Security

Posted: Fri Mar 18, 2005 6:13 pm

What is the security for this program by chance. I mean being a FREE program im sure that the security is, well quite lax. Then the issue of connecting. Your opening a port on your computer to play a game, then that opens up your whole network if you have one.

When i opened up xlink my firewall went nuts from attacks. There is foul play going on...or i just don't know what im talking about.

So someone enlighten me.

*Notice all attempts in calling me a childish names and attempts to start a flame war will go unnoticed*

Team XLink Administrator Joined: 21 May 2004 Posts: 3354

Have you searched the forum? I know we have gone over this a few times in the past. But if it needs to be revisited I am sure we can assist.

Posted: Fri Mar 18, 2005 7:27 pm

First few pages of results on searching security

Other than a few "its 100% safe" which sorry, thats IMPOSSIBLE in todays world.

Maybe you- or some other admin- should sticky the security protocols xlink runs to show everyone that is really is safe...if it is.

I mean..my firewall got hit like 6 times in a matter of seconds....is that safe to you. I mean it could just be a scan to check ports...but then again it could be someone abusing your service. Which while i used it, was excellent. very comparible to xbox live- minus a few options...but down to game play and lag issues. Its right near comparible.

Team XLink Administrator Joined: 21 May 2004 Posts: 3354

I am not sure of your knowledge in systems so can you give some feedback on the answer you would like? Real technical, somewhat technical, or basics?

Posted: Fri Mar 18, 2005 7:42 pm

ok..the last page on the search explained a bit more.

Im rusty on networking...been a long time since i've messed with anything.

So if i do the port forwording to 3000 or whatever it was... I wouldnt have to worry about my computer getting hacked correct? Since i have not done the prot forwarding that would explain why my firewall is picking up hits...

Well lets have your answer detailed enough where i dont have to break out the books.lol

Joined: 30 Jul 2006 Posts: 0

Right..

I appreciate your concern, but Kai is no threat to your network security. The "attacks" as you call them, are pieces of data arriving on your router. It might call it "udp flood protection", it might just call it an attack.

All data arriving on Kai is processed in checked buffers, and the source IP and port is checked against a list of other users in your arena. Furthermore, each packet is confirmed as being console data before it gets injected.

TD

Posted: Fri Mar 18, 2005 8:10 pm

Thanks for the replies...learning how it all works.

Now i was talking with a friend that has this. He told me the program doesnt work unless i port forward? Well i have never done that. So how can i get it to work if i didnt do it?

Now if port forwarding protects me from someone hacking into my computer...how do i do it. I didnt really find a decent post when i searched it.

One gave me a link on how to port forward for my router, but really wasnt clear and complete on where to do it at and what not... Im assuming cmd and commad ipconfig?

Posted: Fri Mar 18, 2005 9:05 pm

If the program works without you forwarding a port, use it like that - it is ostensibly more secure.

XC

Posted: Fri Mar 18, 2005 9:43 pm

Try to play without port forwarding first.

Posted: Fri Mar 18, 2005 9:58 pm

I have done it without forwarding a port.

Quote:

If the program works without you forwarding a port, use it like that - it is ostensibly more secure.

XC

Explain this. If im connected directly to the port how would it be more secure.
Isnt the point of port forwarding to make it secure? ex...saying im here...but im really 10 blocks down the road. Thats what port forwarding is right?

Joined: 30 Jul 2006 Posts: 0

OK, an explanation he wants Smile

If you dont use a specific port, kaiEngine binds to local port 0 - ie dynamic from the OS's pool of available ports. The vast majority of routers these days operate a PAT policy whereby outgoing UDP packets create a temporary "hole" in the router, through which packets from *only the contacted machines* can return. kaiEngine maintains these holes, thereby enabling bidirectional UDP comms with any number of endpoints, without needing a port forward.

These temp. mappings decay somewhere between 5 and 60 seconds after last use - therefore closing Kai closes the holes.

Compare this to manually opening a UDP port on your router - which would always be open..

TD

Quote:

ex...saying im here...but im really 10 blocks down the road. Thats what port forwarding is right?

No... www.google.com

Posted: Fri Mar 18, 2005 10:17 pm

Yea...*cough* thats exactly what i was goin to say Laughing

Posted: Sat Mar 19, 2005 5:59 am

Ok so it really doesnt matter if i port forward or not. Since the engine covers these "holes" i make when i open the system up.

Then why do people say to port forward?

or do i have this all backward?

Posted: Sat Mar 19, 2005 6:17 am

MAXST2 @ Fri Mar 18, 2005 9:59 pm wrote:

Then why do people say to port forward?

Quote:

If you've been following the Quick Start Guide then you would have been checking to see if Network Reachable reports as 'Yes'. If it says 'Not yet', then you know you've got to port-forward.

Alternatively, if people tell you that your ping always shows 'Establishing', you'll need to port-forward

^^taken from FAQs

Posted: Sun Mar 20, 2005 2:59 am

If you port-forward, you are not just port-forwarding for Kai, the port is *ALWAYS* open. If you're not port-forwarding, Kai's using a random port (already better), and once Kai's closed, the ports closed (even better).

Now, some people behind NAT devices don't let Kai use those random ports, so the only alternative is to port-forward (which most of these devices all do).

Posted: Sun Mar 20, 2005 3:52 am

hi this is slightly off topic but i used to use zonealarm as a firewall then changed over to sygate personal firewall. the only way i could get it to run with kai was to "disable driver level protection"
just wondering what this meant and if its an issue if this has to be disabled.

my setup is unfortunately a usb modem and my xbox connected to my comp via a NIC