/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
On Wed, Jun 21, 2000 at 05:12:02PM -0400, Slack Mann wrote:
>
> Thanks to the people who worked to make IP-Masq a functional part of my
> internet experience.
>
> I do have a question, but first let me give you a rundown of my setup.
>
> We have three computers on our LAN:
> Workstation 1 is running IP: 192.168.1.77 on eth0
> Workstation 2 is running IP: 192.168.1.177 on eth0
> Gateway computer is running internal IP: 192.168.1.1 on eth1
> Gateway computer is running external IP: 14.15.18.182 on eth0
>
> Workstation 1 is running Slackware Linux 7 (kernel 2.2.14)
> Workstation 2 is running Mandrake Linux 7 (kernel 2.2.14-1mdklinus)
> Gateway is running Mandrake Linux 7 (kernel 2.2.14-1mdklinus)
>
> All IPs are STATIC.
>
> Here is my problem:
> I have MASQ set up so that both workstations can freely access the internet
> correctly. It works great!
> I'm using the module ip_masq_irc to get DCCs to work through the gateway.
> (ports=6666,6667,6668,6669,7000,1024,1025,1026,1027,1028,1029)
>
> On Workstation 1 or 2, I connect to dallas.tx.us.undernet.org on port 6667.
> DCC sends and DCC receives work just great, no problems.
>
> On Workstation 1 or 2, I connect to the ircd on the gateway machine
> (14.15.18.182 port 6667). DCC receives work just great, but DCC sends do not
> work at all.
>
> My questions are:
>
> Why does DCC work just fine if I'm connected to an external IRC server, yet
> sends do not work if I'm connected to our IRC server on our Gateway machine?
I'm guessing (I have no proof) that the irc module allows you to
pierce the firewall. If you don't have a rule such as:
/sbin/ipchains -A input -j ACCEPT -i eth1 192.168.1.0/24 irc
(I haven't tested the above.)
> What options do I have to get this to work right?
>
> Thanks in advance for any help that is offered to me, and if someone ives me
> a really good answer that works, maybe I'll buy you a pizza. :P
>
> Let Linux Ring,
>
> Slack Mann
--
Aaron Ghent.
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
