Aces High Rule

Discussion in 'LnS English Forum' started by silat, Jul 12, 2007.

Thread Status:
Not open for further replies.
  1. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190
    Hello,

    I play a game called Aces High.
    When I have LnS on I get the following message in game:
    Not receiving updates switched to TCP

    If I turn LnS off then I have no issues.

    Guess its time for me to learn:)
    What do I need to do/understand to fix this?

    Thanks
    Lew/+Silat
     
  2. Frederic

    Frederic LnS Developer

    Joined:
    Jan 9, 2003
    Posts:
    4,354
    Location:
    France
    Hi silat,

    The first thing is to look at the log to see what kind of packets are blocked just after the error message in the game appear.

    Frederic
     
  3. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190

    Im a noob at this. I did look at the log and cant make heads nor tails of what Im seeing..Lots of information.

    {\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\fswiss\fcharset0 Arial;}}
    {\*\generator Msftedit 5.41.15.1507;}\viewkind4\uc1\pard\f0\fs20 07-12-07,14:58:48 D-55 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4552\par
    07-12-07,14:58:48 D-56 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4553\par
    07-12-07,14:58:48 D-57 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4554\par
    07-12-07,14:58:48 D-58 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4555\par
    07-12-07,14:58:48 D-59 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4556\par
    07-12-07,14:58:48 D-60 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4557\par
    07-12-07,14:58:48 D-61 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4558\par
    07-12-07,14:58:48 D-62 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4559\par
    07-12-07,14:58:52 U+63 'APP: Allowed ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE\par
    07-12-07,14:58:52 U+64 'APP: Allow TCP ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE,Port: 3002, IP: 12.193.161.229\par
    07-12-07,14:58:52 U+65 'APP: Allowed ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE\par
    07-12-07,14:58:52 U+66 'APP: Allow TCP ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE,Port: 3002, IP: 12.193.161.229\par
    07-12-07,14:58:53 U+67 'APP: Allowed ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE\par
    07-12-07,14:58:53 U+68 'APP: Allow TCP ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE,Port: 8001, IP: 206.16.60.38\par
    07-12-07,14:58:54 U+69 'APP: Allowed ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE\par
    07-12-07,14:58:54 U+70 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE,Port: 3004, IP: 206.16.60.39\par
    07-12-07,14:58:54 U+71 'APP: Allowed ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE\par
    07-12-07,14:58:54 U+72 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE,Port: 3004, IP: 206.16.60.38\par
    07-12-07,14:58:54 U+73 'APP: Allowed ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE\par
    07-12-07,14:58:54 U+74 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE,Port: 3004, IP: 206.16.60.37\par
    07-12-07,14:58:54 U-75 'UDP : Any other UDP pack' 206.16.60.37 UDP Ports Dest:3004 Src:1807\par
    07-12-07,14:58:54 U-76 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:3004 Src:1806\par
    07-12-07,14:58:55 U-77 'UDP : Any other UDP pack' 206.16.60.39 UDP Ports Dest:3004 Src:3004\par
    07-12-07,14:58:55 U-78 'UDP : Any other UDP pack' 206.16.60.37 UDP Ports Dest:3004 Src:1807\par
    07-12-07,14:58:55 U-79 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:3004 Src:1806\par
    07-12-07,14:58:56 U-80 'UDP : Any other UDP pack' 206.16.60.39 UDP Ports Dest:3004 Src:3004\par
    07-12-07,14:58:56 U-81 'UDP : Any other UDP pack' 206.16.60.37 UDP Ports Dest:3004 Src:1807\par
    07-12-07,14:58:56 U-82 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:3004 Src:1806\par
    07-12-07,14:58:57 U-83 'UDP : Any other UDP pack' 206.16.60.39 UDP Ports Dest:3004 Src:3004\par
    07-12-07,14:58:57 U-84 'UDP : Any other UDP pack' 206.16.60.37 UDP Ports Dest:3004 Src:1807\par
    07-12-07,14:58:57 U-85 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:3004 Src:1806\par
    07-12-07,14:58:58 U-86 'UDP : Any other UDP pack' 206.16.60.39 UDP Ports Dest:3004 Src:3004\par
    07-12-07,14:58:58 U-87 'UDP : Any other UDP pack' 206.16.60.37 UDP Ports Dest:3004 Src:1807\par
    07-12-07,14:58:58 U-88 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:3004 Src:1806\par
    07-12-07,14:58:59 U-89 'UDP : Any other UDP pack' 206.16.60.39 UDP Ports Dest:3004 Src:3004\par
    07-12-07,14:58:59 U+90 'APP: Allowed ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE\par
    07-12-07,14:58:59 U+91 'APP: Allow TCP ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE,Port: 4190, IP: 206.16.60.38\par
    07-12-07,14:59:05 U+92 'APP: Allowed ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE\par
    07-12-07,14:59:05 U+93 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE,Port: 4229, IP: 206.16.60.38\par
    07-12-07,14:59:05 U-94 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4229 Src:4229\par
    07-12-07,14:59:06 U-95 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4229 Src:4229\par
    07-12-07,14:59:06 U-96 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4229 Src:4229\par
    07-12-07,14:59:06 U-97 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4229 Src:4229\par
    07-12-07,14:59:06 U+98 'APP: Allowed ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE\par
    07-12-07,14:59:06 U+99 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\\PROGRAM FILES\\HTC\\ACES HIGH II\\ACESHIGH.EXE,Port: 4189, IP: 206.16.60.38\par
     
