In the ip_masq howto I got this ip chain rule and it works great. /sbin/ipchains -M -S 7200 10 160
Says it's for icq. In the past couple of days though ICQ has been having problems. -Ryan On Tue, 11 Jan 2000, David Bebout - Data Engines, Inc. wrote: > The ICQ masquerading module will probably help. I'm supporting a private > network of about 20 ICQ users, and their ICQ clients aren't even configured > as behind a firewall; it's completely transparent. > http://members.xoom.com/djsf/masq-icq/ > > The kernel module logs to syslog. My Debian 2.2 /etc/syslog.conf shows: > > kern.* -/var/log/kern.log > > This is an excerpt from /var/log/kern.log where the module is loaded at boot > time. > >Dec 20 23:57:20 pineapple kernel: ip_masq_icq: using TCP port range > 60200-61000 > >Dec 20 23:57:20 pineapple kernel: ip_masq_icq: loaded support on port > 4000/UDP > > This is another excerpt from /var/log/kern.log where UIN ######## is logging > in to ICQ. Each login to ICQ creates such an entry. > >Jan 10 09:20:22 pineapple kernel: ip_masq_icq: LOGIN > [EMAIL PROTECTED]:2058<-60224/32770, protocol v5 > > Good luck. > > David Bebout > [EMAIL PROTECTED] > Data Engines, Inc. > > ----- Original Message ----- > From: "Ralf G. R. Bergs" <[EMAIL PROTECTED]> > To: "Debian Firewalling Mailing List" <[email protected]> > Sent: Sunday, January 09, 2000 1:35 AM > Subject: Problems with ICQ over ipchains NAT? > > > > Hi there, > > > > I've started using ICQ a while ago, and I have massive problems like > follows: > > My client (ICQ 99b Beta 3.19 Win32) constantly loses connection to the > server. > > > > I'm using NAT (NAT host runs Linux 2.3.5 (can't upgrade at the moment)). > My > > firewall is quite tight (when seen from outside, I'm ACCEPTing everything > from > > inside of course.) > > > > Any idea what could be going wrong? Is there a FAQ that covers this topic > > (which ports to ACCEPT for ICQ to work properly)? Which are the proper > > settings inside ICQ? > > > > Thanks, > > > > Ralf > > > > > > -- > > Sign the EU petition against SPAM: L I N U X .~. > > http://www.politik-digital.de/spam/ The Choice /V\ > > of a GNU /( )\ > > Generation ^^-^^ > > > > > > > > -- > > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > > > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] >
