Connection test fails yet HighID from eDonkey ?

[eddyreen]

Everything was working fine then CRASHED
rebooted,
Shareaza 2.4.0.0 would no longer connect to gnutella ?
Norton Internet Security 2007 failed to start even after multiple reboots.

UnInstalled 'Norton Internet Security 2007'
Updated to Shareaza 2.5.2.0
rebooted,

Great now shareaza crashes when converting partial downloads
Removed partial download, starting from 0 again

Router forwards port 9111 to local pc 'static' as usual
Windows firewall disabled
No more Symantec services as expected
Shareaza:
using port 9111
can accept incoming connections: Auto
eDonkey ForceHighID: False

Starting Shareaza
connected to eDonkey HighID

Doing the connection test http://atdot.ch/connectiontest/
Long timeout: yes
Your IP is 80.200.35.134 <------------
TCP: has been accepted
UDP: no answer has been received

What is going on here ?

10 mins later i get back to http://atdot.ch/connectiontest/
Long timeout: yes
Your IP is 80.200.35.134 <------------
TCP: has been accepted
UDP: an answer has been received

10 mins later i get back to http://atdot.ch/connectiontest/
Long timeout: yes
Your IP is 80.200.35.134 <------------
TCP: has been accepted
UDP: no answer has been received

Is this a problem with my client or with this website ?

If i make Shareaza not to force HighID &have it auto detect if my client can accept incoming connections
&then i get HighID from eDonkey does this mean everything is ok ?

Even if if the website says i have a problem ???

Confused !

[brov]

Check that you're forwarding UDP as well...

[old_death]

[eddyreen]

[eddyreen]

This is weird

Every time Shareaza is trying to connect to gnutella, the connectiontest says my UDP is fine then,
from the moment Shareaza has connected succesfully the connection test says my UDP has failed
Yet Shareaza is NOT giving me any red text i am behind a NAT/Firewall

What the hell is going on ?

And it will be months until my server is ready again to host unattended installations DAMN

[old_death]

Just disable the integrated firewall feature of your router, that's what I had to do myself on my own device to keep it from generating me connection problems because of detected so-called "security threats".

[eddyreen]

Thanks old_death problem solved

[old_death]

So what did you do exactly to solve the issue? If you tell us what you did to solve your problem, we might be able to help others more efficient in future...

[eddyreen]

Well, I first increased these settings:

SPI &Anti-DoS firewall protection:
-Maximum incomplete TCP/UDP sessions number from same host from 10 to 50 <== maximum
-Maximum half-open fragmentation packet number from same host from 30 to 100 <== not at maximum

This seemed to solve the issue but after a day, when the modem disconnects &reconnects for a short period of time to get a new IP from our ISP it prevented G2 to connect to any hosts .
&the same warning popped up in the modems log *** SYN FLOOD *** outbound ......

Since i could not increase Maximum incomplete TCP/UDP sessions number from same host any further &other settings like decreasing Half-open fragmentation detect sensitive time period seemed to have 0 effect, I decided to turn off SPI &Anti-Dos firewall protection altogether.

I believe now it is not that unsafe as i once thought since i am still firewalled (using port-forwarding on the router)
&Windows XP for example has a limited ability build in to protect us from these 'attacks' .

I just never had the guts before to turn it off completely because of the security risk

You convinced me to check it out &just disable the whole thing .

Just don't attack me alright