Comcast blocking p2p uploads

Fri Oct 19 22:50:24 UTC 2007

This solution is only partially effective because Comcast's Sandvine
deployment sends a farced RST packet to both sides of the connection.  The
solution linked below drops the RST packet on your firewall keeping the
connection from being torn down as far as your client is concerned, but it
is not very likely that the other end will have this as well.

This is not to say it can't help.  Using HTTPS on the tracker and data
encryption also help.  So does any kind of tunneling including tor or
DNS/icmp tunneling, but these have some level of performance impact that
may be undesirable.

    -Scott

  _____  

From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu] On Behalf Of
Clinton Popovich
Sent: Friday, October 19, 2007 4:49 PM
To: 'Mark Owen'; 'Mike Lewinski'
Cc: nanog at nanog.org
Subject: RE: Comcast blocking p2p uploads

For anyone who is not aware this Comcast issue does have a solutions and
its called iptables. works great for those behind either the great
firewall of china or the great firewall of Comcast.

http://redhatcat.blogspot.com/2007/09/beating-sandvine-with-linux-iptables
.html

Clinton Popovich
Systems Administrator
Nauticom Internet Services - An NPSI Company
2591 Wexford-Bayne Road, Suite 400
Sewickley, PA 15143
Tel: 724-933-9540
Fax: 724-933-9888
Email: crpopovi at nauticom.net
Web:  <http://www.nauticom.net/> http://www.nauticom.net

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20071019/e8b0b1e5/attachment.html>