    Last edited: Jul 12, 2007
  4. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190
    Dont knw if this helps with the log but I dont have voice ability in the game when LnS runs either.
     
  5. Frederic

    Frederic LnS Developer

    Joined:
    Jan 9, 2003
    Posts:
    4,354
    Location:
    France
    Hi,

    You should try to create two rules for the following alerts:
    07-12-07,14:58:59 U-89 'UDP : Any other UDP pack' 206.16.60.39 UDP Ports Dest:3004 Src:3004
    &
    07-12-07,14:59:05 U-94 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4229 Src:4229

    So, the 2 rules should allow UDP Port 3004 & UDP Port 4229.
    To create the rules, just right click on the alerts from the log and in the menu choose create rule for UDP 3004, and then on the second type of alert create rule for UDP 4229.

    Frederic
     
  6. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190
    Thanks for the help Frederic.

    I right clicked on the first item you mentioned and a choice of Client rule or server rule. I picked client. Is that correct?
    I could only find the first rule you mentioned.

    The log doesnt show the second item you mention. So I started up the game and this is the log:





    07-15-07,13:52:38 U+3699 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:52:38 U+3700 'APP: Allow TCP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 3002, IP: 12.193.161.229
    07-15-07,13:52:39 U+3701 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:52:39 U+3702 'APP: Allow TCP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 3002, IP: 12.193.161.229
    07-15-07,13:52:39 U+3703 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:52:39 U+3704 'APP: Allow TCP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 8001, IP: 206.16.60.38
    07-15-07,13:52:40 U+3705 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:52:40 U+3706 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 3004, IP: 206.16.60.39
    07-15-07,13:52:40 U+3707 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:52:40 U+3708 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 3004, IP: 206.16.60.38
    07-15-07,13:52:40 U+3709 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:52:40 U+3710 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 3004, IP: 206.16.60.37
    07-15-07,13:52:43 U+3711 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:52:43 U+3712 'APP: Allow TCP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 4190, IP: 206.16.60.38
    07-15-07,13:52:48 U+3713 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:52:48 U+3714 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 4314, IP: 206.16.60.38
    07-15-07,13:52:49 U-3715 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:49 U-3716 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:49 U-3717 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:49 U-3718 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:49 U+3719 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:52:49 U+3720 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 4189, IP: 206.16.60.38
    07-15-07,13:52:50 U-3721 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:52:50 U-3722 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:50 U-3723 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:50 U-3724 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:50 U-3725 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:50 U-3726 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:51 U-3727 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:51 U-3728 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:51 U-3729 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:51 U-3730 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:52 U-3731 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:52 U-3732 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:52 U-3733 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:52 U-3734 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:53 U-3735 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:53 U-3736 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:53 U-3737 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:53 U-3738 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:54 U-3739 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:54 U-3740 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:54 U-3741 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:54 U-3742 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:55 U-3743 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:55 U-3744 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:55 U-3745 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:55 U-3746 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:56 U-3747 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:56 U-3748 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:56 U-3749 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:56 U-3750 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:57 U-3751 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:57 U-3752 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:57 U-3753 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:57 U-3754 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:58 U-3755 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:58 U-3756 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:58 U-3757 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:58 U-3758 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:59 U-3759 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:59 U-3760 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:59 U-3761 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:52:59 U-3762 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:52:59 U-3763 