/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
Hi there.
Peer to peer connections don't work because the system at the other end
knows you as your cable modem's IP address. When it sends a packet to that
address to a specific port (say 1035 for phonefree), your linux box receives
it, but doesn't know what to do with it unless you set up a mapping to your
internal IP address. An example mapping for phonefree.com which,
ironically, I set up last night is:
ipmasqadm autofw -A -r tcp 1035 1035 -h 192.168.0.x
ipmasqadm autofw -A -r udp 1034 1034 -h 192.168.0.x
where x is the last digit of the IP of the machine running phonefree.
This way, linux automatically redirects any packets coming in on tcp port
1035 and udp port 1034 to your internal machine, and phonefree works. It's
the same story for ICQ, AIM, and all other peer-to-peer connections.
ICQ can be set up without using kernel modules. Set up your ICQ to use a
firewall with an open port range (not the safest way to do it mind you).
Say you selected to use ports 2000 to 4000 in ICQ, then you'd set up on your
box:
ipmasqadm autofw -A -r tcp 2000 4000 -h 192.168.1.x
once again replacing x with the last digit of the IP of the internal machine
running ICQ.
Hope this helps. Could go on forever about this stuff, but this gives you a
basic idea of what's happening... Good luck!
Robert Cotran, B. Eng.
IT Manager - Directeur Informatique
Densigraphix Kopi Inc.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf
Of Keith Warno
Sent: Tuesday, June 06, 2000 11:22 AM
To: [EMAIL PROTECTED]
Subject: [Masq] Newbie questions
/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
Hello all.
I recently acquired cable modem at home and have a linux box (kernel 2.2.15)
doing vanilla masquerading for 192.168.0.0/24 (which currently has two
machines running win98). The linux box obtains its "world" address via DHCP
and I'm using the example script from the IP-Masquerade-HOWTO I found at
sunsite.unc.edu to set up the ipchains rules.
All seems to be working well. However I understand there are problems when
direct connections are wanting to be made to boxes in the DMZ. Ie, icq file
transfers, AIM file transfers, and, as I noticed last night, phone calls via
phonefree.com :)
I'm rather confused as to why direct connections (peer-to-peer or whatever)
don't work to begin with. Any explanation would be appreciated!
I've searched the mailing list about the ICQ issue. Where is the
ip_icq_masq module to be found? Also is there a means to allow things such
as icq & AIM file transfers w/o having to use special kernel modules?
I'd also like to use phone free, which, as their website says:
For actual voice conversations, which are done peer-to-peer, you will need
to open the following ports through your firewall:
TCP: 1035
UDP: 1034
But I'm not sure how to get it to happen; I've never had to do firewalling &
masquerading before this past Saturday. :)
Thanks for yer help,
kw
PS -- The IP-Masquerade-HOWTO claims that the masquerading code has changed
a lot in kernel 2.4.0. Any ideas on how it has changed? There is a test
release of 2.4.0 at kernel.org but I haven't dared to poke at its source.
/* Keith Warno
** Developer & Sys Admin
** http://www.HaggleWare.com/
*/
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS
INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
