SHORT: ISP TRAVERSAL? PROTOCOL OBFUSCATION?
Since the official has released with its own obfuscation (encryption) method, to avoid the missunderstanding: ISP Traversal is not Protocol Obfuscation, and sad they both are not compatible. For regular user, if you're looking for eMule with encryption, please download from here: eMule 0.47c Official Release

You can get the PO settings under options>security>protocol obfuscation. Even if your ISP does not throttling P2P, but you may helps the other throttled users, to download and upload from them, while PO is on.

- - - - - - - - - - - -

ISP Traversal is the first anti-throttling technology implemented in Neomule v4.11, by David Xanatos, the Neo Modder. Soon, MODs like Sion, TK4, Arcronik, DreaMule, zzulBastard too has the ISP Traversal implemented. But still, things was not helping much among all the throttled users, because encryption works only when both side support it. Besides, it wasn't widespread enough to show it's qualities.

Under numerous of request, finally the Official eMule 0.47b released! Yeap, with Protocol Obfuscation. Because of PO introduction in 0.47b, ISP-T project has been suspended.

ISP Traversal? Protocol Obfuscation? Which is better? What can I say, as a user, they both are not compare-able, and they have done a great job. Thanx to open-source policy, Officials and Mods are always together, that's the right direction.

- - - - - - - - - - - -

ISP TRAVERSAL V3 GUIDE
http://forum.emule-project.net/index.php?showtopic=105353



STEP 1: SET YOUR CLIENT PORTS
(Options>Normal>Connection)

1. TCP for incoming data (es. 6432, by default 4662)

2. UDP for reask ping and KAD (es. 6442, by default 4672)

3. UDP for servers (you can set one, or use random which would be recommended)

• It is a good idea to change the ports from default because ISPs can (and often do) throttled/block these default ports, and some servers will not let you connect if you are using default ports. Any lower ports (unassigned) are recommended, 10000>ports>5000.
reference: http://www.iana.org/assignments/port-numbers
• Make sure you have all the ports forwarded in your router and firewall (see ?TIPS).
reference: http://www.portforward.com/

?TIPS
UDP port for servers, it has only a minor function (source asking on servers), and is actually not necessary to be forwarded. KAD AUX port has no related to the ISP Traversal, by default it was disabled. You can also just enable UPnP (Options>Neo>Network Settings>Universal Plug&Play) to allow NeoMule to automatically forward the necessary ports.


!NOTE IMPORTANT
Download and Upload Capacities/Limits that show in the image is just a example, same as Max Sources and Connection Limits. The Wizard has most of the common connection types preconfigured. Use it to find the correct settings for your line.
reference: http://www.emule-project.net/home/perl/help.cgi?l=1&topic_id=109&rm=show_topic


!FOR STREAMYX USERS
Not recommended and never use your full bandwidth to download and upload in eMule. Here is the capacities I would suggest for both RM66 & RM88 package users. Just fill the RED numbers into Wizard, and eMule will configure the correct settings for you.



- - - - - - - - - - - -



STEP 2: SETTING UP ISP TRAVERSAL
(Options>Neo>Network Settings>ISP Throttling Traversal)

4. Support ISP Traversal
NO - enable/disable the whole ISP Traversal system and extra AUX ports support
MINIMAL: TCP - enable only TCP encryption
MEDIUM: TCP, NAT - enable encryption for TCP and NAT traversal
FULL: TCP, NAT, UDP - fully enabled encryption for TCP, NAT traversal and UDP reask ping
• Recommended, users should usually have the ISP Traversal system fully enable (FULL: TCP, NAT, UDP).


5. Need ISP Traversal
UNNEEDED - no encryption required
• Use this mode if your ISP is NOT a throttling ISP. You will still be able to engage in encrypted transfer with other encryption enabled clients but your client won't force encrypted transfer.

PARTIAL - protect file transfer connections only
• In this mode, only connections used for transfer will be encrypted (but not regular file download reask connections, this may require a on the fly socket change in case of LowID downloader’s).
• Partial mode is also good for throttled users where the ISP is only throttling the datarate but not the connection amount.

