I got program which use Winpcap.
There is no problem with Allow Most Mode, all works fine.
But with Block All Mode this program is not working. So i got question, cause i didnt find answer on winpcap page - what do i need to allow to work this program with OU. I am sure that program works fine on my PC and its not its error. I reinstalled it already and winpcap too but its the same result as before.
Please help me.
Thx for reply. I dont know what winpcap needs to work properly and it dont ask about anything. I am sure that program which uses it works correctly. I just cant find what to allow for WINPCAP to work it correctly ;/
And in Wizard mode there was no question about it.
Hi Firepost:) What type?:) TCP? Rawsocket? or what?
Welcome to the forum.
In Allow Most all traffic not blocked with a rule is allowed. So it's not surprising things work in this mode because it offers very little security. However, in Block Most (not Block All; Stop All, of course, stops everything) everything is blocked unless specifically allowed by a rule. This implies that you don't have proper rules set up and you need to do so.
First delete any rules you may have in the Application tab for your program. Next, set OP in the Wizard mode. Lastly allow the prompts for all legitimate connections your software makes. That will provide you with a set of rules that should work. Later you can make them tighter.
Hello taniepiwo,
Try this and see if it resolves the issue.
Choose Options/System/Global Rules (bottom of screen)
Add a new rule that has Allow Outbound type transit and see if that works. [C++] Fenetre Bloquer lors de la recuperation de packets sous ::
Donc si il y a des connaisseur dans WinPcap ou d'autres qui pourrai m'aider, j'ai perdu le fil avec le chat je ne comprends pas trop le mode d'emploi
http://www.cppfrance.com/forum/sujet-CPLUSPLUS-FENETRE-BLOQUER-LORS-RECUPERATION-PACKETS-SOUS-WINPCAP_748921.aspxHOME |
Yes i have tried all forums :) I dont expect that u download this game and start playing with me hehe but i wonder is it Outpost and winpcap cause Allow Most works fine and Block Most and Wizard doesnt. So i think its smt with firewall policy... Ill try to find an answer but not today:)
If U have smth what may be useful please write it here.
Forum of that server: http://www.eurobattle.net/showthread.php?t=38250.
Please dont tell me that other plp got the same:) It must be smth with firewall mode, where can i find technical information about packets which r blocked with OU.
And maybe i can post here Windump log - windump is program which shows Winpcap packets and its routing and somebody can help with recognize whats going on ?
What is it transit packets? I did it already - i deleted w3 process from applications and it asked about TCP to random IPs (Ips of other players) but it didnt ask about anything other... :(
Or how can i check what block it?
So ill write everything from the begining.
I play Warcraft III game via internet. W3 needs ports 6112-6119 TCP to work correctly and to host games. There is else program called Wc3 banlist which needs winpcap to work correctly. Winpcap is sniffer (or smth similar to really sniffer).
winpcap msn VBFrance.com | Visual Basic, VB6, VB.NET, VB 2005, VB ::
Il permet de connaitre d'un paquet TCP (ou UDP): -son adresse IP source -son port source -son adresse IP de destination -son port d; Source DÉMINEUR MODE 2
http://www.vbfrance.com/r/global.aspx?r=winpcap+msnHOME |
Malwares Ou Spywares - BitDefender Forum::
Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe .. ( experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
http://forum.bitdefender.com/index.php?showtopic=9148&mode=threaded&pid=41349HOME |
I am giving U posts from Wc3 banlist forum which i have written and answers to them.
1st post:
Hi all. I know that this topic repeats all the time but i didnt find an answer for my problem.
What ports UDP and TCP needs w3? or what other process to work fromall and pingall and banlast commands.
I got in Outpost firewall 4, two options - allow all traffic which was not specially blocked(all programs which was allowed to use internet works and all which was blocked doesnt work, but when smth wants use internet and was not blocked before it can do it). When i use it and my w3 got "allow" to internet all works.
But when i use other option - allow all traffic which was agreed to use internet and block all which was not blocked but wasnt allowed (grey icon), my banlist doesnt work. I cant pingall and fromall... i dont see games.