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:00 U-3764 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:00 U-3765 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:00 U-3766 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:00 U-3767 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:00 U-3768 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:00 U-3769 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:00 U-3770 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:00 U-3771 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:01 U-3772 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:01 U-3773 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:01 U-3774 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:01 U-3775 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:01 U-3776 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:01 U-3777 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:01 U-3778 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:01 U-3779 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:02 U-3780 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:02 U-3781 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:02 U-3782 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:02 U-3783 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:02 U-3784 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:02 U-3785 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:02 U-3786 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:02 U-3787 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:03 U-3788 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:03 U-3789 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:03 U-3790 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4314 Src:4314
    07-15-07,13:53:04 U-3791 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:04 U-3792 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:04 U-3793 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:04 U-3794 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:04 U-3795 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:05 U-3796 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:06 U-3797 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:06 U-3798 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:06 U-3799 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:06 U-3800 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:07 U-3801 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:07 U-3802 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:07 U-3803 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:07 U-3804 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:07 U-3805 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:08 U-3806 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:08 U-3807 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:08 U-3808 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:08 U-3809 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:09 U-3810 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:09 U-3811 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:12 U-3812 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:12 U-3813 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:13 U-3814 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:13 U-3815 'UDP : Any other UDP pack' 206.16.60.38 UDP Ports Dest:4189 Src:4189
    07-15-07,13:53:20 U+3816 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:53:20 U+3817 'APP: Allow TCP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 3002, IP: 12.193.161.229
    07-15-07,13:53:21 U+3818 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:53:21 U+3819 'APP: Allow TCP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 3002, IP: 12.193.161.229
    07-15-07,13:53:21 D-3820 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4029
    07-15-07,13:53:21 D-3821 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4030
    07-15-07,13:53:21 D-3822 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4031
    07-15-07,13:53:21 D-3823 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4032
    07-15-07,13:53:21 D-3824 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4033
    07-15-07,13:53:21 D-3825 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4034
    07-15-07,13:53:21 D-3826 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4035
    07-15-07,13:53:21 D-3827 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4036
    07-15-07,13:53:21 D-3828 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4037
    07-15-07,13:53:21 D-3829 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4038
    07-15-07,13:53:21 D-3830 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:4039
    07-15-07,13:53:21 U+3831 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:53:21 U+3832 'APP: Allow TCP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 8001, IP: 206.16.60.38
    07-15-07,13:53:22 U+3833 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:53:22 U+3834 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 3004, IP: 206.16.60.39
    07-15-07,13:53:22 U+3835 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:53:22 U+3836 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 3004, IP: 206.16.60.38
    07-15-07,13:53:22 U+3837 'APP: Allowed ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE
    07-15-07,13:53:22 U+3838 'APP: Allow UDP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 3004, IP: 206.16.60.37
     
  7. Frederic

    Frederic LnS Developer

    Joined:
    Jan 9, 2003
    Posts:
    4,354
    Location:
    France
    At least it solved the alerts for the port 3004.
    For the second port it seems the value is more dynamic (4229 in the first post and now 4314, 4189).
    Is there any documentation/FAQ where you will find which ports have to be open ?

