REQ: Gnucleus rule

[faithlezz]

Hi,

Can somebody please give me the rule for Gnucleus?

Thanks

[Watchman]

Make sure you are in "Rules Wizard" mode. If not change to wizard and reboot. Run Gnucleus and let Outpost allow you to make a rule for it by choosing the "Other" option when you are prompted to create a rule.

[faithlezz]

I know this, but what the rules I should set? I mean the port and so on.

[David]

Hi faithlezz,

I looked at the Gnucleus site. I have never used Gnucleus, but it seems like a file sharing program. Right??? By the way, I use BearShare.

I downloaded the latest preset.lst which is attached to the sticky note at the head of this forum. You should do the same if you haven't already and save it to the directory in which you installed Outpost. Be sure to back up your old preset.lst to another location in case you have problems. As a side note, if you do use the new preset.lst and run the AutoUpdate on Outpost, you may get a message regarding your current preset.lst being newer than the preset.lst to be installed (or something like that). Just select the option NOT to overwrite your current preset.lst.

I do not have a direct answer for you concerning your question about which specific rules to set up for Gnucleus. But I can tell you what I would do in your position. As Watchman pointed out, get a feel for which port range that Gnucleus is trying to use by paying close attention to the connection popups as they appear and be sure to select 'Create Preset Using' Other in the connection popup window. This process will definately be troublesome as you will probably get many popups if this is a file sharing program. Once you know the general port range that the application uses from observing the connection popups and creating temporary rules, close Gnucleus and open the preset.lst in a text editor like Notepad. Then look (Edit -> Find) for another file sharing applicaiton using a similar port range. Use one of the ports that you identified as your search criteria when searching the preset.lst. Then, go to Options -> Applications and locate the entry for Gnucleus. It should be there if you created a few rules using Other option in 'Create Preset Using' as outlined in this post. Modify the rule entries for Gnucleus based on the rules that you found in preset.lst for a similar application. Be sure not to use specific Remote Hosts in your sharing connection rules as this may result in problems. Once you find out which file sharing program uses a similar port set, you can even modify preset.lst to help automate the process. I did a same thing when I installed BearSharePro since it was new and not yet included in the list of presets. I can provide specific instructions for doing this if needed.

As an example. If I ran a file sharing application and found it was trying to access ports around 6346, I would setup rules for that application using the same rules as BearShare uses from preset.lst. Or, if I found it using a port like 1214, I would setup the rules similar to those used for Morpheus or Kazaa. WinMX is also listed in the new preset.lst if Gnucleus happens to use similar ports.

I hope this helps you out a little. Honestly, nowdays, I think that all application vendors should give out necessary firewall rules for their applications. This would be especially a helpful practice since most home users have personal firewalls today. Another idea might be to try and write the folks at Gnucleus and and ask them the rules that should be set for this application. If you do, be sure to ask them to specify Protocols, Inbound and Outbound ports, and port numbers.

After you get your rules set up, set your Outpost Firewall Policy to Block Most and test your Gnucleus ruleset to see that you have adequate connectivity.

David

[faithlezz]

Thanks David

Gnucleus is similar to BearShare.

[David]

Hi faithlezz,

I am glad that it worked for you. There are so many file sharing programs out there nowdays, and some do use slightly different port ranges, I was worried that Gnucleus would be one of those.

Actually, I am glad that it was the BearShare Port range. That is a very common set of ports for Gnutella Clients.

I hope those rules work well for you.

Best Regards,
David

[safemode]

Hi faithlezz,
>>I know this, but what the rules I should set? I mean the port and so on.

regarding the port..
Can you see on your left panel,
a)All b)Established c)open ports d)incoming e)outgoing f)Allowed g)blocked h)reported

Normally what i do, at the 'blocked', on the right pane you will see few colums that is, 'Reason','application', 'start time', 'remote host', 'direction', 'protocol', 'local port', 'local address'.
so i can make rules from that information.

[David]

Hi safemode,

Your idea is good also, I think. But, using similar applications port rules or getting the information from a vendor or some other source are probably the best first options.

Trying to set them manually, one at a time, or by examining the Blocked ports in the Outpost logs should probably only be used if nothing else works. It would be very easy to accidentally not include some ports by setting them manually. This would especially be true in multi-port applications like file sharing programs.

Best Regards,
David

[Konstantin]

Gnucleus uses by default port 6346.
However in preferences probably to set use of any port.
Therefore there are 2 ways of creation of rules:
1. Allow only 6346 (by default)
2. Allow All connections (most used)

What variant is best ?

[David]

Hi Konstantin,

Personally, I prefer just allowing ONLY the ports that the application would use by default. So my choice would be the first of your two suggestions. Allowing all (OUT) would probably not hurt anything, but why allow more than is necessary? And, I am very careful about allowing any INBOUND connections.

That is my opinion.

[Konstantin]

Ok. I shall add Gnucleus with settings by default.