zerotier / ZeroTierOne

A Smart Ethernet Switch for Earth
https://zerotier.com
Other
14.38k stars 1.68k forks source link

[Feature Request] Limit Port Range #1726

Open alatteri opened 2 years ago

alatteri commented 2 years ago

I'd like to be able to limit the port ranges used by ZT. I know it defaults to 9993 and then uses a bunch of random ports after that. I'd like to be able to limit the random port range so that I can open my firewall in a more structured manner than ALL udp.

Thanks.

laduke commented 2 years ago

Hello. Currently you can set the other two ports, so you'd have 3 static ports. I guess you could set them to 9994 and 9995.

This is only going to help on the outgoing/source side of the firewalls. You peers/destinations are going to be on random ports.

fathermrsing commented 1 year ago

Hello. Currently you can set the other two ports, so you'd have 3 static ports. I guess you could set them to 9994 and 9995.

This is only going to help on the outgoing/source side of the firewalls. You peers/destinations are going to be on random ports.

hello,is there a way to modify the destination port of the request (I tried modifying local.conf, but only the source port changed, not the destination port)? Is it possible to achieve by modifying the source code? If possible, can you tell me the location of the modification? Thank you!

glimberg commented 1 year ago

| is there a way to modify the destination port of the request

@fathermrsing No. Destination port depends on what ports the destination has ZeroTier running on. There's no way to locally control how other machines have their instances configured.