IMPLICIT - encryption for all connections, except the first initial connection
• This is the mode you should be using if you DO have a throttling ISP. In this mode, if your client connects to an encryption enabled client, it will force secure communication.

PREFER UNENCRYPTED FILEDATA - unencrypted filedata
• With prefer unencrypted filedata enable, only the ED2k header and the standard data offset will be encrypted, the file payload in the transfer packets will be transferred unencrypted. Usually it should be extremly hard to identify emule traffic by the pure filedata transfer.
• Enabling saves some CPU time however the DX2 encryption is so fast that if you don’t expect download speeds above 10 MB/s it want be noticeable at all. (Generally it is not recommended to enable this feature)


6. Encrypted AUX Ports
LEGACY PORT – port that can be connected without having additional information’s about the port/client
• The port is the only AUX port useable for v1 and v2 clients.
• It is also used by v3 for the initial connection to clients only when we know that he supports encryption from his userhash.

SECURE PORTS - TCP for incoming connections
• v3's AUX ports are protected by individual random connection parameters, it cannot be detect by port scanning, it will only show to a trusted client that we are uploading to or downloading from.
• Enter some random ports and/or ranges for encrypted connections (es. 10069,21570,35680/46660-46669). Users should specify at least three ports.


7. Traversal ISP-T Info Over Userhash
• Translate ISP-T configuration into specified characters over the userhash thorugh Legacy Port. That mean it can be seen as a completly new hash. This enable direct secure connections without the need of a plain initial connection.
• The specified characters can be interpretate/recognize only by the ISP-T v3 clients, NOT v1 & v2.
• Enable recommended. It should be worth a one time lost of remote credits, for a better ISP-T support.
• Actually if our userhash is changed, that mean official and other mods will read us as a new client. So all the remote credits we collected before with the old hash will be lost.

- - - - - - - - - - - -

So, at the end, we'll have,
5 TCPs(1 basic and 4 for ISPT) + 2 UDPs(1 for KAD and 1 for servers)
Take notes, port numbers are only for example, you can/must choose your own ports.
Make sure you have all these ports forwarded in your router and firewall. Port needs to be forwarded, basic TCP for incoming data, UDP for reask ping and KAD, the legacy port and the secure ports (see ?TIPS).
reference: http://www.portforward.com/

?TIPS
UDP port for servers, it has only a minor function (source asking on servers), and is actually not necessary to be forwarded. KAD AUX port has no related to the ISP Traversal, by default it was disabled. You can also just enable UPnP (Options>Neo>Network Settings>Universal Plug&Play) to allow NeoMule to automatically forward the necessary ports.


!NOTE IMPORTANT
About ISP Traversal
• Encryption (obfuscation) is only possible if both sides use encryption.
• It only protects (limited) against man-in-the-middle attacks.
• It does not increase your privacy since your data is still visible to other eMule clients that use the same encryption.
• Even if your ISP does not throttling P2P, this feature may help you upload to or download from users which have a bad ISP.
reference: http://www.filesharingweb.de/mediaWiki/index.php/English:Protocol_obfuscation


END OF GUIDE

- - - - - - - - - - - -

Tell us in this wiki that your isp is throttling or blocking eMule.
http://www.filesharingweb.de/mediaWiki/index.php/English:List_of_Bandwidth_throttling_ISPs

Currently MODs that support ISP Traversal. For general discussion and download, please visit:
Neo Mule V4.20a (0.47a)
Emule 0.47a Sion V1.3
Tk4 Mod 1.5e (based On Emule 47a)

Prefer ISP Traversal Guide in other language? Please visit:
Russian: eMule-Rus.Net (provide by freshirc)
French: Tutoriel [Free] : eMule avec l'ISP d'activé (provide by Nicolas_FR)
Portuguese: ISP Traversal Guide!! (provide by taurusmind, registration required)

ISP Traversal Testfile
http://forum.emule-project.net/index.php?showtopic=104895


- - - - - - - - - - - -

CREDIT
ISP Traversal by David Xanatos.
ISP Traversal Guide by David Xanatos, LorenzoC, Death_Hilarious. Screenshot by playsafe69.

Credit to all the members who have contribute to this guide and test, especially the Neo team.

This post has been edited by playsafe69: May 11 2007, 04:07 PM