Why utorrent brings so many ICMP packages blocked?

[isail]

When using utorrent (v1.8.4 build 16667), there's a lot of ICMP packages blocked by LnS, type=3, code=3, Internet>>PC. There packages are of different IPs, but same MAC source address 00:24:13:54:0A:44.

So strange! What's it mean? Dose that mean the utorrent is dangerous?

[cqpreson]

It is normal package.I think allowing these packets is better.

Here is its introduction.
http://www.networksorcery.com/enp/pr.../icmp/msg3.htm

[isail]

Originally Posted by cqpreson

It is normal package.I think allowing these packets is better.

Here is its introduction.
http://www.networksorcery.com/enp/pr.../icmp/msg3.htm

Many thanks, cqpreson!

[isail]

But why LNS Standardruleset blocks all types of ICMP except type 10?

[Frederic]

ICMP Type 10 are also blocked but with no alert in the log.

All ICMP are blocked (except ICMP requests your PC sends), to be sure to be stealth/invisible.
When using a P2P software I guess it's not a problem to allow some ICMP packets (since you are anyway not stealth).

Regards,

Frederic

[Fad]

Thanks Frederic, I also wondered about this & that explains it, and that it`s OK to allow some of these in these circumstances - I also saw a lot were blocked.

But can someone explain in simple terms how to alter the Utorrent rule to additionally allow these ICMP packets ?

or maybe I have to create another rule that only runs when Utorrent does ?

I still don`t really know what`s going on inside LnS or how to create these rules

[Seer]

Originally Posted by Fad

But can someone explain in simple terms how to alter the Utorrent rule to additionally allow these ICMP packets ?

Which ICMP types/codes you need allowed?

or maybe I have to create another rule that only runs when Utorrent does ?

There is no need to allow ICMP for server apps (torrent) to operate properly. It is simply down to personal preferences, whether you wish to be informed on certain network events or not (when debugging a problem i.e).

If you are not certain how to interpret and utilize ICMP info, I'd leave the ruleset well enough alone.

Cheers,

[Fad]

Thanks for the info.....I haven`t got a saved log, but I believe it was ICMP type 3 code 1 (?) mostly....

I was under the impression that as these were getting blocked so often, it was causing the torrent to not download as quickly as it might have been able to.

But as they`re not important, it must have been the torrent itself at fault, so I`ll just leave it as it is

[Frederic]

Originally Posted by Fad

Thanks for the info.....I haven`t got a saved log, but I believe it was ICMP type 3 code 1 (?) mostly....

Code 3/Type 1 is "Destination Unreachable" / "Host Unreachable" (see here), it means your PC tries to contact a remote peer machine, but it is unreachable

It should not impact the download speed.

Frederic

[Brummelchen]

Additional to ICMP - allow ICMP type 11 code 0 if you are using a pinger tool
like HLSW (game server watcher) or PingPlotter or similar.