[ALUG] [afnog] Problem with managing android updates,

[sami]

Hi Raphael,
There must me an issue with your firewall (or a misconfiguration ?),
Google syncs exclusively through ports 5228-5230.

BR

On 13/09/2017 17:15, raphael mollel wrote:
> Hi sami,
>
> Thanks for support but i  drop both tcp and udp from those port still
> i can access play store
>
>   ;;; Android UPDATE
>       chain=forward action=drop protocol=tcp src-port=5228 port=5228
> log=no 
>       log-prefix="" 
>
>  2    chain=forward action=drop protocol=udp src-port=5228 log=no
> log-prefix="" 
>
>  3    chain=forward action=drop protocol=udp src-port=5229 log=no
> log-prefix="" 
>
>  4    chain=forward action=drop protocol=tcp src-port=5229 log=no
> log-prefix="" 
>
>  5    chain=forward action=drop protocol=tcp src-port=5230 log=no
> log-prefix="" 
>
>  
>
>
> On Wed, Sep 13, 2017 at 6:29 PM, sami <samiaitali1990 at gmail.com
> <mailto:samiaitali1990 at gmail.com>> wrote:
>
>     Hi Raphael,
>     Try dropping both tcp and udp packets coming from these three
>     ports and
>     tell me what happens: 5228, 5229, and 5230.
>
>
>     On 13/09/2017 16:22, raphael mollel wrote:
>     > Hi Sami
>     >
>     > I done that but did not work
>     >
>     >   ;;; Android UPDATE
>     >       chain=forward action=drop protocol=tcp src-port=5228 port=5228
>     > log=no 
>     >       log-prefix="" 
>     >
>     >  2    chain=forward action=drop protocol=tcp port=5228 log=no
>     > log-prefix="" 
>     >
>     >  3    chain=forward action=drop protocol=udp port=5228 log=no
>     > log-prefix="" 
>     >
>     >  4    chain=forward action=accept protocol=tcp
>     src-port=2210,2211 log=no 
>     >       log-prefix="" 
>     >
>     >
>     > On Wed, Sep 13, 2017 at 6:12 PM, sami <samiaitali1990 at gmail.com
>     <mailto:samiaitali1990 at gmail.com>
>     > <mailto:samiaitali1990 at gmail.com
>     <mailto:samiaitali1990 at gmail.com>>> wrote:
>     >
>     >     Hi Raphael,
>     >     You could easily limit access to the Play Store, by adding a
>     rule on
>     >     port5228/tcp.
>     >     BR
>     >
>     >     -
>     >     Sami
>     >
>     >     On 13/09/2017 14:10, raphael mollel wrote:
>     >     > Hi everyone
>     >     >
>     >     >  This is Raphael from Tanzania asking help.
>     >     >
>     >     > I have problem with manage android updates,we have
>     conference hall
>     >     > which has capacity of host more than 500 people. Problem
>     started
>     >     when
>     >     > these people connect there phone on Wi-Fi connection and
>     most of
>     >     those
>     >     > phone start updating automatic which caused saturate and
>     slowness on
>     >     > the network .
>     >     >
>     >     > On the gateway  i use Mikrotik router  RB1100
>     >     > Bandwidth 10Mbps
>     >     >
>     >     >
>     >     > Regards
>     >     >
>     >     > Raphael
>     >     >
>     >     >
>     >     > _______________________________________________
>     >     > afnog mailing list
>     >     > https://www.afnog.org/mailman/listinfo/afnog
>     <https://www.afnog.org/mailman/listinfo/afnog>
>     >     <https://www.afnog.org/mailman/listinfo/afnog
>     <https://www.afnog.org/mailman/listinfo/afnog>>
>     >
>     >
>
>