The ICQ masquerading module will probably help. I'm supporting a private network of about 20 ICQ users, and their ICQ clients aren't even configured as behind a firewall; it's completely transparent. http://members.xoom.com/djsf/masq-icq/
The kernel module logs to syslog. My Debian 2.2 /etc/syslog.conf shows: > kern.* -/var/log/kern.log This is an excerpt from /var/log/kern.log where the module is loaded at boot time. >Dec 20 23:57:20 pineapple kernel: ip_masq_icq: using TCP port range 60200-61000 >Dec 20 23:57:20 pineapple kernel: ip_masq_icq: loaded support on port 4000/UDP This is another excerpt from /var/log/kern.log where UIN ######## is logging in to ICQ. Each login to ICQ creates such an entry. >Jan 10 09:20:22 pineapple kernel: ip_masq_icq: LOGIN [EMAIL PROTECTED]:2058<-60224/32770, protocol v5 Good luck. David Bebout [EMAIL PROTECTED] Data Engines, Inc. ----- Original Message ----- From: "Ralf G. R. Bergs" <[EMAIL PROTECTED]> To: "Debian Firewalling Mailing List" <[email protected]> Sent: Sunday, January 09, 2000 1:35 AM Subject: Problems with ICQ over ipchains NAT? > Hi there, > > I've started using ICQ a while ago, and I have massive problems like follows: > My client (ICQ 99b Beta 3.19 Win32) constantly loses connection to the server. > > I'm using NAT (NAT host runs Linux 2.3.5 (can't upgrade at the moment)). My > firewall is quite tight (when seen from outside, I'm ACCEPTing everything from > inside of course.) > > Any idea what could be going wrong? Is there a FAQ that covers this topic > (which ports to ACCEPT for ICQ to work properly)? Which are the proper > settings inside ICQ? > > Thanks, > > Ralf > > > -- > Sign the EU petition against SPAM: L I N U X .~. > http://www.politik-digital.de/spam/ The Choice /V\ > of a GNU /( )\ > Generation ^^-^^ > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] >
