VM Download Speed ???

[dem0n]

Sandvine hardware prevents seeding on torrents. Virgin media does not have this problem so we can assume they are NOT using sandvine.
The modem config file sends instructions to the modem to peform traffic capping when you've downloaded over your limit, Specified by the config file.

[Technosteve]

Sandine Hardware Prevents Traffic on any configured Port or protocol, That is has been configured for capping and traffic shaping are not the same thing your cap is the limitation of overall speed within a given range i.e 20mb/s dl / 768Kb/s ul. Traffic shaping is the control of the protocol and ports that are being used to achieve this all that is needed is to control all the released ports, 1025:65534 for TCP and UDP.

Sandvine is a little bit more sophisticated than that and can tell what type of traffic is flowing and can target just p2p or similar traffic whilst allowing video/music streams this could then not count towards the download limit.

[jayfoc]

Can this be used for FTP's (flash fxp)? i have a d-link wired router on to a ntl 250 cable modem

thanks

[Technosteve]

Originally Posted by jayfoc

Can this be used for FTP's (flash fxp)? i have a d-link wired router on to a ntl 250 cable modem

thanks

yes just use port 21 or 0001:65535 for all ports or any which is the same.

[usmania]

Hello,

VM just restricted my speeds today to 5meg I did what you told me to do however I was confused with the port part I downloaded BitTorrent and checked the incoming port for Bittoreent and replaced it with that. I have never used BitTorrent and am new to this. However after nearly 10 hourse my speed is still restricted.

This is a big pain in the ass please help me out..

Originally Posted by Technosteve

Virgin are using a piece of hardware called Sandvine first noticed by those on Comcast network, This uses the TCPFLAG RST to drop existing packet and initiate a delay, this is what causes the slowdown in traffic. This will not change your Upload Download Speeds but will stop the slowdown when you hit the traffic shaping Limit.

for windows users they can do the following to overcome this if you are not using a router.

The first thing you are going to have to do is install a real firewall, like the Windows port of FreeBSD's IPFW. Download wipfw-0.2.8.zip from sourceforge. Unzip the contents into a location where the files can live, like C:\Program Files\wipfw\.


Run the install-deny.cmd.

Now, you are ready to configure your new firewall. In the folder where you have WIPFW living, you will see a file called wipfw.conf. Open this in your favorite text editor or notepad, if you don't have a favorite. Replace the contents of this file with the following, substituting 6883 with your BitTorrent port:

# First flush the firewall rules
-f flush

# Allow all internal (loopback) network communications.
add 100 allow all from any to any via lo*

# Prevent any traffic to 127.0.0.1, common in localhost spoofing
add 110 deny log all from any to 127.0.0.0/8 in
add 110 deny log all from 127.0.0.0/8 to any in

# Drop incoming packets with RST flag on BitTorrent port
# This is what thwarts Sandvine.
add drop tcp from any to me 6883 tcpflags rst

# Setup stateful filtering
add check-state
add pass all from me to any out keep-state
add count log ip from any to any

# Allow new incoming BitTorrent connections
add allow tcp from any to me 6883
add allow udp from any to me 6883

Open the command prompt and enter net stop ipfw then net start ipfw Your computer will now be ignoring Sandvine's methods.

NOTE: In this configuration, WIPFW drops all other incoming connections and allows all outgoing connections.

hope this helps your users.

if your are using router and can get to command line interface then you can use this.
add drop tcp any to 192.168.1.0 6883 tcpflags rst

replace 192.168.1.0 with your routers web login address but last figure must be 0 (zero) this is the same as Any PC on that network. And change 6883 to your Bittorrent p2p client port if you need a range of ports just add 6883-6884 instead.

Below are sample global TCP flag variables:

urg: tcpFlags = 0b100000! -> `Urgent Pointer field significant'
ack: tcpFlags = 0b010000! -> `Acknowledgment field significant'
psh: tcpFlags = 0b001000! -> `Push Function'
rst: tcpFlags = 0b000100! -> `Reset the connection'
syn: tcpFlags = 0b000010! -> `Synchronize sequence numbers'
fin: tcpFlags = 0b000001! -> `No more data from sender'

as you can see from the variables they equate to a binary number from 0 to 32.
0b indicates its a binary number.

[danmed]

Hi,

I'm trying to get this going on my Linksys Wrt54gs.. i've replaced the firmware with DD-WRT so i now have telnet access but the command in the windows instructions does not work. it tells me

-sh: add: not found

can anyone help me set this up?

Edit : I've tried this command in telnet which didn't seem to do alot.. is this relevant? or have i just broken something?
iptables -A INPUT -p tcp --dport 6969 --tcp-flags RST RST -j DROP

[Technosteve]

Originally Posted by danmed

Hi,

I'm trying to get this going on my Linksys Wrt54gs.. i've replaced the firmware with DD-WRT so i now have telnet access but the command in the windows instructions does not work. it tells me

-sh: add: not found

can anyone help me set this up?

Edit : I've tried this command in telnet which didn't seem to do alot.. is this relevant? or have i just broken something?
iptables -A INPUT -p tcp --dport 6969 --tcp-flags RST RST -j DROP

if your using DD-WRT then you need to use the linux command in a telnet session and that should sort it in your router.

Also avoid the standard bittorent ports as these are limited by ISP's use any one in the range of 1025 - 65534

[danmed]

Thanks for the reply, but which Linux command...?

[Technosteve]

Originally Posted by danmed

Thanks for the reply, but which Linux command...?

Just change 6883 to the port your client uses, i use 63545

#Comcast BitTorrent seeding block workaround drops the RST TCPFLAG
-A INPUT -p tcp --dport 6883 --tcp-flags RST RST -j DROP
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

#BitTorrent
-A INPUT -m state --state NEW -m tcp -p tcp --dport 6883 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 6883 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT

If you are using Ubuntu or another non-Red Hat Linux derivative, then place the following in a file and execute that file as root.

#!/bin/sh
#Replace 6883 with your BT port
BT_PORT=6883

#Flush the filters
iptables -F

#Apply new filters
iptables -A INPUT -i lo -j ACCEPT

#Comcast BitTorrent seeding block workaround this drops the RST TCPFLAG

iptables -A INPUT -p tcp --dport $BT_PORT --tcp-flags RST RST -j DROP
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

#BitTorrent
iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport $BT_PORT -j ACCEPT
iptables -A INPUT -m state --state NEW -m udp -p udp --dport $BT_PORT -j ACCEPT
iptables -A INPUT -j REJECT --reject-with icmp-host-prohibited

[danmed]

cheers again for your response.. either i'm doing something wrong or this doesn't work with port 119 for newsgroups