Firewall – Open torrent ports in csf

If desired, you can restrict the RPC port ranges in a couple of ways:

1. IPSec. This is the more sane approach IMO, but many places do not use IPSec inside the corporate network, and many network monitoring/security people dislike it.
2. Restrict Port Ranges. This approach works, but is a real pain to configure and can have some performance implications.

QoS probably won't work because of buffering on the modem for outgoing traffic and that QoS needs to be set up at the ISP end for incoming. This article describes the problem problem with large buffering on modems.

Your best bet? Can you get your bit torrent user to configure their torrent client to leave a some room incoming and outgoing for the rest of you. Or set up hard traffic limits for them, my answer to this question includes some rules for doing shaping and discussions related to it.