    Frederic
     
  8. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    1,596
    Location:
    Singidunum
    Hello.

    This is from Aces High II site:

    This is from the forums:

    Hope that helps. OP, go to the forums, direct links could not be pasted. You may find some more useful info.

    Cheers.
     
  9. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190
    LOL... :)
    Im a trainer for the game.:)
    I know all that information. What I dont know is how to setup LnS properly:)
     
  10. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    1,596
    Location:
    Singidunum
    Hello silat. :)

    Oh... Hmm... OK then. :)

    However, you should've stated IP/port requirements for the game initially in your first post.. or in the second.. or in the third... It just didn't look to me that you are aware of these specifications.

    Nevertheless, my post should help Frederic in creating your rules for the excellent LnS...

    Cheers again and happy training I wish to you. :D
     
  11. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190

    Yes I should have. I thought that someone would see the log and see what was being blocked. I didnt intentionally leave out information.
    But Im not understanding any of this:)
    I havent yet figured out what Im looking for in the log that you guys/gals see to even make a rule. And I wouldnt know the first thing about what a RULE should say:)

    My apologies if Ive caused any trouble.
     
  12. Frederic

    Frederic LnS Developer

    Joined:
    Jan 9, 2003
    Posts:
    4,354
    Location:
    France
    Hi Silat,

    You can use the following rule as a template:
    http://www.looknstop.com/En/rules/rules.htm#TCPClient

    Import it in your ruleset and then edit it.

    In the port section:
    - instead of "equal to" select "Range A-B"
    - instead of 55555 put 2000 and 6000 (as per the information given by The Seer)
    - click Ok
    - click Apply
    - click Save

    If it works, for a better protection you can later attach an application to the rule by editing it again, clicking the application button and choosing the program game, so the rule will be enabled only when the game connects to internet.

    Frederic
     
  13. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190
    Thanks for all the help Frederic...
    Ive attached my changes.
    It didnt work..
     

    Attached Files:

  14. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    1,596
    Location:
    Singidunum
    Hello again silat.

    This will not work. As per stated here

    you would have to open datagram (UDP) communications for the game. What that rule did, is opened only TCP.

    Try this one:

    ah2.JPG

    Of course, please report back...

    Cheers. :)
     
  15. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190
    Thanks:)
    Im supposed to edit the rule I previously made yes?
     
  16. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190
    Hi :)

    Im still getting the "Not receiving updates switched to TCP"

    :doubt:
     

    Attached Files:

  17. Seer

    Seer Registered Member

    Joined:
    Feb 12, 2007
    Posts:
    1,596
    Location:
    Singidunum
    Please post some log entries now...
     
  18. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190
    Sorry went to visit eldest daughter:)

    Now Im only losing the UDP periodically
    Maybe you could tell me what you see in the log so I can learn? I think Im teachable:)

    07-21-07,00:00:43 D-1005 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3149
    07-21-07,00:00:43 D-1006 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3150
    07-21-07,00:00:43 D-1007 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3151
    07-21-07,00:00:43 D-1008 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3152
    07-21-07,00:00:43 D-1009 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3153
    07-21-07,00:00:43 D-1010 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3154
    07-21-07,00:00:43 D-1011 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3155
    07-21-07,00:00:43 D-1012 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3156
    07-21-07,00:00:43 D-1013 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3157
    07-21-07,00:00:43 D-1014 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3158
    07-21-07,00:00:43 D-1015 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3159
    07-21-07,00:02:44 D-1016 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3160
    07-21-07,00:02:44 D-1017 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3161
    07-21-07,00:02:44 D-1018 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3162
    07-21-07,00:02:44 D-1019 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3163
    07-21-07,00:02:44 D-1020 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3164
    07-21-07,00:02:44 D-1021 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3165
    07-21-07,00:02:44 D-1022 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3166
    07-21-07,00:02:44 D-1023 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3167
    07-21-07,00:02:44 D-1024 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3168
    07-21-07,00:02:44 D-1025 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3169
    07-21-07,00:02:44 D-1026 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3170
     
  19. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,640
    Hi silat :)

    This:
    07-21-07,00:00:43 D-1005 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3149
    is related to a Windows service: Simple Service Discovery... on port 1900.

    I'm not sure you need it, so try first to stop it and put it in manual mode instead of automatic ... Start | Run | services.msc ... right click, properties ...

    For the game rule replace the port range on the left side of the editing windows by "in local" ... (= 1024 to 5000 in XP and 49152-65535 in Vista). And check it again.

    If there is some blocking change the local port range again but this time from 1024 to 65535.

    Also: the restriction to the games server ports in the rule is okay but for testing the best is to put all IP addresses instead...

    :)
     
  20. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190
    SSDP service has dependencies of Universal plug and play devices. It was on manual already. I will disable and see if it causes any problems..

    You say: "For the game rule replace the port range on the left side of the editing windows by "in local" (I hope this means "in range")... 1024 to 5000 in XP" and "If there is some blocking change the local port range again but this time from 1024 to 65535"

    I setup for the first suggestion until I find if we need to try the second:) But I put 6000 in because that was the top of the range that seer had found for the game. Is this correct?
    Ive enclosed a jpg of the change. I had to change 2 places to the range you specified. I hope this is correct.


    You also say: "the restriction to the games server ports in the rule is okay but for testing the best is to put all IP addresses instead... "

    Put them where? :)
     

    Attached Files:

  21. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,640
    Hi Silat :)

    Still working on this ?

    All IP addresses for outgoing ...

    Image 1 : your setup
    Image 2: all addr. setup ...


    :)
     

    Attached Files:

    • abc.jpg
      abc.jpg
      File size:
      4.7 KB
      Views:
      266
    • def.jpg
      def.jpg
      File size:
      6.4 KB
      Views:
      268
  22. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190

    Ok I think I have it.. Now.. I have a question :)
    Ive looked at the logs and cant find how you knew what was causing the problem.. What am I missing? You mentioned line : 07-21-07,00:00:43 D-1005 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:3149 thru 3170
    I see the SSDP/Upnp. Now I understand that means the SSDP service.
    So was the setting for "all" ips the one causing the problem?

    And I see this line after I start the game: 07-15-07,13:53:21 U+3832 'APP: Allow TCP ' ACESHIGH.EXE EXE C:\PROGRAM FILES\HTC\ACES HIGH II\ACESHIGH.EXE,Port: 8001, IP: 206.16.60.38

    Port 8001 >? Does that mean that port needs to be allowed in LnS also? If not why. Its the only port I see after game start that is out of the range specified previously by you and the others who have been so kind to help me.

    Sorry for being such a beginner here. I really am trying understand but Im starting at the beginning.
    I appreciate all the time and effort you people making to teach and help me.
     

    Attached Files:

  23. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,640
    Hi Silat :)

    I'll try to give you some hints and keep things simple...

    1- Most of the programs connecting to Internet are using the TCP protocol,
    like browser, emailer, Irc client and so on...

    You don't have to create any rule for these since they are checked and managed (with the LnS Enhanced rules set) general rule "Allow common Internet applications".

    2- Specific rules for a program are required when:

    a) the program is a server program

    Ex. Apache for a web server, Filezilla server for an Ftp server or the "server" part of any P2P program

    b) the program is using "non-standard" local ports

    the standard local ports used by almost all programs are:

    1024 to 5000 in W xp
    49152 to 65535 in W Vista
    60000 to 65000 with Xp sp2 Internet connection sharing

    c) the program is using UDP protocol...

    This required specific rule since there is no general rule like in TCP...


    3) Now, how to create specific rules in easy way?

    There is 3 method:

    a) on the fly: you check in the LnS log , select a blocked entry, right click and create a rule. This is good for simple programs and the rule have to be modified most of the times.

    b) with specific blocking rules: one for outgoing TCP and other one for outgoing UDP. Try the program and check in the log the blocked packets shows by these rules. You create rule from this information...

    c) by using a test rule. Create a rule allowing all ports , all IP addresses for the program you want to check. Use it and you'll see all entries of the Test rule related to this program. You build rules based on this...

