Re: Problems with ICQ over ipchains NAT?
In the ip_masq howto I got this ip chain rule and it works great.
/sbin/ipchains -M -S 7200 10 160
Says it's for icq. In the past couple of days though ICQ has been having
problems.
-Ryan
On Tue, 11 Jan 2000, David Bebout - Data Engines, Inc. wrote:
> The ICQ masquerading module will probably help. I'm supporting a private
> network of about 20 ICQ users, and their ICQ clients aren't even configured
> as behind a firewall; it's completely transparent.
> http://members.xoom.com/djsf/masq-icq/
>
> The kernel module logs to syslog. My Debian 2.2 /etc/syslog.conf shows:
> > kern.* -/var/log/kern.log
>
> This is an excerpt from /var/log/kern.log where the module is loaded at boot
> time.
> >Dec 20 23:57:20 pineapple kernel: ip_masq_icq: using TCP port range
> 60200-61000
> >Dec 20 23:57:20 pineapple kernel: ip_masq_icq: loaded support on port
> 4000/UDP
>
> This is another excerpt from /var/log/kern.log where UIN ######## is logging
> in to ICQ. Each login to ICQ creates such an entry.
> >Jan 10 09:20:22 pineapple kernel: ip_masq_icq: LOGIN
> ########@192.168.1.75:2058<-60224/32770, protocol v5
>
> Good luck.
>
> David Bebout
> db@dataengines.com
> Data Engines, Inc.
>
> ----- Original Message -----
> From: "Ralf G. R. Bergs" <rabe@RWTH-Aachen.DE>
> To: "Debian Firewalling Mailing List" <debian-firewall@lists.debian.org>
> Sent: Sunday, January 09, 2000 1:35 AM
> Subject: Problems with ICQ over ipchains NAT?
>
>
> > Hi there,
> >
> > I've started using ICQ a while ago, and I have massive problems like
> follows:
> > My client (ICQ 99b Beta 3.19 Win32) constantly loses connection to the
> server.
> >
> > I'm using NAT (NAT host runs Linux 2.3.5 (can't upgrade at the moment)).
> My
> > firewall is quite tight (when seen from outside, I'm ACCEPTing everything
> from
> > inside of course.)
> >
> > Any idea what could be going wrong? Is there a FAQ that covers this topic
> > (which ports to ACCEPT for ICQ to work properly)? Which are the proper
> > settings inside ICQ?
> >
> > Thanks,
> >
> > Ralf
> >
> >
> > --
> > Sign the EU petition against SPAM: L I N U X .~.
> > http://www.politik-digital.de/spam/ The Choice /V\
> > of a GNU /( )\
> > Generation ^^-^^
> >
> >
> >
> > --
> > To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> > with a subject of "unsubscribe". Trouble? Contact
> listmaster@lists.debian.org
> >
>
>
> --
> To UNSUBSCRIBE, email to debian-firewall-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
Reply to: