/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */


Before I lose any more hair...

I have a gateway Linux box doing DHCP, masquerading/NAT, and SQUID for my
local home LAN, and doing my dial-up to my ISP, and I cannot get Napster and
more importantly Quicken updates to work through it.

For purposes of this test/explanation I have disabled the firewall rules on
my gateway system, and done the simplest:

ipchains -A forward -i ppp0 -j MASQ

from a clean boot (IPsec disabled) and manually flushed (ipchains -f)
system.

>From a Win98SE box on the LAN:

I can't get Napster to work, It hangs on the MOTD, after finding and
connecting to the server just fine (it says). I've tried the "firewalled"
option on Install (V2.0 BETA 6 and 5), and even tried the "firewalled, but
can open a port" option and manually opened a port on the firewall. I also
tried Tapster running on a different Win box, just in case, same results.
Napster works fine if I dial direct on the PC, and via Win98SE ICS.

Quicken also hangs, and eventually times out on "Connecting to Financial
Institution) and eventually times out with an error dialog: "Quicken was
unable to obtain or update important information about this financial
institution. There May be a problem with the Internet connection or the
server. Please try again. [OL-231]". Quicken also works fine with a direct
dial up and ICS.

Other things I use from my Win98 desktops via the gateway:

POP3 connect to my ISP's mail server works.
HTTP and HTTPS work (both directly, and through SQUID).
DNS lookup works, to my server (I run an auth domain for my LAN) and my
ISP's, DHCP hands out the gateway's address to use.
AboutTime (win time setting from NTP servers) works.
Distributed.net client works.
ftp works (if the masq module is loaded).
NetMeeting 3.01 works (if the masq module is loaded).

The "ipchains -M -L" output while doing mail, trying Tapster, DNET, and
trying a Quicken update looks like:

IP masquerading entries
prot expire   source               destination          ports
TCP  14:56.42 dean12               208.184.216.221.napster.com 2739
(61011) -> ddi-tcp-1
TCP  00:05.13 dean12               work.mail.mindspring.net 2731 (61007) ->
pop3
TCP  01:55.66 dean12               208.184.216.223.napster.com 2738
(61010) -> 8875
TCP  00:17.06 dean12               work.mail.mindspring.net 2732 (61008) ->
pop3
TCP  01:53.63 dean12               208.184.216.221.napster.com 2728
(61005) -> ddi-tcp-1
TCP  14:53.63 dean12               206.154.105.121      2737 (61009) ->
https
TCP  00:10.43 dean12               proxy1.rwc.ca.us.proxy.distributed.net
2730 (61006) -> 2064

"dean12" is the DHCP assigned Win98SE box, 192.168.123.12

The gateway is SuSE 6.4 with a 2.2.14 kernel, MASQ, forwarding., etc
compiled in.

As I mentioned above it's really irritating that both applications will work
fine with a Windows98 Second Edition system with Internet Connection Sharing
loaded, not to mention a little embarrassing.

E-Mail: jldean-at-mindspring-dot-com if you want more configuration details
off this list.

REgards
James Dean

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES 
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to