    One trick: when you create rules don't make it to much restrictive. More accurate setup comes later.

    4) In you last message you show a screen capture of a rule with the same restrictive port range for local ports and remote post... even without testing I'm sure a 99% that this rule is not correct.

    The most simple way to resolve you problem is to create a test rule with few restrictions...

    1- Add the program in the rule with the "Appplication button".
    add the program from the right list to the left one and save.

    2- Used TCP or UDP protocol

    3- put Equal My @ : this is equal to your IP address.
    This is the side for local ports so:

    4- put in local as range (work with XP and Vista)

    5- No restrictions for remote ports and addresses

    Here the picture and the rule to import.

    To import:
    download the file ace.rie.TXT
    rename the file by removing the trailing ".TXT"
    import in LnS
    double click on the rule
    click on "applications..." button
    add the program to be tested here and save...

    And now try your program with this...
     

    Attached Files:

  24. silat

    silat Registered Member

    Joined:
    Oct 30, 2006
    Posts:
    190
    Thanks:)
    I actually made the rule per your instructions then downloaded it to see if I did it correctly.
    I also now see that I had made the rule incorrectly by making it with the same restrictive port range for local ports and remote ports as you pointed out. :) So I learned something.

    If I understand correctly we have now basically opened up everything for the game only?

    And back to your previous post where you told me to turn off Services ssdp, I had thought I understood where you were seeing it in the log but after turning it off I see that almost every line in the log ends with SSDP.
    Short part of log:

    07-24-07,00:13:32 D-7103 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1356
    07-24-07,00:13:32 D-7104 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1357
    07-24-07,00:13:32 D-7105 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1358
    07-24-07,00:13:32 D-7106 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1359
    07-24-07,00:15:33 D-7107 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1361
    07-24-07,00:15:33 D-7108 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1362
    07-24-07,00:15:33 D-7109 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1363
    07-24-07,00:15:33 D-7110 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1364
    07-24-07,00:15:33 D-7111 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1365
    07-24-07,00:15:33 D-7112 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1366
    07-24-07,00:15:33 D-7113 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1367
    07-24-07,00:15:33 D-7114 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1368
    07-24-07,00:15:33 D-7115 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1369
    07-24-07,00:15:33 D-7116 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1370
    07-24-07,00:15:33 D-7117 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1371
    07-24-07,00:17:34 D-7118 'UDP : Any other UDP pack' 192.168.1.1 UDP Ports Dest:SSDP/UPnP Src:1372

    So how did you know (see) that SSDP service was on(it was set to manual)? Now it is disabled..

    Thanks
     
  25. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,640
    Hi Silat :)

    Great! You'll be an LnS expert soon! :thumb:

    That's right. From this you may check in the log to see which ports are used by this program and restrict the rule to the port or port range actually used by "Ace".

    The important is to allow the program and monitor it with that test rule.

    Ok. Here the SSDP packets going to 192.168.1.1 which is the local IP addr. for the router or PC used as server for Connection Sharing...

    (If SSDP was put in manual startup and still started it's because an other service launch it....)

    In the log sample we have these informations:

    1- D- means : download blocked
    2- SSDP = port 1900
    3- Src= the source ports used. Here 1356, 1357, 1372, etc.
    It'a appear that the standard local ports are used: 1024 to 5000
    4- 192.168.1.1 the IP addr, from where the download comes...

    So here the rule from which we can start:

    Protocol UDP
    Packets : in and out
    IP: put nothings for the moment...
    Ports: in Local (or 1024 to 5000)
    remote IP: put nothings here for the moment...
    "remote" port : 1900

    Application: Generic Host Process for Windows (svchost)

    Save, apply and reboot...

    Just import the rule attached here.

    :)
     

    Attached Files:

Thread Status:
Not open for further replies.