rtorrent not connectable

[3ddy]

I'm having some trouble setting up my asus with rtorrent.
Somehow i cannot get to being able to upload. (peers cannot connect to me)
I was thinking it a port forwarding problem so i've been trying these:
My rtorrent is set to use ports 51777-51780 (so default setting).

-Port Range forwarding (WEBGUI)
-Port Forwarding: all of them,one of them (WEBGUI)
-iptables -A INPUT -p tcp --dport 51777:51780 -j ACCEPT
-iptables -I INPUT 1 -p tcp --dport 51777:51780 -j ACCEPT
-iptables -A INPUT -p tcp --dport 51777:51780 -j logaccept
-iptables -I INPUT 1 -p tcp --dport 51777:5780 -j logaccept
-all those with FORWARD instead of input
-iptables -A INPUT -p tcp --syn -i "$1" --dport 51777:51780 -j ACCEPT

so basically every variation of every command i could find around this forum.
iptables -L shows all those rules are there (currently all at once)

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
logaccept  tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0
logaccept  tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTAB                                                  LISHED
DROP       udp  --  anywhere             anywhere            udp dpt:route
DROP       udp  --  anywhere             anywhere            udp dpt:route
ACCEPT     udp  --  anywhere             anywhere            udp dpt:route
logdrop    icmp --  anywhere             anywhere
logdrop    igmp --  anywhere             anywhere
ACCEPT     udp  --  anywhere             anywhere            udp dpt:5060
ACCEPT     0    --  anywhere             anywhere            state NEW
logaccept  0    --  anywhere             anywhere            state NEW
logdrop    0    --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0 flags:FIN,SYN,RST,ACK/SYN
ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:51777 flags                                                  :FIN,SYN,RST,ACK/SYN
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0
logaccept  tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0
logaccept  tcp  --  anywhere             anywhere            tcp dpt:51780
logaccept  tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0
logaccept  tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0
logaccept  tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0
ACCEPT     gre  --  192.168.1.0/24       anywhere
ACCEPT     tcp  --  192.168.1.0/24       anywhere            tcp dpt:1723
ACCEPT     0    --  anywhere             anywhere
logdrop    0    --  anywhere             anywhere            state INVALID
TCPMSS     tcp  --  anywhere             anywhere            tcp flags:SYN,RST/S                                                  YN TCPMSS clamp to PMTU
lan2wan    0    --  anywhere             anywhere
ACCEPT     0    --  anywhere             anywhere            state RELATED,ESTAB                                                  LISHED
logaccept  tcp  --  anywhere             3ddy                tcp dpt:16567
logaccept  udp  --  anywhere             3ddy                udp dpt:16567
TRIGGER    0    --  anywhere             anywhere            TRIGGER type:in mat                                                  ch:0 relate:0
trigger_out  0    --  anywhere             anywhere
logaccept  0    --  anywhere             Asus_Wl500gP
logaccept  0    --  anywhere             anywhere            state NEW
logdrop    0    --  anywhere             anywhere
logaccept  tcp  --  anywhere             anywhere            tcp dpts:51777:5178                                                  0
ACCEPT     tcp  --  anywhere             anywhere            tcp dpts:51777:5178

i'm still not connectable by peers. Also port scanners/testers time out on those ports.

I cannot think of anything else, so plz someone help me.

[gouryella]

I am not expert about iptables, but try to lower abstraction, use only in post-firewall:

iptables -D INPUT -j DROP
iptables -A INPUT -p tcp --dport 51777:51780 -j ACCEPT
iptables -A INPUT -p udp --dport 6881 -j ACCEPT
iptables -A INPUT -j DROP

i have no flags in iptables -L:

ACCEPT     tcp  --  anywhere             anywhere           tcp dpts:51777:51780 
ACCEPT     udp  --  anywhere             anywhere           udp dpt:6881

and by the way: Do you have static ip(active)?

[3ddy]

its the same result without any flags
i have dynamic ip from the ISP's DHCP server

[gouryella]

its the same result without any flags
i have dynamic ip from the ISP's DHCP server

ok, my new ideas:
Enable Firewall? No
Enable DoS protection? No

create new rule:

iptables -A INPUT -p tcp --dport 81 -j ACCEPT

flashfs save... and run easy webserver:

mkdir /opt/share/www
busybox_httpd  -p 81 -h /opt/share/www

from some pc, try to go http://www.canyouseeme.org and check port 81, if u succes the router is visible from internet, check(one of them must be opened) 51777-51780 too.

[3ddy]

well, i reinstalled from scratch now its working .
thanks for the help though.

also new problem:
if i restart the router i does not apply the iptables commands in post-firewall.
(iptables -L doesn't show them)
after applying through the terminal its all good

[gouryella]

well, i reinstalled from scratch now its working .
thanks for the help though.

also new problem:
if i restart the router i does not apply the iptables commands in post-firewall.
(iptables -L doesn't show them)
after applying through the terminal its all good

after editing iptables(post-firewall):

flashfs save && flashfs commit && flashfs enable && reboot

tip: i have for this easy script:

nano /opt/sbin/save
chmod +x /opt/sbin/save

contents:

#! /bin/sh
flashfs save && flashfs commit && flashfs enable && reboot

[3ddy]

Sure. i did that. It's in the post-firewall script after reboot. It doesn't get erased. It's just not applied.
Also i've found that What i have in the Port Trigger section of the webGUI also doesn't get applied at startup.
might be related.