[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RE: ipmasq with ICQ, IRC

> -----Original Message-----
> From: Paul Johnson [mailto:baloo@ursine.dyndns.org]
> Sent: Thursday 19 December 2002 13:17
> To: debian-user List
> Subject: Re: ipmasq with ICQ, IRC
> On Thu, Dec 19, 2002 at 04:58:53PM +1100, Rob Weir wrote:
> > Yes, there is.  iptables has modules for ftp (to support non-passive
> > mode) and irc (to support dcc, etc).  They're called
> > ipt_{conntrack,nat}_{irc,ftp}, IIRC.
> Does this work automagically once inserted, or is there some trick to
> iptables to prod it into service?  I suspect the latter is true, as
> I've tried it with just inserting the modules and it didn't 
> work as expected.

You probably need these rules :
iptables -A INPUT -m state --state RELATED -j ACCEPT
(iptables -A FORWARD -m state --state RELATED -j ACCEPT)
iptables -A OUTPUT -m state --state RELATED -j ACCEPT

depending on your actual filtering config.

Reply to: