/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
Robert Fulton <[EMAIL PROTECTED]> wrote:
>
> the problem occurs in accessing ICQ on the NT box, the university host
> a firewall and to get an ICQ connection, a Socks5 server is used, I am
> trying to get the Linux box to pass packets for the socks server
> directly through and return them but it does not work
This is not possible, I'm afraid. At least, not the way you're doing
it. The problem is the UDP forwarding, which ICQ requires. The packets
get forwarded by the masq box, but they do not have the correct port
numbers to be recognized by the SOCKS5 server, so they don't get
through. It is a basic protocol mismatch.
Fortunately, there is a simple solution: Install SOCKS on your masq
box. You can get the (free) source code from htttp://www.socks.nec.com/
and build it yourself. SOCKS5 has a perfect feature that you need: It
can redirect SOCKS traffic to a second server; that means your client
can call your local masq servers SOCKS server, and it will contact the
external SOCKS server, and pass the traffic through. It does work!
To give you a head start on configuration, here's some that I've set up:
/etc/socks5.conf:
auth 192.168.1. - n
noproxy 192.168.1. -
noproxy 130.168. -
set SOCKS5_V4SUPPORT 1
set SOCKS5_NOIDENT 1
set SOCKS5_PIDFILE /var/run/socks5.pid
socks5 - - external-socks-server
permit - - 192.168.1. - - -
deny - - - - - -
Hopefully you can fill in your own network numbers here. In particular,
the "130.168." network should be filled in with the correct network
numbers for your particular university's internal network. Also,
you should put the name of the external SOCKS server in place of
"external-socks-server". I hope this is relatively obvious. :)
--
[EMAIL PROTECTED] (Fuzzy Fox) || "Good judgment comes from experience.
sometimes known as David DeSimone || Experience comes from bad judgment."
http://www.dallas.net/~fox/ || -- Life Lessons
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
