FIXED: ipmasq with ICQ, IRC

2002-12-22 Thread Paul Johnson
On Thu, Dec 19, 2002 at 03:21:30PM +0100, DEFFONTAINES Vincent wrote: > iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT > (iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT) > iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT Believe it or not, thi

Re: ipmasq with ICQ, IRC

2002-12-20 Thread Rob Weir
On Thu, Dec 19, 2002 at 08:31:20AM -0800, Paul Johnson wrote: > On Thu, Dec 19, 2002 at 11:42:36PM +1100, Rob Weir wrote: > > It Just Worked for me, I think. The only config options I know of is > > the one that lets you specify which remotes ports are to be considered > > IRC or FTP (I think it's

Re: ipmasq with ICQ, IRC

2002-12-19 Thread Jamin W. Collins
On Thu, Dec 19, 2002 at 10:22:52AM -0700, Jeremy Nickurak wrote: > Jabber's icq functionality comes from a component called an "Agent" That would be a "transport" or "gateway": http://www.jabber.org/admin/componentadminguide.html#gateways -- Jamin W. Collins -- To UNSUBSCRIBE, email to [

Re: ipmasq with ICQ, IRC

2002-12-19 Thread Derrick 'dman' Hudson
On Thu, Dec 19, 2002 at 04:17:08AM -0800, Paul Johnson wrote: | On Thu, Dec 19, 2002 at 04:58:53PM +1100, Rob Weir wrote: | > Yes, there is. iptables has modules for ftp (to support non-passive | > mode) and irc (to support dcc, etc). They're called | > ipt_{conntrack,nat}_{irc,ftp}, IIRC. | | D

Re: ipmasq with ICQ, IRC

2002-12-19 Thread Jeremy Nickurak
On Thu, 2002-12-19 at 05:17, Paul Johnson wrote: > Someone should go tell the netfilter folks about the jabber icq server > and the licq client sometime. Re: jabber icq server Link? As far as I'm aware, there is no such thing as a "jabber icq server". Jabber's icq functionality comes from a compon

Re: ipmasq with ICQ, IRC

2002-12-19 Thread Jamin W. Collins
On Thu, Dec 19, 2002 at 08:31:20AM -0800, Paul Johnson wrote: > On Thu, Dec 19, 2002 at 11:42:36PM +1100, Rob Weir wrote: > > Yes, but DCC connections in IRC don't work, I haven't tried this under iptables recently. > FTP works passive mode only With iptables there are connection tracking modu

Re: ipmasq with ICQ, IRC

2002-12-19 Thread Paul Johnson
On Thu, Dec 19, 2002 at 11:42:36PM +1100, Rob Weir wrote: > It Just Worked for me, I think. The only config options I know of is > the one that lets you specify which remotes ports are to be considered > IRC or FTP (I think it's and 6667 and 21, by default). Does > masquerading work for you

RE: ipmasq with ICQ, IRC

2002-12-19 Thread DEFFONTAINES Vincent
> -Original Message- > From: Paul Johnson [mailto:[EMAIL PROTECTED]] > Sent: Thursday 19 December 2002 13:17 > To: debian-user List > Subject: Re: ipmasq with ICQ, IRC > > > On Thu, Dec 19, 2002 at 04:58:53PM +1100, Rob Weir wrote: > > Yes, there is. ip

Re: ipmasq with ICQ, IRC

2002-12-19 Thread Rob Weir
On Thu, Dec 19, 2002 at 04:17:08AM -0800, Paul Johnson wrote: > On Thu, Dec 19, 2002 at 04:58:53PM +1100, Rob Weir wrote: > > Yes, there is. iptables has modules for ftp (to support non-passive > > mode) and irc (to support dcc, etc). They're called > > ipt_{conntrack,nat}_{irc,ftp}, IIRC. > > D

Re: ipmasq with ICQ, IRC

2002-12-19 Thread Paul Johnson
On Thu, Dec 19, 2002 at 04:58:53PM +1100, Rob Weir wrote: > Yes, there is. iptables has modules for ftp (to support non-passive > mode) and irc (to support dcc, etc). They're called > ipt_{conntrack,nat}_{irc,ftp}, IIRC. Does this work automagically once inserted, or is there some trick to iptab

Re: ipmasq with ICQ, IRC

2002-12-19 Thread Rob Weir
On Wed, Dec 18, 2002 at 07:35:11AM -0800, Paul Johnson wrote: > Is there a way to allow protocols that may require connections to go > back to the client like ftp, irc and icq to do so while doing IP > Masquerading? I'm open to do this with a 2.2 or 2.4 kernel, either > way works for me. Yes, the

Re: ipmasq with ICQ, IRC

2002-12-18 Thread [EMAIL PROTECTED]
Paul Johnson <[EMAIL PROTECTED]> wrote: >Is there a way to allow protocols that may require connections to go >back to the client like ftp, irc and icq to do so while doing IP >Masquerading? I'm open to do this with a 2.2 or 2.4 kernel, either >w

ipmasq with ICQ, IRC

2002-12-18 Thread Paul Johnson
Is there a way to allow protocols that may require connections to go back to the client like ftp, irc and icq to do so while doing IP Masquerading? I'm open to do this with a 2.2 or 2.4 kernel, either way works for me. -- .''`. Baloo <[EMAIL PROTECTED]> : :' :proud Debian admin and use