 reboots with eMule http://www.dslreports.com/forum/remark,12342091 stas_u : Hi all,

I was unlucky upgrading my firmware from 2.35 (the original version) to 2.42 cause now I've started to get frequent reboots (even if running only 1 LAN connection, no wireless).
In DLINK support I was told to upgrade my firmware to 2.52 but it didn't help. After that they told me to switch SUPER G to SUPER G WITHOUT TURBO. And switch to channel 11.
This, of cause didn't help either (rebooting even if I'm using only 1 LAN device).
I started to suspect that the problem might be in the SW I'm running (I have eMule running on my LAN connection).

Does anybody have any clue how to solve that?
I would be happy to downgrade back to 2.35 but can't find it anywhere.

Thanks :)]]> http://www.dslreports.com/forum/remark,12342091 Mon, 10 Jan 2005 08:24:21 EDT