Re: Problems with ICQ over ipchains NAT?
The ICQ masquerading module will probably help. I'm supporting a private
network of about 20 ICQ users, and their ICQ clients aren't even configured
as behind a firewall; it's completely transparent.
http://members.xoom.com/djsf/masq-icq/
The kernel module logs to syslog. My Debian 2.2 /etc/syslog.conf shows:
> kern.* -/var/log/kern.log
This is an excerpt from /var/log/kern.log where the module is loaded at boot
time.
>Dec 20 23:57:20 pineapple kernel: ip_masq_icq: using TCP port range
60200-61000
>Dec 20 23:57:20 pineapple kernel: ip_masq_icq: loaded support on port
4000/UDP
This is another excerpt from /var/log/kern.log where UIN ######## is logging
in to ICQ. Each login to ICQ creates such an entry.
>Jan 10 09:20:22 pineapple kernel: ip_masq_icq: LOGIN
########@192.168.1.75:2058<-60224/32770, protocol v5
Good luck.
David Bebout
db@dataengines.com
Data Engines, Inc.
----- Original Message -----
From: "Ralf G. R. Bergs" <rabe@RWTH-Aachen.DE>
To: "Debian Firewalling Mailing List" <debian-firewall@lists.debian.org>
Sent: Sunday, January 09, 2000 1:35 AM
Subject: Problems with ICQ over ipchains NAT?
> Hi there,
>
> I've started using ICQ a while ago, and I have massive problems like
follows:
> My client (ICQ 99b Beta 3.19 Win32) constantly loses connection to the
server.
>
> I'm using NAT (NAT host runs Linux 2.3.5 (can't upgrade at the moment)).
My
> firewall is quite tight (when seen from outside, I'm ACCEPTing everything
from
> inside of course.)
>
> Any idea what could be going wrong? Is there a FAQ that covers this topic
> (which ports to ACCEPT for ICQ to work properly)? Which are the proper
> settings inside ICQ?
>
> Thanks,
>
> Ralf
>
>
> --
> Sign the EU petition against SPAM: L I N U X .~.
> http://www.politik-digital.de/spam/ The Choice /V\
> of a GNU /( )\
> Generation ^^-^^
>
>
>
> --
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
>
Reply to: