udp2raw icon indicating copy to clipboard operation
udp2raw copied to clipboard

Blocked by firewall with faketcp mode

Open k79e opened this issue 4 years ago • 7 comments

English Only (except for bug reporting). When connection stopped I restarted the program.

I observed the server is ready very fast. But client is not ready. It always connection. It changes from phrase 2 to 1 then 2 to 1 and always not successful. (Sometimes it will succesful but if you restart app then it won't success anymore) I find that there don't exist respond from server when client is fail to connect. It always send out packet but no packet will return. And this happens after server ready!

And if I'm not mis-remember when server is ready. It's log is stopped but client's log is flooding.

k79e avatar Mar 20 '21 10:03 k79e

Having similar issue. No SYN ACK is actually sending back.

image

Using udp2raw_arm server with udp2raw_mp client.

ttimasdf avatar Apr 14 '21 09:04 ttimasdf

same problem here. firewall did't think it is a tcp connect. maybe this is the reason for the traffic interruption?

PikuZheng avatar Apr 24 '21 08:04 PikuZheng

Please provide details (e.g. config and environment) for reproducing the problem. 

What you really observed is "udp2raw not able to connect". As far as I can see "blocked by firewall" is only your own guess. Please stop using misleading claims before the reason is addressed.

Many reasons might cause udp2raw not able to connect, for example: mistakes in the conf, VPS doesn't support raw socket well, NAT device not compatible with the way fakeTCP works, some local iptables rule conflict with udp2raw's.

wangyu- avatar Apr 25 '21 11:04 wangyu-

Not my guess. I see there don't have respond from server how can it's guess?

I observed the server is ready very fast. But client is not ready.

Server ready very fast then client never ready. And at the same time when client failing and start to connect infinitly, the server's log never grow anymore.

Sometimes it will succesful but if you restart app then it won't success anymore

There are successful connections and it's not nat problem because I don't use nat.

conf is fine because it's tested on local environment without problem

It usually useable when it's 1st time you started the connection in a day but after some time it stopped working

VPS doesn't support raw socket well How can I know whether server support it well or not?

k79e avatar Apr 25 '21 12:04 k79e

Maybe I transmitted the data without encrypt and there is someting caused block? I'm not very sure. Hi @ttimasdf can you reproduce it today?

k79e avatar Apr 25 '21 13:04 k79e

According to my observation, my connection-tracking firewall see a TCP Syn connect but not (never) estabished. It'll try to cut the connection after timeout. After that I changed --seq-mode from 3 to 4. And the firewall CAN identify it as a TCP Established connect. That's better.

But still I have traffic interruption problem each 2 or 3 hour with about 20 seconds interruption. I don't know if it is related with firewall.

PikuZheng avatar May 02 '21 14:05 PikuZheng

@k79e try --seq-mode 4 and the firewall will think it is a established TCP connection.

PikuZheng avatar May 02 '21 14:05 PikuZheng