What shoul i do to use this second option (its better cause i only pass w3, ts2 and other programs will not update during game or smth) ?
Maybe somebody use Outpost and know how to configure it?
Plz help
End of 1st post
2nd post by hefting
Make sure you allow WC3Banlist to access port 80 (for /from) and send/receive ICMP (for /ping).
Also unblock C:windowssystem32driversnpf.sys.
End of 2nd post
3rd post
what others internet connections need BL to work properly? Please answer.
End of 3rd post
I was trying with ethereal but dont know what was it all the time.
4
So... nobay can help me?
When i use first option everything goes allright (ill check today if Antidownload works) but in second option BL doenst work.
I got ICMP packets set IN and OUT. I got 80 port for BL program IN and OUT. I got this npf.sys passed as a component which can be used (for what is it?). I got w3 game on ports 6112-6119 passed i can host games and all works fine except BL commands
This all shows that BL and W3 works fine but when i use first option only.
What packets i need to allow to internet trafic to repair this on second option of Firewall Preferences (all what i said up is the same for both fir. settings) i cant find any help on this forum ;/ Maybe UDP packets r used or smth else to work BL properly? Eventually maybe smth with WinPCap doesnt work corretly with 2nd firewall settings? How to check it? Maybe some windows process dont have permission?
Ill check today with Ethereal what packets r used with w3 and bl only when it works fine.
End of 4th
5
So...
I checked all what i wrote. I can send u ethereal log. But i didnt resolve my problem.
Propably i should unblock some ports for w3 or bl which with second option r closed or pass "temporary packets" but i dont know what is it. Nobady cen help here? I dont know what to do now?
End of 5
and 6
Maybe ask the guys at the outpost forum or call their support line. I guess they or the WinPCap guys can tell you more about the way the firewall interfers with WinPCap's driver.
End of 6 by Knarf
Then i came here cause i am sure that must be some preferences in Outpost. I was talking to my friend which said me that some time ago he was trying to use Outpost but got the same problem and didnt know how to resolve it.
So i am here on this forum today :) and ill do what You, dear Manny, asked me to do :)
Why i paste here all posts from BL forum? Cause maybe smth will be useful and may help to diagnoze my problem. I hope.
I was reading somewhere on Winpcap pages or google that it needs some packets (i dont remember the name Arp? ) ill try to fing this article and post it here.
I got selected records from blocked list in last 10 min. from time when i started applications to time when i closed it. Wc3BL dont work on Wizard mode too. There was no question except WAR3.EXE on HTTP(TCP:80) to adress: crl.microsoft.com and i allowed it(but its not nessesary i think). I attach my log.
My system is Win XP and OU ver. 4.0.
Sorry for the delay I got busy in a project that took an extra day.
Choose to add a new rule. Choose direction Outbound.
In the box at the bottom you will see "Where the Direction is Outbound and the packet type is local". Click the local and another prompt appears with local, transit, and NAT. Add the "transit" and see if it works. If so then experiment with the remote/local host option to tighten the rule.
That's surprising since changing the firewall policy makes a difference. Let's look at the logs and see what's being blocked. Clear all your logs and attempt to use it again while in the Wizard mode. Post anything you see blocked in any log except if it says "DNS Cache used instead."
Also please 1.
I dodnt know what was it, i changed my internet provider and now i use Ethernet card not ADSL modem and all works fine.
Transit packets is traffic originated on another pc and not intended for yours. However, I think in this case OP misidentified it perhaps because the packets were late coming back to you from eurobattle.net.
I don't have or use this game so perhaps somebody who does can help you further. Have you tried a forum search?
I see the following in your log:
3:55 war3.exe17:2 IN REFUSED TCP xx.6.241.88 3688www.eurobattle.net 6112 Block Transit Packets
It looks like you are not properly communicating with eurobattle.net. I don't know about the proper ruleset for this game, perhaps somebody else can come up with it but for now I would remove your war3.exe rules and start over following the wizard prompts.
 Where's The Advantage In Windows Genuine Advantage?
 Stocks Bounce After S&P Joins Bear Market
|
